Page 1 of 2 12 LastLast
Results 1 to 16 of 27

Thread: Would you send your credit card details by e-mail?

  1. #1
    Taz
    Taz is offline
    Senior Member Taz's Avatar
    Join Date
    Jan 2005
    Location
    London
    Posts
    2,112
    Thanks
    49
    Thanked
    26 times in 25 posts
    • Taz's system
      • Motherboard:
      • Gigabyte Z270 HD3P
      • CPU:
      • Intel Core i5 7600K
      • Memory:
      • Corsair CMK16GX4M2B3200C16R Vengeance LPX 16 GB
      • Storage:
      • Samsung 960 EVO M.2-2280 500GB (PCIe) + 1TB Sandisk Ultra II SSD (SATA)
      • Graphics card(s):
      • Asus NVIDIA GeForce GTX 1070 OC
      • PSU:
      • Corsair CS550M 550W Hybrid
      • Case:
      • NZXT Source 340
      • Operating System:
      • Windows 10 Pro
      • Monitor(s):
      • 34" Asus Designo Curve MX34VQ UWQHD Monitor
      • Internet:
      • Virgin Media Vivid 200

    Would you send your credit card details by e-mail?

    I've just been gobsmacked by a conversation I had with my company's travel agent. I'm not going to name the travel agent as they are a global company.

    I travel a lot for my job and my admin books my flights through our travel agent. They hold my credit card details in my profile and they charge all my flights directly to my credit card. They then send me an invoice and I use that as a receipt for my expenses to claim the cost of the flight back from my company.

    Although that might seem strange, it works well for me as I get loads of BA miles on my BA/AmEx card.

    Anyway, i've got a new credit card now and I need to provide the travel agent with my new credit card details. Unfortunately, the only way that they are accepting profile changes is via e-mail! Hence, they are asking me to send full details of the new credit card via e-mail.

    Naturally, I refused and they are refusing to update my profile. Am I wrong in refusing to provide details of my credit card via e-mail or are they wrong for being so lax in their IT security procedures? They told me that this process has been approved by their IT and finance departments!

  2. #2
    Lovely chap dangel's Avatar
    Join Date
    Aug 2005
    Location
    Cambridge, UK
    Posts
    8,385
    Thanks
    407
    Thanked
    449 times in 331 posts
    • dangel's system
      • Motherboard:
      • See My Sig
      • CPU:
      • See My Sig
      • Memory:
      • See My Sig
      • Storage:
      • See My Sig
      • Graphics card(s):
      • See My Sig
      • PSU:
      • See My Sig
      • Case:
      • See My Sig
      • Operating System:
      • Windows 10
      • Monitor(s):
      • See My Sig
      • Internet:
      • 60mbit Sky LLU
    Me? Yes - but then i'm covered for fraud anyway so it's not my problemo if things go south
    System 001: Maximus VII Formula, 4790k i7, RTX 2080ti FE (incoming), 16GIG Corsair Vengence DDR3 RAM CL9, Corsair HX1000, ROG SWIFT PG278Q , SSDs, Antec 1200 case, All watercooled. [main]
    System 002: A8 3850 APU, ASUS uATX FM1A75 MB, 4GB Corsair Vengeance DDR3, Corsair psu, OCZ Agility 3, 1TB F3, Dell 2001FP 20" LCD, £7's worth of 5.1 speakers (they rock) Windows 7 x64[wife/server]
    System 003: AsRock MB, APU, 8 GIG Corsair, Silverstone HTPC case, stock cooler, GT220 1gbDDR3, WD Green 3TB, Kingston 40gb SSD, MCE Remote, Panasonic 50" LCD (87BDX) via HDMI Windows 8.1.1 (32) [media centre]
    System 004: Asus UL50AT Intel Core 2 Duo,4GB, Intel Gen 2 80GB SSD, Win 8.1.1 x64 [no justification]
    System 005: HP Proliant N40L Microserver, 4x2TB drives, fan mod, Pico PSU mod, Win7 x86 [file server]
    System 006: Dell Optiplex 9010, i7, 8gb, 128gb Samsung 830 x 2 (boot and VM drive), 1TB WD HDD, ATI something, Windows 8.1.1 x64 RTM [work]


  3. #3
    Will work for beer... nichomach's Avatar
    Join Date
    Jul 2003
    Location
    Preston, Lancs
    Posts
    6,135
    Thanks
    540
    Thanked
    138 times in 99 posts
    • nichomach's system
      • Motherboard:
      • Gigabyte GA-870A-UD3
      • CPU:
      • AMD Phenom II X6 1055T 95W
      • Memory:
      • 16GB DR3
      • Storage:
      • 1x250GB Maxtor SATAII, 1x 400GB Hitachi SATAII
      • Graphics card(s):
      • Zotac GTX 1060 3GB
      • PSU:
      • Coolermaster 500W
      • Case:
      • Coolermaster Elite 430
      • Operating System:
      • Windows 10
      • Monitor(s):
      • Dell 20" TFT
      • Internet:
      • Virgin Media Cable
    Quote Originally Posted by Taz
    They told me that this process has been approved by their IT and finance departments!
    Then their IT and finance departments need a swift kick up the arse. The ONLY way that your CC details should be allowed over t'Internet is via a secured, encrypted process, like a secure http (https) session with their web server. Electronic mail is grossly insecure for this purpose. It's plain, unencrypted text which may be stored at any number of mail relays in its path to them. It's practically inviting someone to commit fraud.

  4. #4
    Theoretical Element Spud1's Avatar
    Join Date
    Jul 2003
    Location
    North West
    Posts
    7,008
    Thanks
    256
    Thanked
    255 times in 200 posts
    • Spud1's system
      • Motherboard:
      • Mac Pro
      • CPU:
      • 2x 2.8ghz Quad Core Xeons (octo-core)
      • Memory:
      • 4gb DDR2 FB-Dimm
      • Storage:
      • 1x1TB, 1x320gb, 2x500gb, 1x250gb, 120GB SSD
      • Graphics card(s):
      • Nvidia Geforce 560Ti
      • PSU:
      • Mac pro PSU
      • Case:
      • Mac Pro Case
      • Operating System:
      • Windows 8
      • Monitor(s):
      • 1x22" LG 3D TFT 1x 19" ViewSonic
      • Internet:
      • 80mb BT Infinity
    No - i just wouldn't do it. It's not secure, and while the risk is tiny in reality, it's still there, and in todays current culture it wouldnt surprise me if any claims you made over losses were refused due to negligence on your part..

    take it up with your employer if you have to

  5. #5
    Taz
    Taz is offline
    Senior Member Taz's Avatar
    Join Date
    Jan 2005
    Location
    London
    Posts
    2,112
    Thanks
    49
    Thanked
    26 times in 25 posts
    • Taz's system
      • Motherboard:
      • Gigabyte Z270 HD3P
      • CPU:
      • Intel Core i5 7600K
      • Memory:
      • Corsair CMK16GX4M2B3200C16R Vengeance LPX 16 GB
      • Storage:
      • Samsung 960 EVO M.2-2280 500GB (PCIe) + 1TB Sandisk Ultra II SSD (SATA)
      • Graphics card(s):
      • Asus NVIDIA GeForce GTX 1070 OC
      • PSU:
      • Corsair CS550M 550W Hybrid
      • Case:
      • NZXT Source 340
      • Operating System:
      • Windows 10 Pro
      • Monitor(s):
      • 34" Asus Designo Curve MX34VQ UWQHD Monitor
      • Internet:
      • Virgin Media Vivid 200
    Yes, I will take it up with my employer. Originally we were asked to fill in a paper form and that was posted to the travel agent. It now appears that they only accept e-mail.

    AmEx will point-blank refuse to honour any claim of fraud if i've been negligent enough to send the information via e-mail.

  6. #6
    Vive le pants! directhex's Avatar
    Join Date
    Jul 2003
    Location
    /dev/urandom
    Posts
    17,074
    Thanks
    228
    Thanked
    1,027 times in 678 posts
    • directhex's system
      • Motherboard:
      • MSI X99A Gaming 7
      • CPU:
      • Intel Core i7 5280k
      • Memory:
      • 32GiB ADATA DDR4
      • Storage:
      • Corsair Neutron XT 960GB
      • Graphics card(s):
      • MSI GTX 980 Gaming 4G Twin Frozr 5
      • PSU:
      • Corsair AX860i
      • Case:
      • NZXT H440
      • Operating System:
      • Ubuntu 17.10, Windows 10
      • Monitor(s):
      • Dell U2713HM
      • Internet:
      • FIOS
    Quote Originally Posted by Taz
    I've just been gobsmacked by a conversation I had with my company's travel agent. I'm not going to name the travel agent as they are a global company.

    I travel a lot for my job and my admin books my flights through our travel agent. They hold my credit card details in my profile and they charge all my flights directly to my credit card. They then send me an invoice and I use that as a receipt for my expenses to claim the cost of the flight back from my company.

    Although that might seem strange, it works well for me as I get loads of BA miles on my BA/AmEx card.

    Anyway, i've got a new credit card now and I need to provide the travel agent with my new credit card details. Unfortunately, the only way that they are accepting profile changes is via e-mail! Hence, they are asking me to send full details of the new credit card via e-mail.

    Naturally, I refused and they are refusing to update my profile. Am I wrong in refusing to provide details of my credit card via e-mail or are they wrong for being so lax in their IT security procedures? They told me that this process has been approved by their IT and finance departments!
    email is slightly less secure than a postcard, in terms of keeping details hidden.

    anything you wouldn't write on a postcard for everyone at Royal Mail to gawk at, you don't put in email.

  7. #7
    Senior Member SilentDeath's Avatar
    Join Date
    Aug 2003
    Posts
    4,745
    Thanks
    38
    Thanked
    16 times in 11 posts
    phone them?

    or encrypt the email.

  8. #8
    Mike Fishcake
    Guest
    Do
    not
    do
    it.

  9. #9
    A. Nother
    Join Date
    Jul 2006
    Location
    home
    Posts
    300
    Thanks
    9
    Thanked
    7 times in 5 posts
    • mallett's system
      • Motherboard:
      • Gigabyte GA-965P-DS3
      • CPU:
      • Intel E6300
      • Memory:
      • 4GB Corsair 800 DHX
      • Storage:
      • 1TB Samy & 2x 250GB Hitatichi RAID 0
      • Graphics card(s):
      • XFX 7600GT XXX
      • PSU:
      • Seasonic S12 - 430W
      • Case:
      • Antec SOLO
      • Operating System:
      • Vista 64bit
      • Monitor(s):
      • Iiyama 19" LCD
    you should never put any sort of persoanl details in emails as god knows who has access to them, id change travel agents if they dont sort it out

  10. #10
    Does he need a reason? Funkstar's Avatar
    Join Date
    Aug 2005
    Location
    Aberdeen
    Posts
    19,874
    Thanks
    630
    Thanked
    965 times in 816 posts
    • Funkstar's system
      • Motherboard:
      • Gigabyte EG45M-DS2H
      • CPU:
      • Intel Core2Quad Q9550 (2.83GHz)
      • Memory:
      • 8GB OCZ PC2-6400C5 800MHz Quad Channel
      • Storage:
      • 650GB Western Digital Caviar Blue
      • Graphics card(s):
      • 512MB ATI Radeon HD4550
      • PSU:
      • Antec 350W 80+ Efficient PSU
      • Case:
      • Antec NSK1480 Slim Mini Desktop Case
      • Operating System:
      • Vista Ultimate 64bit
      • Monitor(s):
      • Dell 2407 + 2408 monitors
      • Internet:
      • Zen 8mb
    i had to email or fax credit card info to the US for a subscription to a Banjo magazine (present for my cousin). Used a one time only card number from Cahoot and faxed it across. Not exactly practical for you though

  11. #11
    Taz
    Taz is offline
    Senior Member Taz's Avatar
    Join Date
    Jan 2005
    Location
    London
    Posts
    2,112
    Thanks
    49
    Thanked
    26 times in 25 posts
    • Taz's system
      • Motherboard:
      • Gigabyte Z270 HD3P
      • CPU:
      • Intel Core i5 7600K
      • Memory:
      • Corsair CMK16GX4M2B3200C16R Vengeance LPX 16 GB
      • Storage:
      • Samsung 960 EVO M.2-2280 500GB (PCIe) + 1TB Sandisk Ultra II SSD (SATA)
      • Graphics card(s):
      • Asus NVIDIA GeForce GTX 1070 OC
      • PSU:
      • Corsair CS550M 550W Hybrid
      • Case:
      • NZXT Source 340
      • Operating System:
      • Windows 10 Pro
      • Monitor(s):
      • 34" Asus Designo Curve MX34VQ UWQHD Monitor
      • Internet:
      • Virgin Media Vivid 200
    I've asked for a fax number that will go to one person at the travel agent (i.e. not a general fax machine sitting by the water dispenser for example). If they can ensure reasonably secure receipt of a fax then i'm happy to do that.

    The problem is that this global travel agent is used by my company as the official travel agent. Hence, I cannot just go to another travel agent. Also, they won't accept a profile change over the phone.

    My best bet is to just post a letter to them (as I did before), assuming they will accept this but it seems that they *only* accept profile changes via email, which is truly incredible!

  12. #12
    Mike Fishcake
    Guest
    Taz - I seriously think you need to write the company a letter of complaint, and quote several official documents that highlight the insecurity of email, and the gross misinformation that has the potential to endanger the financial details of all of their customers that have used the scheme.

    Encouraging someone's customers to email credit card details is surely corporate negligence?

  13. #13
    A Straw? And Fruit? Bazzlad's Avatar
    Join Date
    Jul 2003
    Location
    The Big Rhesus House Stourbridge
    Posts
    3,072
    Thanks
    90
    Thanked
    78 times in 44 posts
    Is this a joke?
    I'd prefer to find a shaddy looking man in a pub and hand him £100. Don't be dumb.

  14. #14
    Sublime HEXUS.net
    Join Date
    Jul 2003
    Location
    The Void.. Floating
    Posts
    11,819
    Thanks
    213
    Thanked
    233 times in 160 posts
    • Stoo's system
      • Motherboard:
      • Mac Pro
      • CPU:
      • 2*Xeon 5450 @ 2.8GHz, 12MB Cache
      • Memory:
      • 32GB 1600MHz FBDIMM
      • Storage:
      • ~ 2.5TB + 4TB external array
      • Graphics card(s):
      • ATI Radeon HD 4870
      • Case:
      • Mac Pro
      • Operating System:
      • OS X 10.7
      • Monitor(s):
      • 24" Samsung 244T Black
      • Internet:
      • Zen Max Pro
    I've done it before, but I've split the details into 3 separate emails, better than nothing, but still not recommended..
    (\__/)
    (='.'=)
    (")_(")

  15. #15
    HEXUS.social member Agent's Avatar
    Join Date
    Jul 2003
    Location
    Internet
    Posts
    19,159
    Thanks
    733
    Thanked
    1,605 times in 1,044 posts
    Dont they have anything like PGP ?
    Quote Originally Posted by Saracen View Post
    And by trying to force me to like small pants, they've alienated me.

  16. #16
    A Straw? And Fruit? Bazzlad's Avatar
    Join Date
    Jul 2003
    Location
    The Big Rhesus House Stourbridge
    Posts
    3,072
    Thanks
    90
    Thanked
    78 times in 44 posts
    if it's going to the IT department write it in binary.

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Free T-mobile sim card - with £10 credit!
    By faisal_uk in forum Retail Therapy and Bargains
    Replies: 61
    Last Post: 04-03-2005, 02:32 AM
  2. Credit card NEARLY came out again...
    By Zak33 in forum PC Hardware and Components
    Replies: 15
    Last Post: 29-08-2004, 05:21 PM
  3. Credit Card Scam Alert!
    By Allen in forum General Discussion
    Replies: 6
    Last Post: 23-01-2004, 08:51 AM
  4. WOW credit card facts!
    By Jimmy Little in forum General Discussion
    Replies: 3
    Last Post: 05-11-2003, 05:57 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •