<![CDATA[Consumerist: Identity]]> http://cache.gawker.com/assets/base/img/thumbs140x140/consumerist.com.png <![CDATA[Consumerist: Identity]]> http://consumerist.com/tag/identity http://consumerist.com/tag/identity <![CDATA[ More Info On The $9.87 Credit Card Scam ]]> con_prophotosland158.jpgMGD at dslreports read our post last night about Prophotosland.com and its fraudulent charge to reader Megan's credit card. He's been following the scammers—"an organized crime syndicate operated from Eastern Europe"—for nearly three years now, and has a ton of highly valuable information on them, including their recent targeting of military personnel stationed overseas. Bottom line: cancel your credit card, Megan, because they've got access to it now—and report the charge as fraudulent rather than dispute it.

Here's MGD's email to us:

I wanted to advise your that the fraud charge from prophotosland.com is part of a massive fraud operation perpetrated by an organized crime syndicate operated from Eastern Europe. This long running multi-year fraud operation has been hijacking millions of dollars a year from consumers debit and credit cards, virtually undetected by the financial institutions. They utilize an elaborate scheme that takes advantage of several weaknesses in the merchant account vetting system. The criminal enterprise is driven by the ability to obtain vast amounts of consumer card data.
 
I have been tracking and documenting this crime syndicate for almost three years, and have several hundred hours of research into the project. prophotosland is a subdivision documented here:
 
"fraud: www.prophotosland.com & www.photogey" [dslreports]
 
However, the master story of the criminal enterprise is here:
 
"Ebook websites, fraud charges, Devbill/DigitalAge/Pluto" [dslreports]
 
A few months ago Shaun Waterman, the UPI Homeland and National Security Editor ran a story on one aspect of the case which was published here:
 
"Analysis: Detroit trial shows cyber-scam" [UPI.com]
 
Recent victims of this fraud have included US military personnel including many stationed in Iraq, Kuwait, Saudi Arabia and Germany. There has been many reported cases of hardship as a result of having to cancel their cards due to their location. There are numerous military victim reports on the net. The first reports began shortly after rangerjoes.com database was hacked by these criminals. Many of the overseas victims had purchased supplies from there before heading offshore. Military victim reports began to show up around here:
 
Military reports on main thread [dslreports]
 
and in numerous other places on the net. Mostly under searches of the phone numbers from the fraudulent sites as they were listed on the line item charges on the statements.
 
Regards,
MGD

]]>
Consumerist-385268 Tue, 29 Apr 2008 13:08:48 EDT Chris Walters http://consumerist.com/index.php?op=postcommentfeed&postId=385268&view=rss&microfeed=true
<![CDATA[ Watch Out For $9.87 Credit Card Scam From Prophotosland.com ]]> con_ccstatement158.jpgA reader named Megan noticed an unfamiliar charge for $9.87 from prophotosland.com on her WaMu credit card statement, so she began to investigate it. Not only had she never heard of it, but there was no website that domain, and a Google search turns up hit after hit of scam and fraud reports at various websites. It seems to be but one of numerous fronts charging fraudulent $9.87 fees to credit cards. Read Megan's story below and be sure to check out this page for a list of other bogus companies to watch out for.

I just noticed a charge for $9.87 on my WAMU VISA card from someone called prophotosland.com. I had no idea who or what that was, so did a quick google search hoping to jog my memory. What I found was quite a few websites complaining about the same mystery $9.87 charge from the same company and talking about how they couldn't manage to speak with any live person at said company.
 
So I skipped right to calling WAMU to report this fraudulent charge. The person I spoke to expressed no concern at my story and promised to send me a charge dispute form in the mail. I asked her if I should worry about the fact that this is clearly not an honest mistake and she said it was nothing to worry about unless they charge my account multiple times. I asked her what about the phenomenon of multiple people having the exact same fraudulent charge on their accounts and she said WAMU could do nothing about it.
 
I find it a bit ridiculous that I have to sit around waiting for her to put this form in the mail to me (as opposed to having something built into their website) and that I have to go to the trouble of "disputing" the charges from a documented fraudulent company. I don't expect to have any problem with the dispute, but it's still a bit irritating.
 
Anyway, you might want to warn your readers to look out for this $9.87 charge... it's small enough that I imagine people who use their cards often won't really notice the difference unless they're paying attention.
 
Thanks!
Megan
If you're a victim of this $9.87 scam, file a complaint with the FBI's Internet Crime Complaint Center at www.ic3.gov.
 
"The Face of Credit Card Fraud - And What You Can Do" [CA Security Advisor Research Blog]
www.ic3.gov FBI Internet Crime Complaint Center
(Photo: Getty)
]]>
Consumerist-385004 Mon, 28 Apr 2008 20:32:27 EDT Chris Walters http://consumerist.com/index.php?op=postcommentfeed&postId=385004&view=rss&microfeed=true
<![CDATA[ Certegy Decides Whether Or Not Kmart Will Accept Your Check ]]> con_certegyproprietarytech.jpgS. wrote a check at Kmart earlier this month and it was denied. No reason was given—just "denied." It turns out a separate company, Certegy, made the decision, so S.—who writes, "I've never had a bounced check"—tried to track down someone at Certegy who could tell her what was wrong with her checks.

I've never heard of Certegy, until April 6. I went to K-mart to purchase some items, wrote a check (which I have done there dozens of times before), and it was declined. Huh? I mean WTH?! I've never had a bounced check, I have over draft protection anyways. I called the toll free number, of course it's automated, they won't give you a reason, the recording just said "Precautionary Measures", sooooo, what the heck is that all about? I cashed a check elsewhere a few minutes later, just fine.
 
I emailed K-Mart complaining about being the embarrassment it caused me. I emailed Certegy also, all I received from both was a form letter giving me instructions how to obtain more information about my particular situation. OK, so, I requested a letter through USPS which was suppose to explain WHY my check was declined. This is the response I received (you guessed it, another form letter).
 Dear Ms. XXXXX,
 
This letter is written in response to your inquiry regarding our recent inability to authorize your check. Initially, we want to assure you that we understand the concern this can cause, and we apologize for any inconvenience you may have experienced.
 
Certegy Check Service (CCS) is a check authorization service. Our clients throughout the United States utilize the service to help reduce losses incurred through retail practice of check acceptance. For many CCS clients we assume liability should an authorized check subsequently be dishonored. CCS maintains a computerized file containing both returned check information and driver's license or checking account number. In addition to this information, over 40 years of check authorization and resulting loss experiences CCS has developed guidelines for authorizing acceptance of checks. Our system determines the potential risks associated with with checks. Many proprietary factors are evaluated and in making decisions for check approvals. We also track check writing based on many factors, including check sequence number,, check writing activity and check amounts. This process is designed to protect consumers and retailers and to prevent unauthorized individuals from writing checks on otherwise valid accounts. Unfortunately, valid check writing patterns can occasionally overlap with these patterns resulting in out inability to authorize a valid check such as yours.
 
Regarding our inability to authorize your check, although there were no returned checks on file, the check fell outside of approval guidelines. Unfortunately, we did not have any addtional information at the time to override the concern, and we again sincerely apologize.
 
In closing, we do appreciate and understand your concerns. Please contact our Customer Care Department at 800-352-5970 if we can be of further assistance.
 
Sincerely, CERTEGY CHECK SERVICES, INC. Customer Care Department

The check fell outside WHAT approval guidelines? Does this scream discrimination or am I being just plain stupid?
So let's see—according to Certegy, they use the following methods to decide whether or not Kmart should accept your check:
 
  • they keep a "computerized file containing both returned check information and driver's license or checking account number"
  • they've used "over 40 years of check authorization and resulting loss experiences" to develop guidelines for authorizing checks
  • some proprietary factors!!!
  • some sort of pattern matching based on things like "check sequence number, check writing activity and check amounts."

 
It seems the only factor that could have resulted in your rejection would be something in their "proprietary" bucket. Still, despite all of that fancy-sounding pattern matching and database tracking, they admit to false positives that impact your ability to get a check accepted at a retailer you shop at on a regular basis:
 
  • "Regarding our inability to authorize your check, although there were no returned checks on file, the check fell outside of approval guidelines. Unfortunately, we did not have any addtional information at the time to override the concern, and we again sincerely apologize."

 
It doesn't sound like discrimination as much as incompetent "proprietary" technology. What's surprising is how impossible it was for you to get a clear answer—even after following their instructions, you still don't know why the check was refused and whether it will happen again.
 
Of course, we're not sure why Kmart would do business with Certegy in the first place, considering the company's record for lax security:
Certegy Check Services Inc. disclosed last summer that a database administrator had sold the personal and financial information of 8.5 million consumers to data brokers over a five-year period. The check-processing firm didn't nab the DBA until a retailer reported a link between check transactions and marketing solicitations that some of its customers had received.
That's right, Certegy didn't even catch the theft over a five-year period. A retailer did the "pattern matching" and pointed out the connection.
 
RELATED "IT 'Big Brothers' trying to keep internal users under control" [Computerworld] "Database admin at Fidelity National stole more data than thought" [Computerworld] (Photo: Getty) ]]>
Consumerist-383372 Wed, 23 Apr 2008 19:33:29 EDT Chris Walters http://consumerist.com/index.php?op=postcommentfeed&postId=383372&view=rss&microfeed=true
<![CDATA[ Retail Management: "We Have To Check ID Or We Get Screwed By Credit Card Companies" ]]> con_handpaintedcc.jpg Scott, a member of management for a retail chain, wants to share the other side of the checking-ID debate:
Your website continually runs stories about how merchants aren't allowed to ask for ID during a credit transaction. I work on the management team at a nationwide retailer, and credit card fraud occasionally hits our location. Every so often, we are hit with something called a 'retrieval request' from one of the big 4 credit authorization companies (Discover, AMEX, MC, Visa). This means we have 48 hours to provide a legible signed receipt, and video evidence of my staff checking a photo ID to verify the cardholder.

If we are unable to verify that my staff checked the ID of the cardholder, we are hit with a 100% chargeback to our account. That's right, they charge back the entire amount, because WE DIDN'T CHECK ID. Thusly, I have informed my staff to check photo ID on ALL TRANSACTIONS, as I am tired of dealing with bad debt. If a customer will not provide ID, I will not take their payment. I am not sure what merchant agreement your readers keep referencing, but this simply isn't true. How can I not check ID, per their agreement, and yet still be held liable for passing a stolen credit card? I would rather lose a customer than lose thousands of dollars in chargebacks every month. Just my two cents.
Update: See this rebuttal—with actual documentation instead of just opinion—sent in by another manager.

RELATED
"LEAKS: Amex Document Shows Proof of ID Check Is Not Required For Chargebacks"
(Photo: Brett L.)

]]>
Consumerist-358923 Wed, 20 Feb 2008 19:36:40 EST Chris Walters http://consumerist.com/index.php?op=postcommentfeed&postId=358923&view=rss&microfeed=true
<![CDATA[ Is Someone Impersonating Your Child? ]]> con_grouchomarxbaby.jpg SmartMoney reports on the threat of underage identity theft; 5% of FTC complaints in 2005 were about victims 18 years old or younger. Children are often perfect targets, because they have social security numbers that are largely unused—which means unchecked—until they're old enough to apply for their first job or credit card.
...shortly after [Kristen Smith's] 16-year-old son started a summer gig at a local car dealership... his new employer conducted a routine background check that returned shocking news: A man living in Phoenix was using his Social Security number. Even more shocking was the discovery by the local police department that there was more than one perpetrator. In 1994, a man from Pennsylvania with a DUI arrest on his record had been using Smith's son's Social Security number as well.

Of course, credit monitoring agencies are hoping to cash in on this new threat by offering special monitoring services—think of it as the credit world's attempt at creating a "restless leg syndrome" revenue stream. But you can handle the monitoring on your own with a little effort. Adam Levin, chairman of Identity Theft 911, suggests that parents remember to include their children in their periodic credit reviews. And a spokesman from the Social Security Administration says parents can call the SSA directly to check whether any work history has been reported for a child's number.

All three major credit reporting bureaus have different responses to reports of a stolen number, so check the table at the end of the SmartMoney article for details on what you can request from each one.

Online resources:
Identity Theft Resource Center
Identity Theft 911

Protecting Your Child's Identity [SmartMoney]

(Photo: Getty)

]]>
Consumerist-285950 Fri, 03 Aug 2007 17:54:11 EDT Chris Walters http://consumerist.com/index.php?op=postcommentfeed&postId=285950&view=rss&microfeed=true
<![CDATA[ Chase Refuses To Cash Check Without Thumbprint ]]> Chase%20Loves%20Thumbprints%20And%20the%20Patriot%20Act.jpgChase refused to let Ramsey cash his check without a thumbprint, even though he had called and verified that two forms of identification would suffice. The teller insisted that a thumbprint was required by a "rule." How official sounding. Ramsey spoke with Heath, the bank manager.
    "Heath informed me that due to the Patriot Act, all negotiable instruments required a fingerprint as proof of my status as a holder in due course."
Ah, the Patriot Act, that vague catch-all excuse for every vigilante action under the American sun.

Though not a lawyer, we have seen them on TV, so we rushed to find where the Uniform Commercial Code requires thumbprints. Wait a minute, it doesn't.

Ramsey's letter to Chase, inside...


JPMorgan Chase,

I would like to inform you of the incredulous exchange I had at one of your local branches.

The company I work for currently uses your institution for its financial transactions. In return for my labour, my employer provides me with a negotiable instrument commonly known as a cheque drawn from the funds stored with your company.

Thursday, January the 11th at 5:45 pm, I entered your facility located at 1115 S 800 E Orem, UT 84097 with the intent to recoupe the amount entitled on my cheque.

Before visiting this branch I located the phone number for this facility and called ahead of time to find out what was needed to cash my cheque. I was informed that two forms of identification would be sufficient.

While at the bank, I spoke with a teller who promptly asked me for two forms of identification. I produced these forms of identification. The teller then proceeded to request that I press my thumb onto a pad of ink in order to place a copy of my thumbrint onto the cheque. I politely refused this request by stating "No thank you."

After providing my signature on this cheque, your teller refused to provide recoupement of the amount shown on the cheque issued from your institution. At this point, I questioned the nature of this refusal as it clearly states on the cheque that funds were to be drawn from this institution. The teller stated that this was due to some sort of 'rule'. She mentioned that this rule forbid her from lawfully producing the amount shown on this cheque. I requested that she show me some documentation on this policy as I was informed that two forms of identification would be sufficient to prove that I had rights as a holder in due course as per U.C.C. - ARTICLE 3 - NEGOTIABLE INSTRUMENTS ..PART 3. ENFORCEMENT OF INSTRUMENTS
(http://www.law.cornell.edu/ucc/3/3-308.html)

I proceeded to speak with the manager Heath who informed my father not 5 minutes before, that two forms of identification were sufficient to prove rights as a holder in due course. I questioned Heath as to why your institution would refuse to provide the recoupement endorsed by my employer and the cheque from your bank. Heath informed me that due to the Patriot Act, all negotiable instruments required a fingerprint as proof of my status as a holder in due course. Which seems to be in violation of U.C.C. ARTICLE 3 which I believe to be the law that federal banks subscribe to in order to conduct business.

I would like to call to your attention Heath's insistence that the Patriot Act was his reason for denying the recoupement that I believe I am legally entitled to. I feel that this is absurd and I would expect that a manager at your facility would be educated enough to know why he or his tellers would refuse a request of recoupement. I am familiar with the Thumbprint Signature Program. However, I do not believe this holds sufficient legal authority to deny a holder in due course the advancement of this negotiable instrument.

I feel that your company could have treated this situation with more professionalism and that refusing to pay funds from an account drawn through your bank is wrong. I also feel that your employees are not provided with enough training on what is proper and what is not. It seems as if these employees were just quoting policy based on hearsay. This policy has cast your company in a negative light.

I feel that your prompt attention will help resolve this matter.

Nice to see Aaron Burr's shoot first, ask questions philosophy remains alive and well in the bank he founded. — CAREY GREENBERG-BERGER

Previously: BofA Throws Out Customer Who Refuses To Give Thumbprint

]]>
Consumerist-243051 Sat, 17 Mar 2007 17:37:14 EDT Carey http://consumerist.com/index.php?op=postcommentfeed&postId=243051&view=rss&microfeed=true
<![CDATA[ BofA Throws Out Customer Who Refuses To Give Thumbprint ]]> Bank of America ejected reader Tycho after he refused to give the teller a thumbprint while cashing a check.

"Your are not a customer and I don't have to help you." I asked, "What good is a BofA check if BofA wont cash it? Checks are bound by federal guidelines, it seems to me like not honoring a check to your own bank would be fraud." "Those rules tell me I have to get your thumb print to cash a check." "Show me that rule."

Question: Can a bank legally refuse to cash your check? Can a bank legally require a thumbprint as a prerequisite for doing business?

Tycho's letter, inside...


Tycho writes:

"I went into a Bank of America branch on my lunch break. I had with me a check, written to me, that draws on BofA. I wished to cash it. I waited in a line of about 10 for about that many minutes. I was asked for a few forms of ID, one state issued photo ID and one other like a credit card. I produced the needed ID and was asked then for a thumb print. I politely declined. The teller was astonished. She reacted to me as though I had asked her to take the rest of the day off, completely expecting her to do so. She was totally bewildered. The exchange was polite and brief,

"To cash this check I need your thumb print."
"I'm not going to give you my thumb print, how bout some more ID?"
"I can't do that."
"Do you not think I am who I say I am?"
"I need a thumb print."

At this point she waved the next person in line to her. I asked to see the branch manager.

The manager came up to me with a stack of papers she was busy with and set them down on the counter. I told her I had a check drawn on BofA that I would like to cash and the teller refused to do so. We went through the above exchange. When I offered extra ID to prove I am who I say I am, very discreetly, almost imperceptibly, she glanced at the security guard. When we got to the second "I need a thumb print." the tete-a-tete' took a different turn.

"Your are not a customer and I don't have to help you."
I asked, "What good is a BofA check if BofA wont cash it? Checks are bound by federal guidelines, it seems to me like not honoring a check to your own bank would be fraud."
"Those rules tell me I have to get your thumb print to cash a check."
"Show me that rule."

To that she made no response, glanced at the security guard who was right behind me at this point, and went about her work as if I had never walked into the bank. I asked the security guard if he could cash my check. He said no and that if I had no business at the bank, I would have to leave. I turned to the manager and said that her security guard cannot help me either. She walked away keeping her head down to avoid eye contact.

I left, check in hand, frustrated and insulted.

This branch is in Miami Beach. I don't know the managers name.

Regardless of the thumb print, each person I spoke with was amazingly quick to ignore me and let someone else deal with my vigilance. It was really only a few sentences when the manager gave the security guard the glance and he came creeping up behind me. It was not anything about how I behaved, I was certain to remember my manners and to be polite.

It was only what I said (and it wasn't much) that quickly warranted me being ignored with a security guard at my side.

-Tycho"

— BEN POPKEN

]]>
Consumerist-223279 Wed, 20 Dec 2006 13:34:30 EST Ben Popken http://consumerist.com/index.php?op=postcommentfeed&postId=223279&view=rss&microfeed=true
<![CDATA[ ChoicePoint, Behind the Black Lacquer Curtain ]]> Who is ChoicePoint?

Simply put, the nation's largest collector and parser of data about private citizens.

From GovExec:

"...It's illegal for a government agency to collect most of the data ChoicePoint maintains... Thus an unusual alliance has grown between government, whose appetite for information about potential security risks has risen, and a company whose acumen in assembling personal information has made it the supplier of choice for many federal agencies.

"Mary Boris never pictured herself as a potential serial arsonist. But ChoicePoint did."

"Press investigations found numerous flaws with the data. For example, the online journal Salon reported that a voter named Christine got tagged as a felon because a "Christopher" with the same last name had a conviction."

"It is the anonymous person," CEO Derek Smith [pictured], writes, "or small group of people, who represent the greatest risks - economic, physical or emotional - facing us today."

Really? We could of sworn it was something else...

Read more. (Thanks to mrscolex and Brownlee!)

]]>
Consumerist-161028 Thu, 16 Mar 2006 14:10:42 EST popkin http://consumerist.com/index.php?op=postcommentfeed&postId=161028&view=rss&microfeed=true