Tesco Clubcard fraud

A question about : Tesco Clubcard fraud

Like many people, we accumulate tesco clubcard points with our shopping, and every so often we log onto the website and exchange them for clubcard deals, or print off the the vouchers to use.

We logged on this month to find that Ј160 of vouchers that we were hoping to use at Christmas had been stolen (ie spent) from our clubcard account. It had been spent in two stores in London, miles away from where we live.

When we contacted Tesco, they said whoever did it would have had to hack into our online account, would need to know our email, clubcard number and password, would have then had to print the vouchers, and would then need a current valid physical clubcard to use in the store. (We still have all our clubcards, none are lost).

I wondered if anyone else had had this experience with Tesco?

We are currently trying to pursue it with them, but they are not being very helpful at the moment. We have also reported it to the police as online theft.

Best answers:

• I have the same problem.
  In December I contacted Tesco to report that I wasn't able to log on to my account. I had intended to use some online vouchers over Christmas. They were unable to fix the problem and blamed my settings on my computer. I have contacted them again today to discover that my account number has been used with someone else,s name and my vouchers have gone from my account. Their IT department are currently investigating. I am unsure how much I have lost but would guess around Ј200 -Ј300 .
  Would be interested to hear how you get on.
• Hi Masie Jane
  Your situation sounds almost the same. We initially couldn't log in, so had to get our password re-set to log on. At first, we thought perhaps we had forgotten the password - but it turned out whoever had hacked into our account had changed the password on it. Initially, Tesco implied that the fault was with us, as they said the vouchers could only be used in store with a valid clubcard, and asked if anyone had had access to our account, and asked if we had given our clubcard to anyone. (By the way, we still had the original vouchers - whoever hacked in had printed off duplicate versions of the vouchers) We were 100% sure that our clubcard had not even left the house (as we have a tesco credit card that we use, which contains a clubcard, and do our grocery shopping online) - and we still had all of our original clubcards; so we knew it couldn't have been used with our clubcard.
  Our assumption was either that the need to use a clubcard was over-ridden at the till, or someone had a fake/scam clubcard. The vouchers had been used in the Tesco stores at Purley Extra store on 23/10/12 and Elmers End store on 24/10/2012. Tesco advised us to contact the police.
  We did this, (through "Action Fraud") and they gave us a crime number, and took the details, but they said as it was (relatively!) such a small amount, they couldn't take any action. They did say it was possible that there was a scam going on, and that there are machines that will mock up fake cards - and so maybe this was what had happened - and that someone was mocking up lots of cards, and taking a couple of hundred pounds here and there; or that maybe the staff member had just over-riden the need to present a clubcard at the till. They also said that wherever there is a human interaction with account details, there is the possibility for fraud; so perhaps this was what had happened - as we had a relatively secure password, so were surprised it had been hacked.
  The police did say they would log the details, in case others reported similar cases - and only if they had a large number of reports of a similar nature (ie more online fraud to a greater monetary value) in the same area might they investigate the fraud.
  When we contacted Tesco again (with the crime number), and reported back what the police had said, they finally set us up a new account (we were worried about the security on our old account, particularly as it is linked to our tesco credit card) and then refunded our vouchers.
  Hope that helps!
• Hi Thanks for this reply.
  I will certainly bare all this in mind when I next talk to Tesco .
  They must be aware of some sort of scam going on with the on line vouchers if they have had other similar cases.
  I am not happy that it wasn't, discovered when I first reported it in early December. It would have been a lot easier to sort out then.
  Anyway, it,s good to know you got a refund. Will let you know how I get on.
• Hello,
  I am completely new to this forum and came across it while trying to find similar experience to ours on the net, and glad I did. I also struggled to get into my Tesco clubcard account before Christmas and ended up having to create a new one (re-register) in Januuary. I then realised that the vouchers accumulated over a nearly 2 years period had all been used (worth over Ј150). I immediately phoned their customer services to be told that on their end I had been using my clubcard and my vouchers in 2 different shops in London, where I never go as I live up north. Although I tried to convince them that I did not, explaining that 1/ I am in possession of all my original vouchers, 2/ I never ever redeem them at tesco's as they could easily check in their system (customer for so many years I always have always saved them to get the Tussaud annual pass and nothing else), and 3/ their system shows that I have used my card in my usual local shop on those same days when I would have spent my vouchers in London (??), still all I was told is to go to the police so they would investigate. Well I did and was received by a courteous and helpful PC who had a quick look at my vouchers and the print outs from my tesco account. He immediately understood what I meant and agreed with me that it is up to Tesco's to deal with it as their system has clearly been hacked into. On the other hand he had not heard of any similar story and I am pleased to have found this forum and realise that I am not on my own. I am going to ring Tesco's again and speak to someone hopefully brighter and more helpful who will be able to help me.
• Hi, looks like I have been hacked too, losing Ј97 in vouchers. Rang Tesco, they are investigating (or so they say). They will not say much, for data protection reasons but confirm they were spent online. Not by me!! I still cannot see how the thieves get away with this, online. They would need my password (now changed) and use Delivery to shop I guess to avoid the address mis-match should they get it delivered. Usually this is easier to scam if done in store adding cash as required to voucher values. Anyone know how they get away with it? Thanks.
• Well do any of you have anti virus on your PC ?
  Is it up to date ?
  Are your passwords easy to guess ?
• Hi DFC
  That's a Y,Y,N.
  Wish it was that simple.
• The vast majority of individual account 'hacking' happens via phishing, from what I read. And the victims don't even realise they have just given their account details to scammers.
  Did you get any emails from tesco that asked you to log in into your account?
  The emails can be quite clever, well written and giving you a good excuse to log in. #
  I'm not familiar with tesco's emails, but with banks you can tell it's a fake email because they don't give your name, only dear account holder etc.
  When you click on the link it will look like a genuine tesco website (can't say what happens one you enter your log in details, as I've never actually done that).
• So glad to have googled and find this thread. Today i went to log in to my account as i know i have some vouchers that expire the end of this month and to find that nearly Ј250 worth of vouchers had gone. They been spent on the 23/01/13 and one is still processing from the 25/01/13. I was straight on the phone to tesco's but they couldn't tell me anything like where or what it been spent on. The man on the phone only advised me to send an email for them to investigate.
  As with the previous posters above i still have the original vouchers at home, but i haven't had any trouble with my account ie been locked out etc... do you think i need to advise the police about it? Also do you think emailing them is the best way to go about it? Surely they should have a department to phone them directly?
• Today I received an e mail from "Tesco" offering me free shopping vouchers but I'm not convinced it is from Tesco though it is very convincing. When you hover over the "click here" to take you through to Credit card the details www.yididaai.com appear. Did any of you who have lost your vouchers have a similar e mail?
• We have been exchanging emails with Tescos over the last week and cannot believe the level of inability to deal with this. It is clear that this is now a matter of fraud as well as data protection and that our details have been compromised.
  A word of warning for those of you with a linked Tesco credit card, clubcard could not guarantee those details were secure either.
  We are now at a stage of reporting this to ICO.gov.uk as Tesco clubcard really are not following correct procedure.
  It is worth noting that Clubcard admit the problem is their end not ours.
• On 12th January I received an email from Tesco direct thanking me for my order for an ipad mini.
  I contacted them to inform them that I had not ordered one, redeemed vouchers for one, nor was the name and address of the individual who had placed the order the same as me.
  They contacted me back two days later to say sorry, it was BT's fault as the individual concerned and I had similar emails.
  Two weeks later I tried to log on, to find that it said my email address was not recognised. Noone at Tesco would speak to me as the account had been amended to the name of the individual who had tried to buy a the ipad mini.
  After many phone calls and emails to tesco we have been told that our clubcard points will be refunded. However to date we have still not been told what happened, although one individual did state that there were many individuals registered to the same address as ours with many different names.
  I would also note that everything is at our expense and we are continually chasing them. Noone has ever actually said sorry, nor have we been offered any recompense for the time, expense or concern this has caused.
• I had this problem as well. I was able to log in and someone elses details were in there and some of my vouchers had been spent. Tesco did send me replacements, but there werent interested in the fact that the details werent mine and even though I asked them to cancel and replace the card they never did.
  I think I know who it was who had my vouchers as I had to move out of my house at the time due to a flood and the address was a local address. I think it was a dodgy builder, but cannot be sure.
  I am wary now and never bank my vouchers I spend them as soon as I get them.
• For anyone who wants to report this, then we were told by our local police to report it to the online action fraud unit, who then recorded it as a crime :
  https://www.actionfraud.police.uk
• thank you Pawan, I have now completed an online fraud report.
  We have cancelled all cards associated with the account and asked for new to be issued with the correct funds in.