slowride
slowride Reader
1/13/15 3:03 a.m.

Just wanted to advise you guys to remove any saved payment info from your Newegg account (if you have one). My account apparently got hacked last year, there was an attempted charge, I removed saved card info etc, but now they have successfully used my old card info to order wireless minutes, even though the expiration date was wrong and I have a new card since the first time.

Newegg is supposedly going to suspend my account, so I would have to make a new one to order anything, which should stop this from happening again. But I still have to dispute this charge.

And now I'm awake...

wbjones
wbjones MegaDork
1/13/15 6:11 a.m.

I wonder if you'll have to actually dispute the charge ..seems it's the CC companies problem … it's not a card associated with you anymore .. A) it's out of date, and B) you're replaced it

call them and explain what's happened … my CC company has always told me that when they suspend a card, pending the replacement of … that the old card can't be used … won't go through anymore

slowride
slowride Reader
1/13/15 6:40 a.m.

I'm not sure either. Currently it's a pending charge and the CC co won't let me dispute it until it posts, but I did flag it which appears to be the most I can do at this time.

But I was a little surprised that Newegg didn't cancel the charge when I notified them. Or maybe they can't? I really don't know.

I'll see what happens today. I suspect I had outsourced customer support from Newegg since it was the middle of the night, but my case was supposedly being forwarded to their fraud dept or whatever.

spitfirebill
spitfirebill PowerDork
1/13/15 6:52 a.m.

Several years ago somone used one of my credit cards to order stuff from Newegg. I disputed it and won, but Newegg will not sell to me now unless I make the fraudulent charge good. I tried to get information from them regarding the theft, but they wouldn't tell me anything. Well screw you!

slowride
slowride Reader
1/13/15 7:01 a.m.

There are stories about this same kind of thing going back years, it seems like it's widespread and Newegg doesn't seem to do much about it. I haven't ordered anything from them since 2011. I wish they had a way for me to delete my account, but instead they just "suspend" it.

PHeller
PHeller PowerDork
1/13/15 9:05 a.m.

Can I just delete credit card information?

slowride
slowride Reader
1/13/15 10:02 a.m.

Yes, you can remove your saved payment methods without involving anyone else.

Type Q
Type Q Dork
1/13/15 10:07 a.m.

Thanks for the information.

mad_machine
mad_machine GRM+ Memberand MegaDork
1/13/15 4:30 p.m.

thankfully I have always used Paypal to pay for stuff from them

DuctTape&Bondo
DuctTape&Bondo Dork
1/13/15 5:23 p.m.

Thanks, removed my card info.

mad_machine
mad_machine GRM+ Memberand MegaDork
1/13/15 7:00 p.m.

With all the cyber hacking that went on in 2014.. I have had my cards replaced three times. It is a serious pita to remember and which of my bills automatically deduct and then figure out how to change the cards involved with them

sachilles
sachilles SuperDork
1/14/15 6:08 a.m.

I use to deal with this on the merchant side. Merchants have a tough time dropping it, as the process is difficult. It is likely just an authorization, which isn't actually a charge. An auth is basically a reservation for your credit. If they don't get used, they sit in limbo up to 30 days. To get a bank to drop an auth pretty much takes an act of congress, unless it's a small town bank, where you can actually talk to humans. The way it works for any one that cares: you decide to buy a product for 50 bucks. You enter your payment info, and the computer asks the bank to authorize the charge. It checks that you have 50 in your account, and sets that 50 aside for the merchant, it gives a six digit auth code to the merchant at that time. The merchant at the end of their day/ shift settles out there credit machine, cashing in all of the auth codes it got during the day. The money then transfers from the card holders bank to the merchants bank. In this case, newegg was made aware of the issue, so the removed the charge, but the auth stays active, until it drops automatically usually in a few days for a credit card, but up to 30 days on a debit card. Card owner has no power to remove the auth. The bank drop the auth if the merchant calls the card issuing bank. A small town bank usually you can call the branch and fax the info in, and it will still take 24 hours to drop. A big bank like chase, the merchant will be spending at least 4 hours on hold and phone transfers before they get the person who can make the change, and they still drag their feet. In theory that money is sitting in limbo gaining interest for the bank...,so that may be a motivator for the bank to not rush to your aid.

slowride
slowride Reader
1/14/15 9:50 a.m.

Thanks for that info!

I can see the pending charge in my account on the card's site. They have a thing where you can "monitor" it, so I will be notified when it posts/doesn't post. So if it posts I will then dispute it. I haven't heard anything more from Newegg but based on what I've read from other people that this has happened to I'm not expecting anything yet. There have also been no more attempted charges so that's good.

I guess what concerns me the most about this is 2 things: first, that my Newegg password was apparently changed without a notification being sent to me (when this happened in July, I did get an email) and second, that my card was apparently used even though it was expired.

sachilles
sachilles SuperDork
1/14/15 10:34 a.m.

as an fyi, the card expiration is largely a useless field. It isn't verified with the bank in the transaction. If you have a recently expired card, you just enter they same month and a valid year and it will go through, if the card has available credit. The expiration is only checked at the machine level, so if you swipe an old card, it won't even start the transaction. Online, it doesn't verify your mag strip or anything. Online they care more about the security code on the back, your zip code and the number from your address, and even if those are wrong they may still allow the transaction to occur, they'll just charge the merchant a higher percentage as it is "riskier". Have I told you lately I'm glad I work in racing now, and no longer deal with the stuff daily? 18 years of my life dealing with this kind of stuff...ooofff.

slowride
slowride Reader
1/14/15 10:47 a.m.

OK, that makes sense. I'm not sure if my new card has a different number on the back, but the account number on the front is the same.

And also I will never have an online merchant save my card info again. This all seems kind of risky.

slowride
slowride HalfDork
7/13/16 9:41 a.m.

Just a quick update on this, since it seems to still be ongoing.

I contacted Newegg and they supposedly suspended my account last year. Then the attempted charge happened again last July 13, but Newegg cancelled it before it even got to my credit card. Then again on Jan 13 2016, after which Newegg supposedly deleted my account. Now this morning, yet another attempted charge. It was cancelled almost instantly and never made it to my pending charges, but nonetheless, Newegg totally lied to me about deleting my account.

Not sure I'm going to do anything this time. Contacting Newegg seems useless, and Amex has been made aware of the situation, they told me that if a charge from Newegg ever goes through I should just dispute it.

foxtrapper
foxtrapper UltimaDork
7/13/16 10:00 a.m.
sachilles wrote: as an fyi, the card expiration is largely a useless field. It isn't verified with the bank in the transaction.

That's not been my experience. I've had numerous transactions cancelled or not accepted because I entered the expiration date wrong. Some even specifically say that's the reason the transaction was declined.

RevRico
RevRico GRM+ Memberand HalfDork
7/13/16 10:09 a.m.

So I know this is an old thread, but it seems strangely relevant to a fight I've been having with Microsoft and Xbox Gold. For 2 years, didn't even own an Xbox, yet even after getting new cards after a hack, they still managed to auto renew my Live subscription. Didn't even have the right card number anymore, even with autopay turned off, they managed to auto renew.

I'll grant the "security" on credit/debit cards is a joke, and I'll also grant that yes, in this day and age it is not "if my accounts are compromised" but "when my compromised account is accessed". Still though, from a place like Microsoft, it's surprising that they still manage to do it.

That sucks it seems you're banned from newegg, for lack of a better term, but a lot of their remanufactured goods are missing a lot of the quality from original anyway. I'm just surprised at their lack of giving a crap about their customers more than anything else.

dculberson
dculberson PowerDork
7/13/16 10:14 a.m.

Thanks, deleted payment info just now.

A freakin' year later and they're still letting bozos make charges on your account. Unbelievable.

slowride
slowride HalfDork
7/13/16 10:20 a.m.

Yeah, contacting their customer service is one of the most horrible things ever, assuming you can even get through. It actually makes Comcast seem stellar, at least in my experience.

Also, just looked back at my records for this, and the first attempt was 7/13/2014.

dculberson
dculberson PowerDork
7/13/16 10:30 a.m.

Looks like Newegg is off my "look around at pricing" list. Amazon's support is pretty great, the few times I've needed to contact them.

Keith Tanner
Keith Tanner GRM+ Memberand MegaDork
7/13/16 12:16 p.m.
foxtrapper wrote:
sachilles wrote: as an fyi, the card expiration is largely a useless field. It isn't verified with the bank in the transaction.
That's not been my experience. I've had numerous transactions cancelled or not accepted because I entered the expiration date wrong. Some even specifically say that's the reason the transaction was declined.

It all depends on how tight the vendor has their security settings screwed down. Ours will kick back if the date is wrong.

And yes, getting an authorization removed is a whole lot of hassle. It's why some companies will do a test charge of a small amount to make sure the card will go through so they don't tie up a big chunk of credit if the transaction fails.

You'll need to log in to post.

Our Preferred Partners
F3KeNILFdPYsae9YnI6b7BizJ1wwSbXmfwjgN7X8sRLdciWm05SrdTVVv2TznWG5