Thursday, November 07, 2013

Gopi ko Topi

"Sooryange Torch ;)" said one, "Gopige Topi" said another (Good one friends, got a header for my article).  All in response to my Facebook status update yesterday, that my Credit card data was hacked and that I had become a victim of data skimming. Needless to say, given the good following I have have on Facebook and with enough comments on whatever I post, this was bound to happen.  Friends used every medium from BBM, Facebook chat to Whatsapp to ask me what had happened and how.  So, here goes the events of yesterday. The purpose of this blog is not only to give you an account what happened, but also to educate you what do if such thing happens with you.

As headed home, I received a call from HDFC Bank asking if I had used my credit card on any International website for a amount of 16K (obviously INR).  The card was in question my old credit card.  I had just got a new card in lieu of it and it should have automatically been cancelled although technically it was due to lapse by the end of this month. By then I had received one message stating an amount of Rs 710 was transacted (on some hongkong based website) and 3 messages stating my transaction is pending due to security reason after which I received the call.  

Remember that Verified with Visa & Master Card Secure, the additinal security measure is not needed during an International transaction, so merely your card number, CVV code and date of expiry can be used to make an International transaction on a website.  Immediately I had to hotlist my card by calling the bank which I duly did.  

So what really wrong and how ? 

Well, this is called skimming. More on this can be found on http://en.wikipedia.org/wiki/Credit_card_fraud#Skimming

 South East Asian countries are notorious for such skimming. In case you visited one in the recent past, chances are that your credit card data may have been hacked.  The bank, once they come to know that your card has been used in such countries, usually calls you up to replace your card with a new one (for free of course). So please make it a point to replace you credit cards after trip to such countries.

What is to be done if you become a victim of Skimming?

Usually as mentioned in the above article, the issuer can easily detect Skimming (as my bank did), so here's what you got to do.

1. Block the card immediately either thru Internet banking or Phone Banking
2. File a complaint with your bank by email or using internet banking
(Note that, my card was with me.  In case its lost or stolen and then an unauthorized transaction happens, you then need to file a police complaint too)
3. Every bank has a dispute form. It has several reasons, just choose your reason, sign and send it to the bank.  The bank has to address your complaint within a reasonable time.  But here's the catch. Once the amount is debited you have to pay it, else your name will go on the CIBIL database as a defaulter.  Once the bank is satisfied it was fraudulent transaction, it will credit back the amount.

How was I saved ?

The card which was used had to be deactivated upon the issue of new card.  The card limit was already Zero as per my last month statement and it could not be in anyway used.  I presume this is what has saved me (altough its not yet confirmed)

So, all you travellers beware or as they say in Konkani "B" Careful :)

 Globe trotting has its own set of problems, thats what I realised yesterday.