Our primary card winds up being compromised every other year or so. When we had two occurrences in 2 months, I came up with a strategy I thought would be helpful, though it didn't actually pan out.
My theory was that it had to be an online vendor who was getting compromised and leaking the card number. I defined several Virtual card numbers based on categories (utilities, subscriptions, established vendors, one-off purchases, etc) and used those for all online purchases. The "real" card number was never online ever, and only used for in-person chip/tap purchases. Purchases made using virtual account numbers are identified by the friendly name assigned to the number on our statements. My thought was that if my theory was right, then one of those numbers would have fraudulent charges on it, I'd delete and recreate it, and maybe even have a better idea of specifically which vendor might have been compromised.
Well the next time it happened, it was actually the main number that had the fraudulent charges, so the whole card had to be replaced anyway.![:(]( "Sad")
To make matters worse, the virtual numbers do not follow to the new card. I had been hoping to avoid the laborious post-compromise update process, but that didn't work out either.
My theory was that it had to be an online vendor who was getting compromised and leaking the card number. I defined several Virtual card numbers based on categories (utilities, subscriptions, established vendors, one-off purchases, etc) and used those for all online purchases. The "real" card number was never online ever, and only used for in-person chip/tap purchases. Purchases made using virtual account numbers are identified by the friendly name assigned to the number on our statements. My thought was that if my theory was right, then one of those numbers would have fraudulent charges on it, I'd delete and recreate it, and maybe even have a better idea of specifically which vendor might have been compromised.
Well the next time it happened, it was actually the main number that had the fraudulent charges, so the whole card had to be replaced anyway.
To make matters worse, the virtual numbers do not follow to the new card. I had been hoping to avoid the laborious post-compromise update process, but that didn't work out either.Statistics: Posted by lazydavid — Fri Jul 12, 2024 10:26 am — Replies 20 — Views 416