SDE - payment issues? (excised from Who's Next announcement thread)

[SomethingAnything]

I had not clicked into this thread until today but after reading it I have to report another strange occurrence. I ordered the Elton Blu-ray from SDE on Nov. 6. I recall that I originally entered my Amex card number but then remembered I would pay the foreign tax if I used it instead of my Visa. So before I hit enter I changed the card and number.

On Thursday of this week I was informed of a fraudulent charge on my Amex for a very small charge (less then $5). Today I was informed of a fraudulent charge on the Visa for around $50. Both charges were here in the states.

Of course I cannot pinpoint that the problem was with the SDE purchase and I can’t see how the Amex# could have been retrieved since I never hit enter, but it was enough of a concern to report it here. I’ll definitely be using PayPal if/when I order anything else from there.

I don't think you have to hit enter for it to be read. For example, today, I ordered something from Rarewaves, before I even hit enter, I received a message letting me know that I'd entered wrongly. So even without hitting enter, my info is getting read by background software -- in this case, not a fraudulent one, just one that verifies the card info.

Have you let SDE.Com know? It still may not be from their website, but one thing that's unique in this situation is this QQ forum. Normally people get stung and can't work out how, but we have a forum that's a potential common denominator in a positive way, permitting us to realise and warn others, in case.

Yes, PayPal is clearly the smartest way now when buying from SDE.COM, just to be safe.

 

[bearbis]

After being hacked shortly my previous 2 purchases on SDE, I CAN UNEQUIVOCALLY SAY THAT IT'S THEIR PAY SITE WHICH IS DEFINITELY THE CULPRIT. Pre-ordered Elton John yesterday on their site thru PayPal (which is now using my now 3rd Debit Card) and today received notice thru my bank of 4 fraudulent attempts of my last debit card. NO DOUBT ABOUT SDE PROBLEM STILL ONGOING!!!!!

 

[HomerJAU]

Yes, PayPal is clearly the smartest way now when buying from SDE.

ApplePay says hello

 

[JediJoker]

Yes, PayPal is clearly the smartest way now when buying from SDE.COM, just to be safe.

ApplePay says hello

ShopPay in the back:

 

[sjcorne]

I purchased Diamonds on the 14th with PayPal, no issues thus far

 

[LuvMyQuad]

I purchased Diamonds on the 14th with PayPal, no issues thus far

Same here.

 

[jefe1]

I had no issues with Gos's credit card.
Paul said he would send me an extra copy after he shipped 5 to his cousins. What a nice guy.

 

[stoopid]

I had no issues with Gos's credit card.
Paul said he would send me an extra copy after he shipped 5 to his cousins. What a nice guy.

Gos would just resell his copy a week later anyway. This is money better spent.

 

[@gpoly]

After being hacked shortly my previous 2 purchases on SDE, I CAN UNEQUIVOCALLY SAY THAT IT'S THEIR PAY SITE WHICH IS DEFINITELY THE CULPRIT. Pre-ordered Elton John yesterday on their site thru PayPal (which is now using my now 3rd Debit Card) and today received notice thru my bank of 4 fraudulent attempts of my last debit card. NO DOUBT ABOUT SDE PROBLEM STILL ONGOING!!!!!

When you enter your card through PayPal, it’s on a page on PayPal’s website, not SDE. It’s the same as it works for every other online business using PayPal.

I once worked for a company that took PayPal as payment on goods and at no stage did PayPal ever communicate credit card details to us. After your credit card is checked and debited by PayPal, they then transfer funds direct to the sellers bank account with just a reference number for the transaction. The seller and the sellers website NEVER see your card details.

 

[bearbis]

When you enter your card through PayPal, it’s on a page on PayPal’s website, not SDE. It’s the same as it works for every other online business using PayPal.

I once worked for a company that took PayPal as payment on goods and at no stage did PayPal ever communicate credit card details to us. After your credit card is checked and debited by PayPal, they then transfer funds direct to the sellers bank account with just a reference number for the transaction. The seller and the sellers website NEVER see your card details.

But interesting how after using the SDE Site to order (even this time thru PayPal), it suddenly reactivated the hackers who automatically tried to again use my previously card they hacked just based on my names and address.

 

[olgitnorm]

Probably stating the obvious but worth running a virus scan on your computer to make sure you haven’t picked up anything nasty in the background that’s causing this?

 

[JediJoker]

But interesting how after using the SDE Site to order (even this time thru PayPal), it suddenly reactivated the hackers who automatically tried to again use my previously card they hacked just based on my names and address.

Call me a pedant, but they're not "hacking" your card. They may be hacking some online infrastructure to obtain your info, but once they've got it, they are simply using it to attempt fraudulent transactions.

 

[bearbis]

Call me a pedant, but they're not "hacking" your card. They may be hacking some online infrastructure to obtain your info, but once they've got it, they are simply using it to attempt fraudulent transactions.

Nicely put. Whatever infrastructure SDE is using as a payment portal is definitely Totally NOT SECURE for Debit Cards, Credit Cards.Paypal seems OK

 

[SeeMoreDigital]

Nicely put. Whatever infrastructure SDE is using as a payment portal is definitely Totally NOT SECURE for Debit Cards, Credit Cards.Paypal seems OK

You know what payment infrastructure SDE uses... It's Shopify!

 

[Robert van Diggele]

You know what payment infrastructure SDE uses... It's Shopify!

and that is secure. Just used it again, this time for Simple Minds.

 

[bearbis]

You know what payment infrastructure SDE uses... It's Shopify!

It actually popped up as a different portal bank first, spun forever then after I backed off that page, tried again, spun forever again then I checked PayPal and got confirmation of payment thru PayPal and an order confirmed an hour or so later from SDE. Tried to screenshot that other spinning portal but was unsuccessful. Next day the attempts on my old debit card started.

 

[SeeMoreDigital]

It actually popped up as a different portal bank first, spun forever then after I backed off that page, tried again, spun forever again then I checked PayPal and got confirmation of payment thru PayPal and an order confirmed an hour or so later from SDE. Tried to screenshot that other spinning portal but was unsuccessful. Next day the attempts on my old debit card started.

So did you try to pay using a card first?

 

[bearbis]

So did you try to pay using a card first?

After 2 previous debit cards on my last two purchases there was no way other than PayPal. Seems whoever's hacking is going by name/address they're hacking off people using SDEs online purchases. That obviously triggered them attempting my last closed debit card increase again.

 

[stoopid]

After 2 previous debit cards on my last two purchases there was no way other than PayPal. Seems whoever's hacking is going by name/address they're hacking off people using SDEs online purchases. That obviously triggered them attempting my last closed debit card increase again.

My gut says you have a breach of those cards elsewhere, paypal doesn't exchange credit card info as previously explained. It would be literally impossible for an intermediary with SDE or Shopify access to view the paypal credit card data. That's why no paypal users are being affected, you would also be literally the only one which again points to another source for your woes.

 

[SeeMoreDigital]

After 2 previous debit cards on my last two purchases there was no way other than PayPal. Seems whoever's hacking is going by name/address they're hacking off people using SDEs online purchases. That obviously triggered them attempting my last closed debit card increase again.

If you feel this is the case with your cards you need to report precisely what happened to Shopify!