[Canary_Yellow]

Some low life scum bag has got hold of my credit card details and put through a load of transactions (£8k).

Not an issue from the perspective of having the amounts reversed off my bill, that's all sorted pain free.

I am a bit nervous now though about being at risk of further issues. The scrotes have quite possibly got hold of my address and my email address based on the info available from the credit card company.

I don't think there's too much they can do with that in isolation, but I'm still somewhat concerned.

Any suggestions as to sensible precautions I should be taking to try and protect myself from any identity theft that could occur? I've changed all passwords etc.

Cheers

[Watsey]

I use a password manager to generate all passwords, the stronger the better. Also stores details of credit cards, passports, secure notes, etc.

The folder itself is 256 bit encrypted, and you just need to remember a master password to access it.

Integrates seamlessly with Safari, Chrome, etc, so you can log in to websites with a single click.

It doesn't necessarily stop ID theft, but does make hacking of web-accessed services pretty much impossible.

[davyk31]

What system are you using for passwords.

[strike4A]

I use 1Password app on my iPhone to store passwords. Just need to remember the one master password to gain access or you can use fingerprint.

Ref OP's credit card fraud - how was this done? Can the credit card company trace back to when your details were intercepted?

[RoShambolt]

I would make sure that you don't have any reoccurring passwords between services/accounts, also I would speak to the postman if you can let him know what's happened and ask if he can make sure post goes well into the letter box and never to hand it over to anyone that may be pretending to be the house owner, sometimes these people apply for new cards and credit in your name and try and intercept post relating to it so they get all they need and you are none the wiser to stop it.

[Watsey]

Originally Posted by strike4A

I use 1Password app on my iPhone to store passwords. Just need to remember the one master password to gain access or you can use fingerprint.

Ref OP's credit card fraud - how was this done? Can the credit card company trace back to when your details were intercepted?

This. Great App/software.

[TodmordenLad]

Report the crime to ActionFraud online

[TheLiverBird]

Similar once happened to me. Contact Experian and Equifax and get them to put extra checks in place for anyone trying to get credit in your name.

It was a PITA for a while as everything that I applied for was subject to extra checks and extra proofs of ID but it was worth it for piece of mind.

Not 100% sure but I think (at the time) it was free for 12 months, or only lasted 12 months, and the extra checks dropped off after that.

[Canary_Yellow]

I'm not sure how they got it. The credit card company are also none the wiser.

I will look into a sophisticated password system, I don't think they breached any of my accounts to get hold of my details, I suspect it was via a dodgy website or something similar, so an entirely internet based fraud.

Re identity theft - good point re postman. Is there something you can set up to monitor real time searches of credit file?

EDIT: Thanks TheLiverBird - I'll get in touch with them.

[strike4A]

Often I come home from work and find the postman has not pushed the mail all the way through the letterbox so a corner of a letter is trapped and visible from the outside. Have always thought this would make theft of mail more likely and thus ID fraud.

[ciscopete822]

No matter how amazingly encrypted your password wallet is..... key logger installed on your system will intercept anything you type on keyboard and make use of it. I would say good anti-virus with malware , ransom-ware protection built-in. Make sure you update you def on viruses on daily basis. Whenever possible use Dual-form of authentication , so for example password and finger-print combination or iris scan. Many banks and services are now offering this feature without ppl realizing it.

[Canary_Yellow]

This looks like the way to try and stop anything being taken out in your name:

https://www.cifas.org.uk/services/id...e-registration

This is the type of thing I'm most worried about right now. Although this seems relatively extreme, should I just monitor my credit report myself instead? How impractical is living with additional requirements for future credit? The only things I'm likely to need to do in the next 12 months or so are renew car insurance / home insurance etc. and possibly a new phone contract.

[Watsey]

Originally Posted by ciscopete822

No matter how amazingly encrypted your password wallet is..... key logger installed on your system will intercept anything you type on keyboard and make use of it. I would say good anti-virus with malware , ransom-ware protection built-in. Make sure you update you def on viruses on daily basis. Whenever possible use Dual-form of authentication , so for example password and finger-print combination or iris scan. Many banks and services are now offering this feature without ppl realizing it.

Yes good point. Two factor authentication using Google Authenticator or similar also substantially increases security. I use this with several online services.

[mcoops]

The number of scumbags out there never ceases to amaze. After a period of getting hammered, I'm just getting card not present fraud under control for our company's app. These guys are absolutely forensic in the way they will stress test any controls you put in place. Not only the card and personal details, but time of day, order value, numbers of orders in a given time window, usage in adjacent stores, etc. Bastards.

[xenon]

Originally Posted by TodmordenLad

Report the crime to ActionFraud online

[rosstin]

Originally Posted by TheLiverBird

Similar once happened to me. Contact Experian and Equifax and get them to put extra checks in place for anyone trying to get credit in your name.

It was a PITA for a while as everything that I applied for was subject to extra checks and extra proofs of ID but it was worth it for piece of mind.

Not 100% sure but I think (at the time) it was free for 12 months, or only lasted 12 months, and the extra checks dropped off after that.

Was that in the UK or US?

[rosstin]

Originally Posted by Canary_Yellow

I'm not sure how they got it. The credit card company are also none the wiser.

I will look into a sophisticated password system, I don't think they breached any of my accounts to get hold of my details, I suspect it was via a dodgy website or something similar, so an entirely internet based fraud.

Re identity theft - good point re postman. Is there something you can set up to monitor real time searches of credit file?

EDIT: Thanks TheLiverBird - I'll get in touch with them.

Don't forget the 3rd bureau, Call Credit.

[ciscopete822]

Originally Posted by Watsey

Yes good point. Two factor authentication using Google Authenticator or similar also substantially increases security. I use this with several online services.

[TodmordenLad]

Originally Posted by TodmordenLad

Report the crime to ActionFraud online

Originally Posted by xenon

??

My bank required me to back in 2013 although my case was more serous than the OPs, involving identity theft via a recruitment website which resulted in multiple applications for credit in my name, all of which were fraudulent. The case got picked up by the City of London Police, and without their involvement, I wouldn't have been able to get the "debt" resolved and the debt chasers off my back at the time.
I don't know whether ActionFraud is still operating but some banks require you to register id theft with them, AFAIK

[TheLiverBird]

Originally Posted by rosstin

Was that in the UK or US?

UK - although it could well have been 15-20 years ago now.

[xenon]

Originally Posted by TodmordenLad

??

My bank required me to back in 2013 although my case was more serous than the OPs, involving identity theft via a recruitment website which resulted in multiple applications for credit in my name, all of which were fraudulent. The case got picked up by the City of London Police, and without their involvement, I wouldn't have been able to get the "debt" resolved and the debt chasers off my back at the time.
I don't know whether ActionFraud is still operating but some banks require you to register id theft with them, AFAIK

I found them useless when I used them, wasn't worth bothering with.

[Canary_Yellow]

Originally Posted by xenon

I found them useless when I used them, wasn't worth bothering with.

I have reported it via actionfraud, but as a notification really rather than an expectation of them doing anything about it.

On the basis that the credit card company will be picking up the tab, the crime is actually against them, so it's for them to report if they wish, rather than for me to do so.

I also asked whether I should report this to the police or not, and was told that it was entirely up to me, but don't expect them to do anything about it if I do.