CCBill account change fraud attempt

[SimonScans]

So on Friday I get this email from CCBill:-
Quote:

"Dear Simon,


We have received a wire transfer form via email signed by Paul, however we are unable to accept it as Paul is not the principal listed on this account. Please sign the form and resend it at your earliest convenience so we may process the request.



Please reply if you have any questions. "

No Paul works for me and as we're not changing the CCBill account any way it's a pretty clear cut case of some bad people attempting to hijack my payments.

I'm therefore very surprised at the lack of urgency from CCBill.

I rang support immediately; the contact they gave wasn't available, no offer to take a number or organise a callback either. No worries I thought I'll reply to the email, which I did. The silence since then has been stunning. No reply, no nothing.

Ok, it's the weekend, but hey, this is important to me, and I'd like to know it's resolved.

FYI, we no longer use CCBill as our primary biller, but the old tour still exists, and reasonable amount of affiliate traffic in particular goes via it.

[BVF]

How the fuck is it a lack of urgency if they didn't change anything?....What are they supposed to turn on the Batman light? Call for Spiderman?....What?

[nation-x]

It looks to me like their audit process worked as expected... what is the deal? I think CCBILL acted correctly here and you are freaking out at them for no reason. I would be more concerned with the fact that someone obviously faked your email address... I would change my account email if I were you.

[asianseekerz]

hoping that problem will be resolve ASAP,

[SimonScans]

They're supposed to acknowledge a client and address his concerns. It's called customer support and one of the things we pay for. I'm guessing you switch off your servers at 7pm on a Friday and then go play golf till Monday?

This was late Friday, but in my email was a bunch of other questions. Such as have any other changes happened already that weren't flagged up at the time?

Wait till someone tries to mess with your money, you'll bitch too if no one jumps.

[BVF]

Originally Posted by SimonScans

They're supposed to acknowledge a client and address his concerns. It's called customer support and one of the things we pay for. I'm guessing you switch off your servers at 7pm on a Friday and then go play golf till Monday?

This was late Friday, but in my email was a bunch of other questions. Such as have any other changes happened already that weren't flagged up at the time?

Wait till someone tries to mess with your money, you'll bitch too if no one jumps.

Your money WASN'T MESSED WITH!!..You got acknowledged by the initial email....Why in the hell would somebody be around for a banking issue on a weekend? Try and call your bank today...

[marcjacob]

I think CCBill did a good job here actually. They have a process to prevent unauthorised changes on your account, that process worked perfectly.

Call them on Monday to confirm that you dont authorise this change, double check the account is in order and maybe setup a password on your account that needs to be specified before changes ca be made.

[Machete_]

I agree with BVF, and im not a CCbill fan
Their audit worked and you got a notification. Nothing have changed and nothing was compromised. You cant expect them to get back to you on a issue like this on a weekend

[SimonScans]

Originally Posted by marcjacob

I think CCBill did a good job here actually. They have a process to prevent unauthorised changes on your account, that process worked perfectly.

Call them on Monday to confirm that you dont authorise this change, double check the account is in order and maybe setup a password on your account that needs to be specified before changes ca be made.

I will call them on Monday, but my point is I tried to do all you suggest on Friday within minutes of getting the email. Over the phone I was fobbed off and the email remains un replied.

What if I get the same from them on Monday? Wait till Thursday and don't panic?

[Machete_]

Originally Posted by SimonScans

I will call them on Monday, but my point is I tried to do all you suggest on Friday within minutes of getting the email. Over the phone I was fobbed off and the email remains un replied.

What if I get the same from them on Monday? Wait till Thursday and don't panic?

I dont know CCbills personal structure, but i would be surprised if the same person/procedure that send you that email is the actual person you need to talk to.

Those functions are usually separate operations

[Paul Markham]

A surname might help. Other that that I think CCBILL have done the right thing. They might of gotten the account confused with another account. We are in the process of moving where CCBILL wire transfer our money to and my name is Paul.

[Steve Awesome]

What's your primary motivation?

1. Fuck up the guy(s) who filled out the wire form trying to steal from you
2. Ask CC*Bill to put your account in "change lock-down" for X month(s)
3. Get CC*Bill to fuck up the guys who filled out the wire form trying to steal from you.

[SimonScans]

Originally Posted by Steve Awesome

What's your primary motivation?

1. Fuck up the guy(s) who filled out the wire form trying to steal from you
2. Ask CC*Bill to put your account in "change lock-down" for X month(s)
3. Get CC*Bill to fuck up the guys who filled out the wire form trying to steal from you.

Just number 2

[SimonScans]

Originally Posted by Paul Markham

A surname might help. Other that that I think CCBILL have done the right thing. They might of gotten the account confused with another account. We are in the process of moving where CCBILL wire transfer our money to and my name is Paul.

Hi Paul, I very much hope that's the case that its just an admin error at ccbill. Shit happens, its just grizzly to not be able to sort it on the spot and move on.

[TeenCat]

from where was this request done? from your ccbill area? if yes change your password to mixed 8 chars cause ccbill is only accepting first 8 chars, not only for members, but also for webmasters, whats totally stupid if i have to say ... it is not that hard to get inside ccbill members, as you can see your ccbill id at join page, username is mostly sitename so maybe simonscans? and if you choose easy password ... wish you luck with getting this sorted out

[shunga]

I would imagine the person who this will be bumped up to isn't in the office. Not all departments will be available 24/7, especially the senior departments, like fraud.

[Steve Awesome]

Originally Posted by TeenCat

from where was this request done? from your ccbill area? if yes change your password to mixed 8 chars cause ccbill is only accepting first 8 chars, not only for members, but also for webmasters, whats totally stupid if i have to say ... it is not that hard to get inside ccbill members, as you can see your ccbill id at join page, username is mostly sitename so maybe simonscans? and if you choose easy password ... wish you luck with getting this sorted out

Dude, read the first post in this thread:

"We have received a wire transfer form via email signed by Paul..."

[marcjacob]

Originally Posted by SimonScans

What if I get the same from them on Monday?

Then its fair to start moaning. But at least give them a fair chance to help you.

Does it need to be a specific person? Surely any webmaster support rep can give you this info, and mark your account.

[V_RocKs]

Change to Peter and rerun.