Help needed fraud transactions done on my Axis card

[bhargav.p]

Help needed

my email has been hacked, and an unknown person logged into my Flipkart account. The hacker tried to buy the Apple and Google Play vouchers on December 15 early in the morning using my saved cards. Axis is one of those in that Flipkart account. The hacker was successful in placing the orders for ₹6000*3=18000, which is using my email as an OTP source. The axis alerted in email, but he acknowledged the transaction was done myself from email. The hacker tried to place multiple orders but got a call from the axis alert. I attended it and acknowledged this transaction was not done by me, and the same I tried to convey to the customer agent on the same day after 8 a.m. and raised the complaint.

For next 6 hours flipkart orders were on hold , tried reaching out to flipkart customer care but those people were idiots saying once the order is approved we will cancel the orders. After 6hrs vouchers sent to hacker.

Now Neither AXIS nor flipkart helping , axis saying transactions done with OTP authentication ,so case is closed.

Flipkart says now transaction completed we can't do anything.

May this incident will alert some of the people in this group not to loose their money.

Please help me to proceed further.

Thanks

 

[John123]

There's another thread with exactly same incident. Please search that thread. Have shared security tips in that thread.

looks like the fraudster is same in both cases.

 

[bhargav.p]

Aoother added layer of security :

Enable two factor authentication for all the apps that we use if available.. This is must ..

Some of the precautions and lessons learned to avoid this kind of fraud are

1. Use separate email for credit cards or banks with 2-step verification or 2-factor authentication enabled.

2. Never use this email outside of banking-related apps or links to third-party apps.

3. Disable online,POS, or tap-n-pay transactions on your credit card, or keep 2–5%, depending on your usage.

4. Don't save any cards on e-commerce sites.

5. If possible, disable the OTP on email for added security.

6. Don't keep your phone silent, especially at night; alert calls may come, so we can minimise the loss.

 

[akshayhs]

Check if you are a victim of access token spoofing. It's very common these days

 

[bhargav.p]

Some of the precautions and lessons learned to avoid this kind of fraud are

1. Use separate email for credit cards or banks with 2-step verification or 2-factor authentication enabled.

2. Never use this email outside of banking-related apps or links to third-party apps.

3. Disable online,POS, or tap-n-pay transactions on your credit card, or keep 2–5%, depending on your usage.

4. Don't save any cards on e-commerce sites.

5. If possible, disable the OTP on email for added security.

6. Don't keep your phone silent, especially at night; alert calls may come, so we can minimise the loss.

What burning me is after the fraud happened , the orders were on hold for 6hrs , i contacted flipkart cc multiple times but they didn't even bothered about.

 

[varun__goel_]

What burning me is after the fraud happened , the orders were on hold for 6hrs , i contacted flipkart cc multiple times but they didn't even bothered about.

Flipkart is the worst company I've ever come accross. Stay away from it as much as possible.

 

[SSV]

What burning me is after the fraud happened , the orders were on hold for 6hrs , i contacted flipkart cc multiple times but they didn't even bothered about.

Write to FK top management.. with some sort of evidence.. illustrate the whole episode. put the same letter on their Social media handles..
Believe me if you can write it nicely, they will come to the table..
Forget about all these low level support staff idiots..
Highlight the support idiots deficiency in tackling cyber fraud and negiligence they had shown....

Clearly articulate how things unfolded irrespective of your continuous effort to stop this crime to get out of the hands.. and the irresponsibilty of support staff in handling this issue..
The key here is with some proofs in the form of some screenshots..

 

[SSV]

my email has been hacked

Which email service provider do you use?

 

[Farhad sekh]

Help needed

my email has been hacked, and an unknown person logged into my Flipkart account. The hacker tried to buy the Apple and Google Play vouchers on December 15 early in the morning using my saved cards. Axis is one of those in that Flipkart account. The hacker was successful in placing the orders for ₹6000*3=18000, which is using my email as an OTP source. The axis alerted in email, but he acknowledged the transaction was done myself from email. The hacker tried to place multiple orders but got a call from the axis alert. I attended it and acknowledged this transaction was not done by me, and the same I tried to convey to the customer agent on the same day after 8 a.m. and raised the complaint.

For next 6 hours flipkart orders were on hold , tried reaching out to flipkart customer care but those people were idiots saying once the order is approved we will cancel the orders. After 6hrs vouchers sent to hacker.

Now Neither AXIS nor flipkart helping , axis saying transactions done with OTP authentication ,so case is closed.

Flipkart says now transaction completed we can't do anything.

May this incident will alert some of the people in this group not to loose their money.

Please help me to proceed further.

Thanks

How the scamster got your CVV??

Without CVV transaction should not be completed

 

[varun__goel_]

How the scamster got your CVV??

Without CVV transaction should not be completed

Saved cc do not require cvv. Though they ask but I read somewhere that even if you enter wrong cvv, the transaction goes through successfully

 

[RkrRkr is verified member.]

I heard Cyber crime won't help anything for this much small amounts and I don't know any political/big persons in society to move further. But I will raise online complaint in cyber crime portal.

May be..
But our duty is to file the case with them.
You must approach RBI BO against AXIS and also flipkart CEO desk for rederessal if ON time intimation has been given to both the parties regarding fraudlent transaction with proof.

 

[RkrRkr is verified member.]

Saved cc do not require cvv. Though they ask but I read somewhere that even if you enter wrong cvv, the transaction goes through successfully

Absolutely correct 👍

 

[Deleted member 9785]

Help needed

my email has been hacked, and an unknown person logged into my Flipkart account. The hacker tried to buy the Apple and Google Play vouchers on December 15 early in the morning using my saved cards. Axis is one of those in that Flipkart account. The hacker was successful in placing the orders for ₹6000*3=18000, which is using my email as an OTP source. The axis alerted in email, but he acknowledged the transaction was done myself from email. The hacker tried to place multiple orders but got a call from the axis alert. I attended it and acknowledged this transaction was not done by me, and the same I tried to convey to the customer agent on the same day after 8 a.m. and raised the complaint.

For next 6 hours flipkart orders were on hold , tried reaching out to flipkart customer care but those people were idiots saying once the order is approved we will cancel the orders. After 6hrs vouchers sent to hacker.

Now Neither AXIS nor flipkart helping , axis saying transactions done with OTP authentication ,so case is closed.

Flipkart says now transaction completed we can't do anything.

May this incident will alert some of the people in this group not to loose their money.

Please help me to proceed further.

Thanks

no 2FA in gmail and flipkart?

 

[Strange]

Check if you are a victim of access token spoofing. It's very common these days

What's this? Can you elaborate?

 

[Strange]

May be..
But our duty is to file the case with them.
You must approach RBI BO against AXIS and also flipkart CEO desk for rederessal if ON time intimation has been given to both the parties regarding fraudlent transaction with proof.

How to contact Flipkart CEO desk?

 

[CardSeeker]

U don't enabled 2FA On Gmail ?

 

[D₹V]

U don't enabled 2FA On Gmail ?

no 2FA in gmail and flipkart?

Even if 2FA is enabled.

Google account can be accessed by hacker using cookies spoofing.

I think that's what happened here.

 

[panchabhut]

I always tell people not to use GMail as the email for banks. A pure browser based mail that need not be linked to any mobile OS is always better.

 

[drsel]

He used to login flipkart account using email and got OTP on mail,he logged in to flipkart

So I have enabled two factor authorisation on Amazon, where OTP will also be asked if the hacker gets your email to login.
On Flipkart app I removed all my cards

 

[Deleted member 9785]

 

[John123]

I always tell people not to use GMail as the email for banks. A pure browser based mail that need not be linked to any mobile OS is always better.

I literally hate gmail. Just using it for youtube.