Reporting Stolen Credit Card Lists?
harlows_monkeys asks: "I just received a spam, at both home and work, both sent through trojaned Windows machines, offering to sell me a credit card database stolen from camcontacts.net.
Included was a link to a sample of the database (no, I'm not providing a link!). I downloaded the sample, and it appears legit. There are 13000 numbers. I picked one of the Visa numbers, went to Visa's web site, and entered it in a form to sign up for fraud protection, and it accepted it, and identified the issuing bank. It was accepted. All indications are that this stuff is real.
So, the question arises--what is the correct way to deal with this?
"I called Visa, and after they spent a while figuring out what department was responsible, all they could suggest was call local law enforcement, and if I wanted to talk to Visa's security people, call back at 9am when they get in.
American Express didn't even suggest calling local law enforcement. They just suggested calling back when their security people got in in the morning.
I then called the FBI. They said to call the Secret Service and gave the number.
At the Secret Service, I ran into an answering machine that gave their office hours.
It seems to me that there should be -someone- who would be interested in a widely-sent spam that links to 13000 credit card numbers, with expiration date and customer name and zip code, so as to stop these from being fraudulently used, but it escapes me who that would be--I struck out with all my candidates.
Is it just me, or does the indifference of Visa and Amex to this shock anyone else?"
American Express didn't even suggest calling local law enforcement. They just suggested calling back when their security people got in in the morning.
I then called the FBI. They said to call the Secret Service and gave the number.
At the Secret Service, I ran into an answering machine that gave their office hours.
It seems to me that there should be -someone- who would be interested in a widely-sent spam that links to 13000 credit card numbers, with expiration date and customer name and zip code, so as to stop these from being fraudulently used, but it escapes me who that would be--I struck out with all my candidates.
Is it just me, or does the indifference of Visa and Amex to this shock anyone else?"
That should do the trick.
If you were calling them outside business hours its no surprise they were unresponsive. I'm not saying that I condone their handling of it they should jump on it in an instant however if their security people are not available chances are there is no one there with the knowledge to help.
Everyone is stupid, it is just the degree that varies
Yes, and they've already told you who they are: the various security departments, who will be reporting to work at 9 in the morning.
What, you thought investigative agents hang around 24 hours a day? No, they value sleep.
You cannot apply a technological solution to a sociological problem. (Edwards' Law)
try calling at some time other than 2 am?
-- 'The' Lord and Master Bitman On High, Master Of All
I know reading the articles is often too much to ask, but really, is reading the entire submission such a chore too?