Multiple Users' Credit Cards Targeted in Coordinated Foreign Fraud; Some Victims Hit with 4 Unauthorized Charges?

Recent reports on social media have revealed that multiple users’ SpadeBank credit cards experienced unauthorized large transactions around September 9 in Brazil and other countries, resulting in theft. Many of these cardholders are not in Brazil and have never been there, leaving them puzzled about these sudden charges.

The Daily Economic News found that in a group chat on a social platform, the members affected by the theft number over a hundred.

On the early morning of September 13, SpadeBank’s credit card center announced that it had immediately activated an emergency response with Mastercard, quickly detecting and blocking the risk.

The bank stated, “Due to external attacks.”

Customer Xiao Pan (pseudonym) said that the suspicious transactions on his credit card occurred on September 9, but he did not receive an alert message that day. He only received a notification of the deposit on September 11.

Some cardholders contacted SpadeBank customer service after receiving the deposit notification. The response was, “First, report to the police and keep the receipt.” They also said, “The relevant department will follow up and contact you, and during the investigation, you are not responsible for this transaction. Please rest assured. If there are any other issues or feedback, we will contact you promptly.”

Additionally, customer service clarified, “If the investigation confirms it was fraud and you are not responsible, the bank will cover the related losses.”

On the evening of September 15, SpadeBank told the Daily Economic News that, “Due to external attacks, some Mastercard cardholders of partner banks were affected. Our card center and partners promptly detected, blocked the risk, and issued notices to protect cardholders’ rights, preventing customers from bearing losses they should not.” The bank’s card center has contacted each affected customer individually to explain and communicate.

Screenshots of transaction information provided by multiple cardholders show that these suspicious transactions mostly involved amounts around 4,900 BRL (Brazilian Real, Brazil’s main currency), which converts to about 6,400 RMB, seemingly avoiding amounts over 5,000 BRL. The merchants involved include “used car dealerships,” “restaurants and dining places,” and “taxi services.”

One person was defrauded in four separate transactions.

Xiao Lei (pseudonym) revealed that he was defrauded four times, all in Brazil, totaling nearly 20,000 BRL.

It is understood that most of the affected credit cards are the SpadeBank and Mastercard co-issued “World Card,” also known as the “Red Sandalwood” card.

The Red Sandalwood card comes in two versions: a new version and an old version. The old version mainly served for overseas spending. In May 2024, the card was upgraded to a new dual-application chip card, usable both domestically and internationally.

Many affected cardholders said they hold the old version of the Red Sandalwood card.

Compared to magnetic stripe cards, chip cards are considered relatively safer because magnetic stripe information is easier to copy.

The China Banking Association previously issued a notice warning that one of the main reasons for card fraud is that cards are skimmed, personal information is leaked, or cards are used improperly. Consumers should enhance their security awareness, use official channels to apply for and use cards, and avoid sharing personal information with others. Never lend or rent out your credit or debit cards to others to prevent misuse. When swiping, keep the card in sight, monitor the number of transactions, and retrieve the card promptly after use. For old or unused cards, promptly close the account and do not discard them casually.

Additionally, while online payments bring convenience, they also carry risks. Criminals may illegally obtain users’ online transaction authentication information and transaction verification data, leading to theft. Consumers should protect their login passwords, withdrawal passwords, and verification codes, and not share them with third parties. Be cautious about the authenticity of online service channels to avoid phishing scams, such as suspicious calls, messages, or links. Do not download unofficial apps or enter personal information like ID, bank card details, passwords, or verification codes on insecure websites or networks.

(Edited by: Wang Zhiqiang HF013)

【Disclaimer】This article reflects only the author’s personal views and is not related to Hexun.com. Hexun.com maintains neutrality regarding the statements and opinions in this article and does not guarantee the accuracy, reliability, or completeness of the content. Readers should use it as a reference and bear all responsibilities themselves. Email: news_center@staff.hexun.com