My EQ Bank Card compromised | Your stories | Discussion forum

JohnnyCash said
I really think EQ should have an optional virtual card number.

I've added EQ card to Google Wallet. When I check card settings in Wallet, I see "Virtual Account Number" with explanation "When you tap to pay, your virtual account number is shared with merchant instead of your actual account number. This helps keep your account info safe."

In fact, I see the same for each CC I added to Google Wallet.

savemoresaveoften said

Apple wallet works the same way, all vitual wallet will store and present the CC with a virtual acct number is my understanding. The only downside is when it comes to product return, presenting a physical card may not work as they need identical card number match to process.  

A device with a payment app that stores a physical card number does indeed convert it to a virtual number, I just out of habit use a virtual number during setup if available, overkill perhaps.

Any way, in respect to returns, I have tapped my phone a number of times and it does process a refund back to the account ,albeit slower than a physical card. The phone payment app displays the last 4 digits of the virtual card number it is using for payments, some merchants might ask for them in certain circumstances.

With the rate people break, lose or have their phones stolen, concentrating too much of one's line into a hackable appliance still seems very unwise.

RetirEd said
With the rate people break, lose or have their phones stolen, concentrating too much of one's line into a hackable appliance still seems very unwise.  

People simply do not realize how vulnerable the tech is, in spite of all the so-called security. I work in IT. Many that are also recognize this. OI have found vulnerabilities... even reported them to Apple about a year ago. Even attached an applicable news article the recognized the security gap. Apple simply downplayed the issue and ignored it and to this day, in spite of industry recognition of the problem.

BUT you do not need to understand the tech... just read the many occurrences that are reported in the news. Now stop and think about the many more cases that never make it into the news.

In the last while we have received two Uber restaurant orders that we did not place, although they were from restaurants we have patronized in the past.
We refused the deliveries as we had no use for the food. With a relatively small amount of phone and internet work we got the charges reversed. It made me wonder if this is a common occurrence for Uber, and why. These could not have been "pocket dials" as ordering requires too many steps.

Thanks; will discuss with spouse, whose card was used. I don't know which precautions were taken.

hwyc said
Lightning just strike twice at the same spot. Got another unauthorized UBER transaction again 20 minutes ago. I learned wiser after the 1st one by leaving no fund in there. Hence the incoming was declined.  I only had the new replacement card for two months & used only once. Now I am more convinced than before there is a hole exposed to outside hacks.  

My card was hacked back in February and cancelled within the hour. Still >20 fraudulent charges went through draining $1000 from my account. There a thread on this elsewhere on the forum. Mastercard/EQ did reimburse me but it took 3 months and didn't balance-out exactly as charges [online I assume] were in multiple countries and fx rates changed.
I reduced my card balance to zero and never activated the replacement card. For another 6 months I continued to get sms notifications of attempted charges being declined as suspicious or for insufficient funds.

A couple of weeks ago EQ sent new terms of service stating clearly customer is responsible for charges even if EQ has made a mistake in allowing them!

I cancelled all my accounts with EQ [CDN, US, spending] and am thankful EQ confirmed in writing today [10 days later] that we no longer have a banking relationship.

Initially I was very happy to see EQ enter the frey but can no longer trust or rely on the bank. Or recommend EQ despite interest rates and no fx fees.

hwyc said
… Now I am more convinced than before there is a hole exposed to outside hacks.

May just be two credit card features at play: Tokenization and merchant card change notification.

Merchant could have tokenized your card info and is continuing to use the token for your account. From Mastercard Canada FAQ:

What is tokenization?

Tokenization is the process of replacing a card’s primary account number (PAN)—the 16-digit number on the plastic card—with a unique alternate card number or “token.” Tokens can be used for mobile point-of-sale transactions, in-app purchases or online purchases.

What do these new digital payments mean for me?

For consumers and merchants alike, every purchase made with a tokenized Mastercard debit, credit, prepaid or small business card using Apple Pay™ in Canada offers the enhanced security and benefits of a digital Mastercard transaction, including secure tokenization technology.

Merchant could also be notified of your new card info for your account after cancelling the previous card. This is from PC Financial Mastercard Cardholder Agreement:

8.3 Some merchants may be automatically notified of changes to your Account

Certain merchants may register with Mastercard Worldwide Inc. to receive automatic updates regarding your Account, such as changes to your Card number, expiry date and status of your Account. Unless you opt out by calling us at the number on the back of your card, those merchants will receive those updates. Since not all merchants register to receive this service from Mastercard Worldwide Inc., you remain responsible for updating merchants with whom you have set up pre-authorized transactions.