AMEX (Your American Express® temporary security code)

[m4b]

I have been receiving these emails lately, even though I haven't used AMEX since December '23. The communication is solely via email; I haven't received any SMS. I plan to contact AMEX tomorrow regarding this matter. I'm curious if anyone else is experiencing the same issue.

 

[bhushan0101]

This is because of you save the card in cred app. Every time cred fetch the amex statement security code generated. If you want you can delete the saved card in cred.

 

[Riya]

Yeah, it happens with me too....
Initially I was afraid about any fraud but now I've started ignoring them....
Maybe CRED trying to pull statement causes it... Maybe....

 

[m4b]

Understood! Thanks, folks.

 

[bhushan0101]

Yeah, it happens with me too....
Initially I was afraid about any fraud but now I've started ignoring them....
Maybe CRED trying to pull statement causes it... Maybe....

Yes it is becasue of cred protect. Amex never send statement as pdf. So cred fetch details through it.

 

[Riya]

Yes it is becasue of cred protect. Amex never send statement as pdf. So cred fetch details through it.

CRED having full access to my personal e-mail account is always scary.... Not just card statements but bank statements as well as personal mails too can be accessed by them

 

[shivkumar]

CRED having full access to my personal e-mail account is always scary.... Not just card statements but bank statements as well as personal mails too can be accessed by them

How does CRED has access to your email account.. have u shared ur password / api for your email / gmail account with cred..

 

[the_collector]

It's because of cred?

I reached out to amex earlier regarding this as it was getting frequent.

The executive said it's an issue in backend and the team is working on it and that I don't have to worry account is safe.

 

[msankadi]

Wow you guys give so much access to cred? I am sure not for rewards as they are pathetic.

Do you trust them enough to store all your cards there just for a central place to pay card bills?

 

[bhushan0101]

It's because of cred?

I reached out to amex earlier regarding this as it was getting frequent.

The executive said it's an issue in backend and the team is working on it and that I don't have to worry account is safe.

It is cred only. You can check in cred app there is cred protect tab and its shows cred fetch amex details as bank account.

 

[m4b]

It's because of cred?

I reached out to amex earlier regarding this as it was getting frequent.

The executive said it's an issue in backend and the team is working on it and that I don't have to worry account is safe.

I didn't look at the data earlier.
So here are the things that make me suspicious.
1. No specific pattern to fetch anything related AMEX, the dates are not regular on MoM basis
2. Receiving these temporary codes via emails only (AmericanExpress@welcome.americanexpress.com), no SMS. It is not the safe key email via SafeKey@welcome.aexp.com, which is good I guess.
3. No merchant information is provided in the email. AMEX need to provide this ASAP.
4. Cred has only access to read emails but I remember authenticating AMEX via Cred which seems Cred interacts with AMEX APIs but at what cost (using the password on the client side). I don't see the related clauses anywhere. I hope that AMEX has a different layer of secured API with API-level temporary code combinations and restrictions.
I understand it is safe till now but someone needs to explain, either cred or AMEX.

 

[Riya]

How does CRED has access to your email account.. have u shared ur password / api for your email / gmail account with cred..

If they can read my statements amongst hundreds of mails I get, then it can also read other mails too... How are you sure that cred is not reading your other mails too

 

[shivkumar]

If they can read my statements amongst hundreds of mails I get, then it can also read other mails too... How are you sure that cred is not reading your other mails too

If you have shared your email access to cred.

- I am sure they are reading all your mails, photos & whatever service they can access.

- I am also sure they have some person manually reading ur mails there is no automatic fetching.

I don’t understand why would you use such a service just for few points / rewards.

(I have never used cred or alikes so actually don’t know what details they ask & use)

 

[the_collector]

If you have shared your email access to cred.

- I am sure they are reading all your mails, photos & whatever service they can access.

- I am also sure they have some person manually reading ur mails there is no automatic fetching.

I don’t understand why would you use such a service just for few points / rewards.

(I have never used cred or alikes so actually don’t know what details they ask & use)

It's more about convenience for me. I absolutely agree it could be dangerous as they could be fetching other data and potentially storing it.

But I have 25 cards, it's impossible for me to track for each bill and due date that is different for all. So its not for rewards ( which are non existent) but for tracking and making sure all bills are paid on time

Also it's impossible for them to have somebody sit manually and fetch the emails, I don't think that's possible.

 

[coolguy1]

It's more about convenience for me. I absolutely agree it could be dangerous as they could be fetching other data and potentially storing it.

But I have 25 cards, it's impossible for me to track for each bill and due date that is different for all. So its not for rewards ( which are non existent) but for tracking and making sure all bills are paid on time

Also it's impossible for them to have somebody sit manually and fetch the emails, I don't think that's possible.

I was in the same boat as the number of cards go up, it's almost impossible to track the cards individually.

A safer alternative(without giving up your email privacy),

1. Create another email account
2. Auto-forward all the statements to the new email
3. Link the new email to Cred

This ensures you get constant reminders while ensuring Cred or any other app doesn't sniff your other private emails. 🙂

 

[shivkumar]

I am managing about 30 cards in family... no issues at all..

all email (transactional / statement is forwarded to my personal email... ) I have selected 2 days in month for all statement ..

I even have to use individual bank account to make payment for same..

its about 25 mins job twice a month..

 

[Riya]

If you have shared your email access to cred.

- I am sure they are reading all your mails, photos & whatever service they can access.

- I am also sure they have some person manually reading ur mails there is no automatic fetching.

I don’t understand why would you use such a service just for few points / rewards.

(I have never used cred or alikes so actually don’t know what details they ask & use)

It's not just for useless cred coins or chillad cashback.....
The platform provides all card's statements simultaneously and the payment had always been instant since last 4 years....
It's more of convenience....
But your point is correct that jeopardizing my personal mail access to a third party app is dangerous

 

[ALOAK]

I have been receiving these emails lately, even though I haven't used AMEX since December '23. The communication is solely via email; I haven't received any SMS. I plan to contact AMEX tomorrow regarding this matter. I'm curious if anyone else is experiencing the same issue.

View attachment 53136View attachment 53137

It is cred app when ever it refreshs or try fetching your card statment this happens and this happened to me also. However you should always monitor your transaction. Incase any transaction reflects then immediately call amex and dispute it and they close the card and send a new card. If you feel unsafe remove your card details from cred.

 

[hema220]

It's more about convenience for me. I absolutely agree it could be dangerous as they could be fetching other data and potentially storing it.

But I have 25 cards, it's impossible for me to track for each bill and due date that is different for all. So its not for rewards ( which are non existent) but for tracking and making sure all bills are paid on time

Also it's impossible for them to have somebody sit manually and fetch the emails, I don't think that's possible.

Agrees with you, manually fetching mails not possible

 

[RAMESH BABU N]

CRED having full access to my personal e-mail account is always scary.... Not just card statements but bank statements as well as personal mails too can be accessed by them

Then, why give access?