Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

Thieving backstards (Thieves, and the bank!)

13

Comments

  • Registered Users, Registered Users 2 Posts: 1,311 ✭✭✭Procasinator


    gatecrash wrote: »
    yeah, but the phishing attack must have been quite comprehensive, as when using the VBV code it can ask for any one of those characters. And not even in the order that they are, i.e. it could be asking for the first, seventh and fourth characters.

    It depends on when the phishing attack occurs. The most common for VBV is the registration part. There is are phishing scams now that puport to be from Visa inviting users into the scheme. They can collect the details here need to register the card in the system and actually setup a password themselves.

    You could also set up a fake shop, and imitate the registration part there too.

    The problem is that registration for this program is on unofficial sites (i.e. merchants) anyhow, so convincing users to register isn't as hard.

    XSS and MITM attacks other possible avenues.


  • Registered Users, Registered Users 2 Posts: 2,734 ✭✭✭Newaglish


    Surely it would be a piece of cake to find out from the airline what name was on the tickets bought with his card? Some airlines even put the booking reference on your credit card narrative so you could quote that and actually get the details yourself. I've never heard of someone booking flights with a stolen card because it's a really stupid thing to do. You might as well buy a laptop and then get it delivered to your home address.


  • Closed Accounts Posts: 20,759 ✭✭✭✭dlofnep


    It was Ryanair - I called my brother there to give them a call. He's really shy - so he left it to get Gardaí to sort out. But I'll contact Ryanair later and get the name. Worry you not! They also bought accomodation in some hotel. Perhaps it has video cameras too?


  • Registered Users, Registered Users 2 Posts: 24,369 ✭✭✭✭ejmaztec


    Kensington wrote: »
    They're not going to do anything for you - it's entirely your responsibility to secure your VBV/3-D Secure password.

    I would imagine that it's a bank's responsibility to ensure that their equipment is secure.


  • Registered Users, Registered Users 2 Posts: 1,311 ✭✭✭Procasinator


    Another thing to check is that each transaction was verified by Visa. If not, then they would have to refund ones that were not. Not every merchant implements Verified by Visa.


  • Advertisement
  • Closed Accounts Posts: 4,037 ✭✭✭Nothingbetter2d


    Pace2008 wrote: »
    How do these scammers acquire and use Laser details, and is there anything you can do to stop them?

    its done on an atm using a strip of tape called "the lebonese loop"


  • Closed Accounts Posts: 776 ✭✭✭sellerbarry


    Why would you gamble on a gambling website with a visa card when you cannot withdraw your winnings unless you provide id and proof of address? And the same thing goes for buying flights?. I smell a rat........................................


  • Closed Accounts Posts: 20,759 ✭✭✭✭dlofnep


    Why would you gamble on a gambling website with a visa card when you cannot withdraw your winnings unless you provide id and proof of address? And the same thing goes for buying flights?. I smell a rat........................................

    You'll have to ask the stupid prat who stole money on my brother that. Betfair was one of the gambling websites I think, and ryanair was the other for flights. I don't gamble online, so I'm not sure how it works. Perhaps some websites are more lenient than others.

    In anycase - I've no doubt that whoever this is, they will be caught.


  • Closed Accounts Posts: 776 ✭✭✭sellerbarry


    dlofnep wrote: »
    You'll have to ask the stupid prat who stole money on my brother that. Betfair was one of the gambling websites I think, and ryanair was the other for flights. I don't gamble online, so I'm not sure how it works. Perhaps some websites are more lenient than others.

    In anycase - I've no doubt that whoever this is, they will be caught.
    To start gambling on betfair, the customer must have been verified by id and address. They will only withdraw to same card or bank or by cheque. Either way, the crook (?) can be nabbed easily. Bit strange though. Good luck with it anyway.


  • Registered Users, Registered Users 2 Posts: 543 ✭✭✭rgmmg


    flutered wrote: »
    i used the credit union for banking, i have a top up card for internet shopping, not alone do i detest banks, i actually despise them as well.

    what's the difference to you?

    From www.thefreedictionary.com -

    de·test·ing, de·tests. To dislike intensely

    de·spised, de·spis·ing, de·spis·es. 1. To regard with contempt or scorn: despised all cowards and flatterers. 2. To dislike intensely;


  • Advertisement
  • Closed Accounts Posts: 20,759 ✭✭✭✭dlofnep


    To start gambling on betfair, the customer must have been verified by id and address. They will only withdraw to same card or bank or by cheque. Either way, the crook (?) can be nabbed easily. Bit strange though. Good luck with it anyway.

    Cheers, I don't bet - so I don't really know how they operate. I'm sure they'll be nabbed, unless they are foreign and have left Ireland.


  • Registered Users, Registered Users 2 Posts: 1,311 ✭✭✭Procasinator


    Note there are a few layers of security with say a Visa card.

    This goes over them briefly: http://www.visa.ca/en/personal/securewithvisa/index.jsp

    In short:

    Chip-and-pin (card present)

    Chip and pin is used for purchases where the card holder is present. A valid PIN is needed to complete the purchase. The chip is also resistant to duplication. However, some terminals allow fallback to the magnetic stripe and as such skimming to duplicate magnetic stripe is still profitable.

    CVV

    There are 2 CVV numbers.

    CVV1 is encoded into the magnetic stripe of the card, and is used when the purchase is made in person. This systems weakness is that if the magnetic stripe is copied (commonly known as skimming). Skimming often involves using a camera or fake keypad to also record the PIN.

    CVV2 is the code you would use for transactions where you are not present (refered to as Card Not Present, CNP). This is a 3-digit number. You would use this code for mail-orders, phone purchases and web purchases.

    Verified by Visa (VBV)

    Verified by Visa is another layer sometimes used for web purchases. When you are making a purchase with a merchant who supports VBV, you will be asked to enrol in the program during checkout. You enter a few details here, but the most important is a secret phrase and password.

    Once setup, you will be asked to enter 3 characters from the password you setup on many of the transactions you make on the web. The secret phase will also be visible - the idea being, if the secret phase is not visible you are not actually receiving a valid VBV form.


  • Closed Accounts Posts: 1,250 ✭✭✭lividduck


    dlofnep wrote: »
    You'll have to ask the stupid prat who stole money on my brother that. Betfair was one of the gambling websites I think, and ryanair was the other for flights. I don't gamble online, so I'm not sure how it works. Perhaps some websites are more lenient than others.

    In anycase - I've no doubt that whoever this is, they will be caught.
    Once upon a time there was a poster who like to post likkle fairy stories just to feel important, but the "facts" did not add up at all, and all the other posters smelled rodent in the air!:D


  • Closed Accounts Posts: 20,759 ✭✭✭✭dlofnep


    lividduck wrote: »
    Once upon a time there was a poster who like to post likkle fairy stories just to feel important, but the "facts" did not add up at all, and all the other posters smelled rodent in the air!:D

    Why on earth would I make this up? Christ. Some serious trolling on here today.


  • Posts: 81,308 CMod ✭✭✭✭ Koa Polite Seam


    your brother claims it was hackers running up 2k on betting websites, the bank deny it, and he's "too shy" to try get back his missing money?
    say he's running it up himself


  • Closed Accounts Posts: 20,759 ✭✭✭✭dlofnep


    bluewolf wrote: »
    your brother claims it was hackers running up 2k on betting websites, the bank deny it, and he's "too shy" to try get back his missing money?
    say he's running it up himself

    Er no, he's not too shy. He contacted the bank and Gardaí straight away, and wants the Gardaí to handle it. How is that not following it up?

    Is there something in the water today that is making people obtuse?

    And no - my brother didn't claim anything about hackers. It is a fact that someone illegally used his debit card to spend 2,000 of his money.


  • Moderators, Arts Moderators Posts: 36,496 Mod ✭✭✭✭pickarooney


    dlofnep wrote: »
    It was Ryanair - I called my brother there to give them a call. He's really shy - so he left it to get Gardaí to sort out. But I'll contact Ryanair later and get the name. Worry you not! They also bought accomodation in some hotel. Perhaps it has video cameras too?

    I'd be surprised and disappointed if Ryanair would give this information to a third party without a warrant.


  • Registered Users, Registered Users 2 Posts: 829 ✭✭✭forfuxsake


    dlofnep wrote: »
    Why on earth would I make this up? Christ. Some serious trolling on here today.

    Good question, why on earth would you?

    The problem is that the facts don't add up. If they were gambling on Betfair then the name on the credit card must match the name on the gambling account. I have a betfair account and part of the process involved me getting a photocopy of my passport with proof of address stamped at the garda station. I then had to send them this before they would unlock my account. To add an account is also difficult and also must be in the name of the credit card/debit card holder.

    The reason fro this is to stop a shady character opening a bank account with €1,000,000(or 2,000) and transferring it to betfair, then withdrawing it into another account, closing the first account and claiming that they won the money on the horsies instead of through drug-dealing, robberies or garlic tax evasion. This would make money-laundering ridiculously easy.

    Now I am not saying that the 'thieves' didn't steal his account number and his VBV or CVV or whatever and open a bank account in his name. then open a betfair account in his name, get a fake passport in your brother's name stamped by the gardai and finally get his betfair account validated.

    I'm just saying that it sounds a bit far-fetched.

    Now if you said somebody has stolen his details and bought a couple of widescreen tvs, bottles of booze, etc etc I would have been less suspicious.

    But surely instead of taking the extreme risks outlined above(coupled with the risk of flying on a ticket booked with a stolen credit card) and taking into consideration that they 'stole' his number from a bank machine would they not just have cloned the card & withdrawn the cash? (and stuck it in their own accounts to gamble and fly)

    Now if this was a member of my own family who told me this story I would n't believe it and I would see if they needed some kind of help. It sounds like your brother is a really nice guy and as such maybe he deserves some tough love. Or you made it up.

    just sayin.


  • Registered Users, Registered Users 2 Posts: 426 ✭✭Baneblade


    everyone here is having the same reaction as the bank, they story does not seam to make sense.

    he is best of waiting on the garda to conclude their investigation and then get on to the bank after that as he might be in a better position to claim the money back once there is an offical record of what happened


  • Registered Users, Registered Users 2 Posts: 1,222 ✭✭✭brimal


    Isn't Verified By Visa optional?

    When I got my new Visa card last month it keeps asking on every transaction do you want to register for VBV until I registered. You don't have to register though afaik.

    Are you sure your bro had registered to this?


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 829 ✭✭✭forfuxsake


    I'd be surprised and disappointed if Ryanair would give this information to a third party without a warrant.

    he would have to pretend to be his brother, as long as he has all the details of the transaction it shouldn't be a problem.

    It happened to me once, turned out the wife had booked her family over and not only had she told me about it but it was my idea when I was under the influence. (there's no such thing as cheap drink:mad:)


  • Closed Accounts Posts: 500 ✭✭✭Bruce7


    If he used the card to gamble on betfair, he could make some stupid bet with another counterparty and lose the money to them.

    I don't use it, so don't know the exact mechanics, but I would imagine it's something like:

    I offer odds of 1/10 on Italy beating Wales in the rugby by 50 points, or soemthing equally impossible with totally crap odds, which nobody in their right minds would put on. I have 50 quid in my account, so can lay 500 as the odds are only 1/10. My mate bets the 500 with the stolen card and loses it to me. Rinse and repeat.


  • Registered Users, Registered Users 2 Posts: 3,956 ✭✭✭Doc Ruby


    I used my card to purchse some stuff from a website that was hacked, thankfully I caught the transactions before too long and reversed the charges, but they were using the card to gamble alright.

    My guess is that some of the shadier offshore casinos are actually money laundering operations, since you can just show up with money in the bank from gambling in many jurisdictions.

    No idea where the pin is coming from though. Unless your brother has a history of online gambling the bank should probably refund it.


  • Registered Users, Registered Users 2 Posts: 17,745 ✭✭✭✭kylith


    Bruce7 wrote: »
    If he used the card to gamble on betfair, he could make some stupid bet with another counterparty and lose the money to them.

    I don't use it, so don't know the exact mechanics, but I would imagine it's something like:

    I offer odds of 1/10 on Italy beating Wales in the rugby by 50 points, or soemthing equally impossible with totally crap odds, which nobody in their right minds would put on. I have 50 quid in my account, so can lay 500 as the odds are only 1/10. My mate bets the 500 with the stolen card and loses it to me. Rinse and repeat.
    That wouldn't explain how they managed to set up an account in the name of the cardholder without the passport and paperwork signed by the gardai.

    I hate to say it, OP, but maybe you need to point these things out to your brother, in case he does have a problem that he doesn't want to admit to.


  • Registered Users, Registered Users 2 Posts: 1,222 ✭✭✭brimal


    Bruce7 wrote: »
    If he used the card to gamble on betfair, he could make some stupid bet with another counterparty and lose the money to them.

    I don't use it, so don't know the exact mechanics, but I would imagine it's something like:

    I offer odds of 1/10 on Italy beating Wales in the rugby by 50 points, or soemthing equally impossible with totally crap odds, which nobody in their right minds would put on. I have 50 quid in my account, so can lay 500 as the odds are only 1/10. My mate bets the 500 with the stolen card and loses it to me. Rinse and repeat.

    If you do that method, Betfair will give you the best odds available at the time, which wouldn't be the 1/10 that is offered. Even if your 1/10 could be pushed up to the active price, you have no guarantee that you will take that bet in time before someone else.

    Also there are thousands of bots on Betfair that would just hoover up such a crazy bet placed by your counterpart before you get a chance.


  • Registered Users, Registered Users 2 Posts: 829 ✭✭✭forfuxsake


    Bruce7 wrote: »
    If he used the card to gamble on betfair, he could make some stupid bet with another counterparty and lose the money to them.

    I don't use it, so don't know the exact mechanics, but I would imagine it's something like:

    I offer odds of 1/10 on Italy beating Wales in the rugby by 50 points, or soemthing equally impossible with totally crap odds, which nobody in their right minds would put on. I have 50 quid in my account, so can lay 500 as the odds are only 1/10. My mate bets the 500 with the stolen card and loses it to me. Rinse and repeat.

    Wouldn't work. Betfair automatically matches at the best price available. somebody else would be offering much better. (again probably designed to stop money laundering)


  • Closed Accounts Posts: 20,759 ✭✭✭✭dlofnep


    Forfuxsake - I couldn't give a flying fuck about what you think to be honest. The conspiracy theories forum is around here somewhere. They didn't only use it online, they used it in some shops in Cork city also. It is a fact that my brother's card was used for fraud purchases. I'm not an all interested in inflating your ego, and entertaining some stupid conspiracy theory with you.


  • Closed Accounts Posts: 500 ✭✭✭Bruce7


    brimal wrote: »
    If you do that method, Betfair will give you the best odds available at the time, which wouldn't be the 1/10 that is offered. Even if your 1/10 could be pushed up to the active price, you have no guarantee that you will take that bet in time before someone else.

    Also there are thousands of bots on Betfair that would just hoover up such a crazy bet placed by your counterpart before you get a chance.

    Fair enough. I don't use the site. I thought you could browse all of the odds on offer and select which ones to take.


  • Moderators, Arts Moderators Posts: 36,496 Mod ✭✭✭✭pickarooney


    dlofnep wrote: »
    Forfuxsake - I couldn't give a flying fuck about what you think to be honest. The conspiracy theories forum is around here somewhere. They didn't only use it online, they used it in some shops in Cork city also. It is a fact that my brother's card was used for fraud purchases. I'm not an all interested in inflating your ego, and entertaining some stupid conspiracy theory with you.

    So did they or did they not have the physical card?


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 17,745 ✭✭✭✭kylith


    dlofnep wrote: »
    Forfuxsake - I couldn't give a flying fuck about what you think to be honest. The conspiracy theories forum is around here somewhere. They didn't only use it online, they used it in some shops in Cork city also. It is a fact that my brother's card was used for fraud purchases. I'm not an all interested in inflating your ego, and entertaining some stupid conspiracy theory with you.
    In that case it should be easy to prove that he was out of the country. He may not be able to get the money back for the betting, but hopefully will be for those items.


Advertisement
Advertisement