?

Log in

Previous Entry | Next Entry

So I have a theory about how my credit card number was stolen. The dive shop we rent stuff from uses old sk00l paper to track rentals. We thus call and tell them what we need, they write it down, along with our CC number and expiration in case we don’t return the stuff. They then file these in three boxes on a wall "Today", "Tomorrow", and "Sometime". We go into the shop, tell them who we are, they get our stuff, and have us sign the paper as well as add address and driver’s license info. We then pay them cash, or with CC, for the rentals and they keep the paper. Thus from the time our CC numbers are written on the paper, til they are filed somewhere after we return the stuff, the papers are in an easily accessible place to anyone in the store. Theoretically, someone couldn’t just come in and copy down numbers, ideally staff would notice this, but it is definitely plausible someone could. Would be an easy game for a few people to have enough to keep staff busy while someone copies down CC numbers. Also depending on where rental forms are filed, or disposed of, numbers could be captured at that point.

Beyond this theory, I can’t think of another way someone would get my card number. Especially since one of the fraudulent charges for a small amount was declined, theoretically it could have been to a CVV2 error.

Bleh.

So then next question is if this is the case, are these people smart enough to do something with a CC number, name, address, phone number, and drivers license number.?. Seems to me that if they were interested in identity theft they wouldn’t tip their hand by making small obvious charges upfront. Seems to me more like seeing if the card worked before they make large charges; at least I can hope.

Guess when I go into the local shop here to pick up a new bigger gear bag, I not only will bitch at them about the poor customer service in their Monterey store, but also grill them about what they do with those papers and how they protect our information.

Tags:

Comments

( 3 comments — Leave a comment )
scsi
Aug. 20th, 2005 10:16 am (UTC)
eh, doubtful for the following reasons:

1. Scuba people are pretty tight knit, and wouldnt shaft one of their own
2. Its probably dumpster diving rather than stealing out of the said folder (which ive seen what you're talking about)
3. Mine got y0rk'd about a month ago, and from the looks of it it could be from pretty much anywhere.
daveman692
Aug. 20th, 2005 07:37 pm (UTC)
Yeah, I'd think it is more the dumpster diving.
arie
Aug. 20th, 2005 12:04 pm (UTC)
Personally I don't think this is likely what happened.

But as an aside, they wouldn't need to write the numbers down. Camera phones are the new black for the identity theif on the go.

There was a whole rash of them using camera phones to snap shots of people's cc at resteraunts as they sat waiting for the waiter/waitress here a while back. They'd walk by and casually snap a photo. Sometimes it worked, sometimes it didn't (photo too blurry, not enough light etc.) but it worked enough that when they finally caught them and confisciated the phones and computer and stuff there were a bunch of good numbers.
( 3 comments — Leave a comment )