NewEgg still totally sucks!

[Elixer]

It is possible that an employee inside newegg stole the info, but, then again, ANY company has those kind of issues these days.
Heck, even paypal had these kind of issues, and lots of processing places as well.
Not long ago, there was a way to guess at CC #'s along with the pin code on compromised CC readers.

Does the OP have the right to be pissed?
Yeah.
Did the OP prove it was Newegg at fault here?
Nope, just speculation.

The CC company *does* know where the charges came from, and since they won't tell you, well, you can't say you know, even if you haven't had a breach since not using Newegg.

 

[Micrornd]

Ok, let's agree to disagree.
I content in knowing that I haven't had a single CC problem since I closed my Newegg account and everyone else is content it couldn't happen to them.
I'm also content in knowing that I won't purchase anything through Newegg, even with Paypal, now that I know they still access your CC when paying with Paypal.
But you may want to consider this.
Paypal can be backed or funded by a CC or bank account, in my case it is a CC.
So for those that fund Paypal with a bank account and buy through Newegg, is your bank account and routing data now in Newegg's database after they checked the account?
I guess it's time to close this thread.

Merry Christmas to all, and to all a good night

 

[OutHouse]

They say that the address I'm shipping to is not the same as the billing address for my CC

I guess i dont follow this. nearly everything i order online i have shipped to my office.

 

[OutHouse]

The CC company *does* know where the charges came from

yup. ive had my company card stolen 3 times. i got a report each time. the last incident some asshole bought like 800 bucks in france at a auto parts store.

 

[Mike64]

Over 4 years times, I had my CC "compromised" 6 times due to "online sales" or so Visa notifies me and then changes the CC number.

I blew right past that the frirst time. What bank is this? (It's not "Visa", "Visa" itself doesn't issue credit cards.) Whichever it is, that sounds positively bizarre. How can they possibly know the charges are fraudulent if you don't tell them you didn't incur or authorize them yourself? And how can you do that if they don't/won't tell you the name of the business submitting the charge? Seems to me you need a new CC more than a new computer parts vendor...

 

[Micrornd]

I blew right past that the frirst time. What bank is this? (It's not "Visa", "Visa" itself doesn't issue credit cards.) Whichever it is, that sounds positively bizarre. How can they possibly know the charges are fraudulent if you don't tell them you didn't incur or authorize them yourself? And how can you do that if they don't/won't tell you the name of the business submitting the charge? Seems to me you need a new CC more than a new computer parts vendor...

The bank is Chase, but that's not a real factor. A new card # and account was issued automatically by Chase before/at the same time they notified me of the "compromised" card each of the 6 times.

As I said in the original post, the cards were declared "compromised". In banking lingo, "compromised" means someone confidentially reported that their security/data was breached and CC data was accessed, meaning the CC could be used for fraudulent charges. It doesn't mean the card has been used for fraudulent purposes, only that someone has all the needed info so that it can be, because the needed info has been accessed by an unauthorized party.

Unless the reporting merchant publicly announces a breach, the issuing bank is obligated to maintain confidentiality and not announce who was breached, only that CC's may be "compromised". That was the most info I was given as to who "compromised" my CC. Big business at it's finest.

I only had 2 fraudulent charges total in the 6 incidents to my account and both were removed.
The point was, all 6 incidents were within 2 days of a Newegg purchase using my CC. They never occurred with any other purchases, Newegg was the only common denominator, and when I closed my account with them and made no more purchases from them with a CC, I have had no more "compromised" CC's since.

Either way, it's over and done with and apparently I'm the only one that had a problem.
I can live with that

The real point of the post was that since I paid with PayPal, why were they still accessing my CC data
That was the point of paying with PayPal so that Newegg had no chance of "compromising" my CC data (that apparently only happens to me )

 

[Micrornd]

I guess i dont follow this. nearly everything i order online i have shipped to my office.

I don't work in an office, more than maybe an hour or two a week, and really try to avoid going there if possible.
I live in a semi-rural area and work in a city. I have a PO Box for billing where all my bills, statements etc. are sent.
My delivery address is my house, but even though USPS delivers the mail there (not a contracted or rural route carrier) they refuse to install clustered lock boxes for the neighborhood ( I guess we're not "upscale" enough)
So all I and my neighbors have are plain old mail boxes that anyone can open and steal mail from.

This was a problem back in the 90's, so many of us that work in the city got PO boxes, for security and put up the smallest mail box possible at our home addresses (small enough that packages don't fit).
Now only junk mail, comes to the home address and anything that could lead to identity theft or other stuff of that nature goes to the PO box.

And almost of my neighbors and I have built lock boxes for packages on our porches that USPS, UPS and FedEx drop the packages in and lock. Works quite well and they are all happy to do it (YMMV, but
FedEx and UPS allow you to designate where at the residence they should leave the package and USPS will also do that if you call the local Postmaster, again YMMV in your area)
We haven't had any package loss in the neighborhood since and from the news on TV that seems to be a big deal these days.

Our only problem now is a dyslexic fill-in mailman that can't understand the difference between the street numbers 489 and 498, so we end up swapping packages on a regular basis

 

[Ackmed]

I used to always use Newegg. Fast shipping, great prices, good rma/return policy. Then they started charging tax to my state. Now it doesn't always ship from newegg. I still use it to look up items, but often times shop elsewhere. Use PayPal if they offer it instead of your cc?

Looking back at my history, first order was in 2002 for an Abit IT7Max2. Good old days!

 

[[DHT]Osiris]

By chance, are you ordering from newegg.co.uk.cn.nk?

How confident are you that your computer is secure?

 

[TwiceOver]

Newegg for correct specs, Amazon for the purchase.

 

[[DHT]Osiris]

Newegg for correct specs, Amazon for the purchase.

Made $900ish worth of purchases from NE in the last 3 months, all of which was cheaper there than Amazon. Depends on the product I'd wager, but every single time I've compared prices, Newegg was cheaper.

 

[turtile]

I think Chase's own systems were breach earlier this year. I have many different cards and both Chase cards were notified by me directly by Chase as stolen. One was a business card and one was a consumer. Neither of these cards were used at the same place! (I highly doubt they just got stolen at the same time)

What really annoyed me was the fact that it happened when I was in China and because they were cracking down on VPNs and we were busy, we couldn't access our email accounts. They could have called my business number but only sent an email. When I got back to the US, I get a message that I was one day away of losing my storage locker due to non-payment!

 

[NeweggSupport]

Hi Micrornd,

I’m sorry to hear you were a victim of fraud. Order verification (also known as address verification) is one of the ways that we prevent online fraud and protect you. Our verification team will contact your card-issuing bank to verify that the billing name, billing address and phone number on your order are the same as what your bank has on file for you.

http://bit.ly/2hN6jYH

For PayPal orders, we contact PayPal for order verification. PayPal orders can only be shipped to the confirmed address on your PayPal account. The address on the order must match the confirmed address (exact spelling, capitalization and abbreviation).

If you need assistance with confirming an address on PayPal please visit this link

http://bit.ly/2i7y3Um

I apologize that your most recent purchase was canceled in verification and I would be more than happy to investigate this matter for you to check if this was an error in our system. Please send us an email at wecare@newegg.com with the subject title AnandTech Post and a link to this post in the body of the email.

Thank you,

Darlene (Newegg Support)

 

[[DHT]Osiris]

Newegg actively monitors these forums.


You have been warned.

Hi Micrornd,

I’m sorry to hear you were a victim of fraud. Order verification (also known as address verification) is one of the ways that we prevent online fraud and protect you. Our verification team will contact your card-issuing bank to verify that the billing name, billing address and phone number on your order are the same as what your bank has on file for you.

http://bit.ly/2hN6jYH

For PayPal orders, we contact PayPal for order verification. PayPal orders can only be shipped to the confirmed address on your PayPal account. The address on the order must match the confirmed address (exact spelling, capitalization and abbreviation).

If you need assistance with confirming an address on PayPal please visit this link

http://bit.ly/2i7y3Um

I apologize that your most recent purchase was canceled in verification and I would be more than happy to investigate this matter for you to check if this was an error in our system. Please send us an email at wecare@newegg.com with the subject title AnandTech Post and a link to this post in the body of the email.

Thank you,

Darlene (Newegg Support)

 

[GagHalfrunt]

It's like saying their name three times makes them appear.

 

[Sonikku]

Told you so.

 

[Micrornd]

Darlene,
Thank you for contacting me in a public forum. I'm sure many will be happy to read your answers.
So I would be remiss if I did not respond here also.

Hi Micrornd,

I’m sorry to hear you were a victim of fraud.

As I stated that was awhile ago, the fraud was stopped and has not occurred again since I closed my Newegg account..

For PayPal orders, we contact PayPal for order verification. PayPal orders can only be shipped to the confirmed address on your PayPal account. The address on the order must match the confirmed address (exact spelling, capitalization and abbreviation).

If you need assistance with confirming an address on PayPal please visit this link

This was done when I opened my PayPal account in 2001. Paypal has confirmed both my billing and shipping addresses and has also confirmed that they sent Newegg my shipping address for this order.

I apologize that your most recent purchase was canceled in verification and I would be more than happy to investigate this matter for you to check if this was an error in our system.

My big concern is that I paid you with PayPal, yet when I contacted Newegg by phone, the CSR knew my CC number and knew that the billing address of my CC was not the same as my shipping address. Why was my CC data accessed by Newegg when I paid with Paypal, Paypal confirmed the transaction, Paypal sent you my shipping address and Paypal sent you my funds.
BTW - It took Newegg 13 minutes to accept my funds and then cancel the order, and 2 days to finally return my funds to Paypal.
Hopefully you will answer in this public forum, rather than taking this private as I'm sure I'm not the only one that would like to know.

Thank you,

Darlene (Newegg Support)

Thank You,
Micrornd

 

[Pantoot]

Darlene,
My big concern is that I paid you with PayPal, yet when I contacted Newegg by phone, the CSR knew my CC number and knew that the billing address of my CC was not the same as my shipping address. Why was my CC data accessed by Newegg when I paid with Paypal, Paypal confirmed the transaction, Paypal sent you my shipping address and Paypal sent you my funds.

I don't understand this part.
If you paid with paypal, newegg would have no idea what your credit card number is. I am pretty sure they can't even tell you funded it with a credit card. (maybe they could back into it based on the fees, i would have to look into my paypal account, and i am lazy)

And, your complaint about how long it took to refund, that's on paypal too. When pushing refunds the recipient always waits to make sure funds clear (or whatever reason).
That's why I can charge your credit card right now and it will show up as pending right away, but if I push you a refund it will take a week before you see it.
It isn't because I am sitting on your money earning the sweet, sweet interest, its because someone in the middle is.

 

[13Gigatons]

The OP is probably right, they keep getting his new card number from an exploit running on his newegg account.

The more disturbing thing is that newegg got a hold of your CC info from PayPal. The very point of PayPal is too hide your credit card info from online stores.

This is why I use cash or Gift Cards to purchase things today. Less headaches and no fees.

 

[Micrornd]

The more disturbing thing is that newegg got a hold of your CC info from PayPal. The very point of PayPal is too hide your credit card info from online stores.

Finally, someone gets it !!
That has been my point, they shouldn't have any of my CC info, much less that the CSR told me my CC billing address didn't match the delivery address and the only way they could know that was to access my CC data.

 

[NeweggSupport]

Finally, someone gets it !!
That has been my point, they shouldn't have any of my CC info, much less that the CSR told me my CC billing address didn't match the delivery address and the only way they could know that was to access my CC data.

Hello Micrornd,

All orders placed runs through an automated verification process with your financial provider. The first step is authorizing payment and the second step is verifying the information. Our customer service team does not have the ability to see any credit card numbers but we will have a section that will tell us if the information matches or not matches. This gives our CS team the ability to assist you further without providing any of your credit card information. If you have any other questions or concerns regarding out policy, please feel free to email us at wecare@newegg.com.

Thank you,
Roxie
Newegg Support

 

[Red Squirrel]

lol nice.

 

[DaveSimmons]

In other words, customer support was saying the payment method's listed address did not exactly match, not that they knew anything about the CC used to fund PayPal.

It's probably something silly like PayPal has the address as "500 Cherry Street, Box 125" while the info entered for Newegg is "500 Cherry St. #125" which a human can tell is the same but a simple bit of matching code might reject.

 

[Pantoot]

In other words, customer support was saying the payment method's listed address did not exactly match, not that they knew anything about the CC used to fund PayPal.

It's probably something silly like PayPal has the address as "500 Cherry Street, Box 125" while the info entered for Newegg is "500 Cherry St. #125" which a human can tell is the same but a simple bit of matching code might reject.

I agree, but Micrornd claims the newegg rep knew his credit card number. I cannot see how that would be possible, no matter what conspiracy theories of hacking you subscribe to. If the payment was through paypal, newegg doesn't know the credit card number.

I guess it would be possible if the rep had said, "what's your credit card number" at some point in the conversation.

 

[DaveSimmons]

The Newegg rep might have misspoken, saying "verify your credit card address" out of habit instead of "PayPal address," then Micrornd ran with it and imagined Newegg had his CC number and had accessed its info.

Without a transcript it's hard to guess exactly what happened, but I'm going to trust Newegg on this one.