This happened to me last year. First, the fraudster canceled my card. I called US Bank, they said they already had a new one in the mail to me. The next day, I got a text saying it was being sent to a town and state I had never lived in. I called them again. So then they sent another card to the right address. I asked how someone could cancel my card, he said the caller had enough info to do it. Scary. No charges were attempted.

@joanmn, what’s to prevent that from happening again? I can understand using your card number. It’s when they can get in your account and manipulate all your info that I find most troublesome.

They wanted to have the address changed first so that they would receive statements before you missed them. They would have more time to rack up charges this way. Especially if you don't have online access to statements as backup.

It might be a good idea to check your credit reports to see if anyone tried to change addresses on them also or tried to open new credit in your name.

This is probably just this one card that was breached but it costs nothing to check.

I'm sorry this happened to you. I'm not an expert, but am following, to hopefully learn something.

@watchmelol, I had to replace this same card back in October and now again. I should probably just notify the Big 3 to freeze my credit. I haven't applied for a loan in years anyway. I was notified that I was part of the Experion data hack a couple of yeas ago.

I am concerned about someone being able to access my personal account info through a phone tree and without having to provide my password. What would stop someone from changing my email address and text number so I wouldn't receive any real time updates and taking me out of the loop in my own account altogether?

I should have added, I reported it to Experian. Also a short time later, an account was opened at Samsung. I reported it as fraud. Froze my account and am on the free monitoring/reporting. Was part of a couple of security breeches. It is a scary world out there.

@joanmn, I received 2 years of Identity Guard in the Experian settlement. The only information found on me at enrollment was that my Garden Web account info, name and login, was found on the "Dark Web".

It is indeed a scary world out there.

I decided to freeze my credit too. I don't anticipate needing to unfreeze it in the foreseeable future. I just hope by the time I do need to unfreeze it, I can remember how. Ha!

Found out something interesting yesterday while looking at my Apple account information. Listed in my account as associated with our two IPads was a credit card for Apple Pay, a service which we have never used. Only the last 4 #s of the card were shown. They weren't the last 4 of the cancelled card but the last 4 of the replacement card, which I have yet to receive.

I though it odd that Apple would have this information when I didn't share it with them so I called VISA. I was told that there are agreements between some of the larger companies to share this information automatically when changes are made.

So, Apple has my new credit card account number before I do for a service I've never used. That's kind of weird don't you think?

Even if you've never used Apple Pay, you've probably used iTunes which is linked.

@Fun2BHere, The new # was under each of the 2 IPads for Apple Pay. There was a second card shown that was for my Apple account. It was the hacked #

It would be more understandable if it was for the card I associated with my Apple account when I first set up the account. That card has been billed for iTunes in the past.

Apple was given the credit card number electronically. You are getting the card via snail mail. That would account for Apple getting the info first.

So, here I am today when I get an e-mail from VISA saying my recent Spotify charge of $9.99 was declined because it was posted against my old card number and I should update Spotify to my new #. I've never had a Spotify account, knew it was someone attempting to use my hacked data from my previous card and assumed the charge would not go through. Wrong!

I called VISA and was told that through a "courtesy agreement" VISA has with certain companies, VISA had updated Spotify with my current card number. (They do this for recurring charges.) I asked why this would happen since I'd never had a Spotify account? I asked if I could prevent VISA from using this "courtesy agreement" on my accounts?

VISA will not block "courtesy" updates until a recurring charge has occurred twice. In the interim, my card is being cancelled and I'm being issued a new card#. But, I have to wait until May 23rd to see if Spotify attempts to process another monthly charge to my just cancelled card and they update it with my newest card number. If so, I'll have to file another fraud report and then they will cancel future automatic updates. I will also have to cancel this newest replacement card that I've yet to get.

Confused? It is hard to follow but I'm mostly mad!

This will be my third VISA # since late October 2019.

Wow. If I were you, I'd be canceling that account altogether, and getting a new Visa card from a different bank.

That is awful. I would drop Visa.

I'd be done with this particular VISA account. Too many problems.

We froze our credit reports about ten years ago. It's simple to reopen if needed, and you can reopen only to a specific inquiry, for a specific amount of time.

Perhaps you guys are right in suggesting I look elsewhere. This is a Capital One VISA and I'd always assumed that a VISA is a VISA, is a VISA. When I was working I exclusively used an American Express. I changed over to VISA when AX refused to waive the foreign transaction fee for an out of country trip I was making. VISA offered cash back and no transaction fee so it was an easy decision to make.

It just seems that these scams are getting more sophisticated.

jrb451,if you have a checking or savings account, check with your bank - they likely offer a Visa card. If you're still traveling, look into Visa cards that are affiliated with hotels, such as Hyatt, or airline-affiliated cards. Or get a Discover card - they don't charge an annual fee, and you earn cash back.

In a way, a Visa is a Visa is a Visa because the Visa organization sets the major ground rules and is the clearinghouse for charges. In another way, they differ because the issuing bank or other organization is responsible for the relationship with the cardholder.

The issuing bank or other org is ALWAYS responsible for fraudulent charges but each administers the customer relationship differently. That doesn't mean any individual is protected from annoyances or even major inconvenience. There have been so many hacker data incursions and break-ins that that's to be expected by everyone with any kind of card, unfortunately. It's not the bank's fault.

Since there are security questions that are asked when you call the original caller knew the answer to those questions. Change those questions on line. The other method that banks used beyond asking for some information is checking that the telephone number listed on the account against the number that is calling. I had to contact my bank this morning. I had to enter the card number and once on line verify my name. If I had called from another number like I did once additional verification questions would have been asked. I would be more concerned with how someone knew the answer to the verification questions.

Have you checked your computer for Trojans or worms that may be stealing your information and handing it out to evil-doers? Do you use this credit card on your home computer?

https://us.norton.com/internetsecurity-malware-what-is-a-trojan.html

"Trojan banker

This Trojan takes aim at your financial accounts. It’s designed to steal your account information for all the things you do online. That includes banking, credit card, and bill pay data. "

This latest fraud originated on 2/23 with the other stuff but only came to light yesterday. (See OP.) What they did that day was open a Spotify 60 day free trial using my CC#. Spotify "pinged" my card to make sure it was a legit account but that did not show up when I was checking for fraudulent activity related to the other charges. Then, yesterday, April 23, the 60 day free trail period expired and Spotify attempted to charge the old CC#. VISA, through their "courtesy agreement" said, you're using an old no longer valid CC#, here let us update it for you and did.

That's what I found jaw dropping. I didn't open the account and 2 months later my CC company is giving out my current CC#.

Elizabeth, I'm current with my ESET and Malware Bytes virus programs. My pc is turned off most of the time. I never use public wi-fi for financial transactions. I'm sure I could do more though, apparently.