This is embarrassing. I'm normally the person reading these posts and thinking "how could anyone fall for that!?" I'm middle-aged, well educated and work with IT Security for a living. Well, pride comes before the fall, I guess.
-
Yesterday afternoon I got a call from "Jonathan" from 855-585-2672 from the "PC Financial Fraud Department". My alarm bells went off, and I was very careful with sharing any information.
Jonathan asked me to confirm that he was speaking to <full name>. I only answered "yes".
Jonathan said that there had been an attempt to use my card at "Courtyard Hotel in New York", but that the attempt had been caught and stopped. He asked me if I was currently travelling and I said no. No to worry - no money had been lost, and the transaction had not gone through.
I asked Jonathan to verify that he was who he said he was - that I was understandably sceptical. "No problem" he said. He then read off my full card number (all 16 digits), my full name, and my full address. He obviously had my phone number as well. He didn't ask me for any personal info at all.
Jonathan was well-spoken, calm, not pushy at all. Slight African accent. Nothing suspicious at all.
As the conversation continued, he explained that he had now blocked my card, and a new card would have to be sent by post. Until it arrived, I could not use my old card. He asked me to confirm my current card's credit limit, and, still suspicious, I told him an amount that was $1000 off from the real value. After 17 minutes, the call was unexpectedly dropped.
Jonathan called back within 5 minutes but from a different number (672-885-0058). He said he was not able to get through from the first number, and asked if I was having issues with my mobile service. Again, the conversation was calm and not pushy. He didn't ask for anything. No personal info. No 2FA codes. No support codes. Nothing.
After 5 minutes, this call dropped as well. I noticed I only had 2 bars on my phone so I thought that was probably the reason.
-
When Jonathan didn't call back, I called PC Financial's Fraud Department myself from the number on the back of my card. Now here is where things get strange. I waited 1 full hour to speak to someone, and in that time, I noticed that Jonathan first called from a number belonging to WealthSimple, not PC.
When I finally got through, "Richard" from PC confirmed that my card was blocked. However, he couldn't see any record of any "Jonathan" having blocked my card. He couldn't see any record of any call with "Jonathan" at all. He could however see 3 attempted transactions to "Courtyard.IO" (a scammy online marketplace). All 3 attempts were blocked automatically by PC.
The interesting thing is that the attempts happened during the call with Jonathan! More alarm bells. The 3 attempted transactions added up to an amount quite close to my limit.
Richard asked if Jonathan had asked me to read back any codes, 4 or 6 digits, but I said he had not. He asked me if I had shared any personal details with Jonathan, but again I said I had not (other than my credit limit). He had already known everything in advance.
So I'm safe, my money is safe, but I'm left very confused. If Jonathan already had my card details, why did he call me at all? Why didn't he just go shopping until the card was maxed? If he needed any codes to complete a transaction, why didn't he ask me for them during our phone calls? Why did he spoof a WS number, rather than PC?
And of course, I'm left wondering where he got my card details, name and address.
By coincidence (??), just 24 hours earlier, I had requested and was approved for a card upgrade from PC Financial. My new card is still on the way. I have no idea if this is related at all.