Hi, that’s odd. Exact some thing happened to me yesterday. £300 on 2 separate transactions to Tick Tock. Blocked the card and they tried two more this morning. I have a joint account with my wife. It was my wife’s card so she had to do the fraud report. Waiting to hear back with no update. Can’t call them with fraud enquiries.
1 Like
As you’ve reported it, Monzo will be investigating. Hopefully it won’t be too much longer until you hear back from them.
1 Like
@AlanDoe related to the other post
1 Like
The number is on the back of your card or a google will reveal it.
+442038720620
But phone isn’t the best way to speak to Monzo. Go to the help section, type “contact” and select “Contact us”
If you’ve already reported the transactions, hold tight and wait for Monzo.
1 Like
I’ve had exactly the same thing, an ‘active card check’ followed by two payments to TikTok. I’ve never opened Tiktok in my life, and I had no notification of a card check - it didn’t ask for my approval.
I reported it last night but not got any reply back from Monzo. I started a chat earlier because my regular payments like to Apple are now being declined but no reply on chat either.
It’s not good to not have any update. It’s the best part of £1000 taken from me.
I only use virtual cards for online payments (that’s why don’t use Starling debit card online) 
Not on Tik Tok. Didn’t see any related transactions nor on my 
nor on other accounts as Revolut 
You need to give them time to investigate, as soon as they have done that they’ll be in contact. If the card is still active just unfreeze it at the point where you’re about to manually put a subscription though and then freeze it again afterwards, or if you’ve another card with a bank, transfer the money and use that.
Interesting… so it’s a card-based attack, rather than an account-based attack. Which points to a breach of data related to online purchases using a card. Time to freeze those cards!
4 Likes
I’ve just preemptively cancelled my “online shopping” virtual card and set up a new one. I should probably set it to auto/delete periodically to prompt me to create a new one anyway.
I mean Magento used for thousands of sites has had multiple issues with security and unless people patch their commerce site all sorts can go on. It would affect a large swathe of sites across the internet leading to a lot of card details being in the wild and can come from all sorts of small retailers that simply dont have a clue.
3 Likes
I thought I had to weigh in and vent a bit (apologies in advance 
) because the exact same thing happened to me last night at around 6:40pm! Makes me wonder what company or system has been breached and if there is a connection/pattern that got us all affected 
The only difference for me is the active card check was done for newblack.se (whatever that is) and then I was charged by TikTok for £84.89 and then £212.25 a minute later. I was in the shower so I only noticed the notifications 15 minutes later, reported them as fraud, froze my card, etc. I’m concerned that the fraudulent payments took my balance below zero which means I’ll be paying overdraft charges for payments that weren’t made by me 
I contacted the live chat this morning to double check if the fraud report has been logged. They were very helpful and confirmed the case is open and I’ll be contacted by their team within 24 hours or longer if they’re busy (which I think is the case since it’s not a one-off thing). They also helped me to get a replacement card ordered because I kept getting errors whenever I tried to do it myself (a speculation, but might be due to influx of people ordering them at the same time?).
It was scary when this happened because it’s the first time I’ve ever been involved in this. I was stressing out and crying, had to cancel plans and was beating myself up very hard about the whole situation. But I’m so so so glad I found this forum post because this made me feel less alone and be less hard on myself. Fingers crossed this gets sorted soon for all that were affected!! 
I’ll keep you all posted whenever I hear anything back just in case someone else who’s been affected by has just come across this forum and is worried about timeframes.
8 Likes
Hey and welcome 
I know it’s easy to say but try not to be too hard on yourself as it’s probably nothing you did and therefore nothing you could’ve done differently.
Hope you get it solved very soon!
4 Likes
Just to let you know, I was refunded in full today. No questions asked,. You’ll get your money back 
7 Likes
I’ve had my money back from Monzo so that’s good. But this process has highlighted security issues which could be fixed by Monzo.
-
not all payments are asked for authorisation. What’s the point in authorisation because criminals will set websites up that don’t ask for it! - Monzo should force authorisation regardless if a website asks for it. Or decline payments that don’t use it. Have a setting for us to choose. I would decide not to pay out on websites without it. This would avoid most fraud I bet, and save millions.
-
virtual cards for all users - they’re only in Monzo plus. Why should I have to pay more to protect my money in monzo. Security features should be for all
-
locking my card is possible BUT I have regular subscription payments going out. Apple, Amazon, Disney, Netflix and more. They’re being declined now and I don’t get my card for 8 more days. 10 days since the block. Apple Pay is blocked too. Monzo could allow us to choose “safe” retailers to allow auto payments whilst the card is locked. Apple Pay is quite secure using my phone or watch so I should be allowed to keep using it when the card is locked. This would also stop any fraudulent transactions as the card is locked but allow paying for subscriptions to trusted providers.
-
I can’t pay from a pot if it’s a card payment. Is that a plus feature too?? If I could, I could leave my card empty and Netflix etc could be paid from that.
So in lieu of extra security measures and using a normal Monzo account, the only idea I have is this…
I’ve put most of my “spending money” in a pot. I’ll leave less than £100 on my card for subscriptions. And have to transfer money over every time I need to spend. If it happens again I won’t lose so much money at least which was extremely worrying.
3 Likes
This wouldn’t have changed anything for the fraud that took place.
The only advantage would be deleting the card and having a new one right away.
1 Like
Yes I agree, but was told virtual cards could improve security. I’ve never used one so not sure just yet how to do it. Unless I can pay the subscriptions using that and so top it up a small amount and leave the main card locked.
Pretty sure they can’t, MasterCard & Visa would have to force this for all cards. Monzo don’t control the rules around how payments are presented to cards.
4 Likes
Enforcing it will save millions in fraud. There’s a solution right there. Let me choose to decline payments that are not authorised. Must be a way for them to to do it surely. Monzo must be able to not pay out if I haven’t authorised it surely? I don’t how it all works behind the scenes but it must be possible if they wanted to do it.
Doesn’t matter what our thoughts are about it, Monzo can’t control this aspect of the payment system, they have to follow the rules stipulated by MasterCard
As for card controls yes they could come up with more granular controls but it’s been years and nothing as yet
2 Likes