Hacker News Reader

Comment by bigmofo | Hacker News Reader

When you lose your credit card and you call your credit card company and them them that you lost it, they issue you a new card with new numbers; this way anybody that had the information on the card would not be able to make further transactions. I would consider the card lost when a company would not delete the credit card information on my request to delete the information.

View on HN

A new number doesn't necessarily prevent charges from vendors who had the old one. For your convenience the banks actually allow new charges on the old cards after they are cancelled. I assume they whitelist vendors that have good reputations or filter based on patterns of charges against your account which you have not disputed.

Verizon was able to charge against my old account for over a year. I kept getting snail mail letters from my bank telling me that the card I was using had been cancelled and that I needed to update it, but I kind of just wanted to see how long they would let it go.

In other cases, the bank will actually update the vendor with your new card number so that subscriptions are not interrupted.

>In other cases, the bank will actually update the vendor with your new card number so that subscriptions are not interrupted.

That's apparently a feature: https://usa.visa.com/dam/VCOM/download/merchants/visa-accoun...

Even if it is stolen? This thing is massively dangerous. It ensures your credit card details are stored all over the place for them to be leaked or stolen, with no way for the consumer to clean this up.

In theory they would make sure it was an account you used before the theft.

Yeah but letting services expire with the credit card unless you still use them is not a bad way to get rid of all the services you subscribed thinking it could be useful but never used.

Reminds me of what was done in the military (I think it was in a European country). Officers were spending their time writing reports that were never read. They introduced a policy under which for a given time everyone should stop writing reports until someone complained that they were not receiving it. And if that didn't happen this type of report would be scrapped.

Hmm, I feel like in my job I write a lot of things that no one ever reads (issue notes, extra commit information, comments) with the expectation that it'll be helpful information if I or someone else ever does need to look to figure out why I did something.

And it has been helpful. I mean maybe about 1% of it is read later at some point and helps clarify a situation. 99% of it is never seen again. That 1% of the time it's really helpful to have it.

That is pretty screwed up. So, you have a merchant that is stalking one and they get updated information.

I think I will stick with with the new next gen taxi service where one pays with cash.

If you report it as stolen and ask for it to be blocked that will stop all transactions on it.

If it expires or you get a new card in a normal flow it can be charged further.

>"For your convenience the banks actually allow new charges on the old cards after they are cancelled."

I have not heard this before. My bank certainly doesn't do this and its a major bank. I actually proactively ask for new cards periodically so that the old ones are no longer valid.

Yep, AmEx for example will provide vendors with the new numbers, expiration dates, etc., when your card expires and they issue you a new one.

I have done this. Yes, they initial did keep the subscription going. However, I told the credit card company that I did not authorized any further; they reversed everthing out. I really wonder whether they give the company the new information or whether they just allow authorization using the old numbers; seems like it is pretty screwed up security if they give the new information to the company.

Also, if you say: - Card was lost. - After reviewing all accounts, it was discovered that the CC information couldn't be deleted from the ubuer UI. - I hereby do not authorized uber to make any charges. - tell them in writing or record the conversation.

I don't see any way uber can make any valid charges against your account (assuming no more action on one's part).

I also wonder whether it follows CC guidelines/rules to keep CC information when the customer has explicitly tried to remove and communicated to the company to remove said information.

The old card details still stay live depending on how they issue the new card.

Currently have two Amex cards with different numbers that show up as 1 card on their online portal & get treated as one.

Reply on news.ycombinator.com