My girlfriend and I have bought almost all bundles from HB in the last few months, and this morning she has received a very disturbing phone call. Seems like someone has tried using her bank account (credit card data) to buy something from a travel agency of 1000$ and another payment of 4.000$. Luckily, the bank saw the difference between her usual purchases (living in denmark) and the sudden huge increase in payment and country difference and called before approving the transaction itself. Upon further inquiries, the bank has told us that the problem came from some 1$ transactions made towards www.humblebundle.com . This being said... WHAT THE HELL?!

11 years ago*

Comment has been collapsed.

Hmm, dont think humble would do these things.

11 years ago
Permalink

Comment has been collapsed.

download malwarebytes and do a full system scan of your computers

11 years ago
Permalink

Comment has been collapsed.

She had antivirus and antispyware installed, checked with malwarebytes, nod32, avast and a few others, NOTHING was found

11 years ago
Permalink

Comment has been collapsed.

Maybe it was social engineering?

11 years ago
Permalink

Comment has been collapsed.

well, It still could get in there, antivirus isn't water proof. Still, I dont believe humble would do this. I still think its a virus

11 years ago
Permalink

Comment has been collapsed.

AFAIK humblebundle never get your CC(credit card) info. They accept only paypal(and likes) so CC info is only revealed to PP, and from there its transaction between PP and humble, not between bank/CC and humble.

you should ask bank if its CC direct withdraw or through PP.

CHANGE YOUR PP PASS.

11 years ago
Permalink

Comment has been collapsed.

try emsisoft anti malware, it always finds things and its free

11 years ago
Permalink

Comment has been collapsed.

hope your running your scans in safe mode otherwise your wasting your time.

10 years ago
Permalink

Comment has been collapsed.

ever use any not-at home wifi to purchase it?

Alternatively: even home wifi is never safe, really.

10 years ago
Permalink

Comment has been collapsed.

yeah if something like this would actually get out there, which it would, it would be the end of humble bundles. I don´t think it would be worth 5000 bucks

11 years ago
Permalink

Comment has been collapsed.

humble bundle DOES NOT have your credit card NUMBER... idiocrasy overulled you once again ! do you know how payments work?

10 years ago
Permalink

Comment has been collapsed.

Humble wouldn't do this...at least I hope..

11 years ago
Permalink

Comment has been collapsed.

Oh. My bank gives fraud alerts to me for buying too many games/paying many small amounts in a short period of time.

11 years ago
Permalink

Comment has been collapsed.

oh mew

11 years ago
Permalink

Comment has been collapsed.

Same. My card was locked for 24h for having multiple small payments within a short time.

11 years ago
Permalink

Comment has been collapsed.

me too.

11 years ago
Permalink

Comment has been collapsed.

Same story...

11 years ago
Permalink

Comment has been collapsed.

My bank account once was suspended for spending $300 in ~$10 transactions in one day.

The next day my Paypal account was put on hold for spending $250 on Steam store.

Clearly somebody doesn't want me to spend money on video games.

11 years ago
Permalink

Comment has been collapsed.

Ouch :(
From now on I will pay Humble in bitcoins, so my bank can go to hell (as well as any other bank in this world lol)

11 years ago
Permalink

Comment has been collapsed.

As someone whos had my debit card cloned through a modified ATM, I'm more than happy with the fact that banks moniter suspicious activity carefully.

Having your account suspened for something you bought is annoying. Having your bank account cleared out by some arsehole is likely even more annoying.

11 years ago
Permalink

Comment has been collapsed.

xD In my case I got like 3 calls from anti-fraud to verify my purchases. The representatives read through my long list of Humble Bundles and Indie Galas and Valve Steam purchases for several minutes each time and thankfully they were able to clear my account.

11 years ago
Permalink

Comment has been collapsed.

They keep calling me for that every week... I know every employee thanks to the bundles LOL.
I told them not to bother any more and put a skip flag in my case... but they didn't listen...

11 years ago
Permalink

Comment has been collapsed.

When Google was celebrating their 10 billionth app downloaded, they were offering major apps for $.10. I think I spent a total of $6 on the sale, but apparently banks do not appreciate 60 $0.10 transactions, so they immediately canceled my old card and sent me a new one.

11 years ago
Permalink

Comment has been collapsed.

Well, on HB you pay through amazon, google wallet or paypal.
Humble bundle doesn't get your card number or other stuff like that. Correct me if i'm wrong.

11 years ago
Permalink

Comment has been collapsed.

+1 here.

11 years ago
Permalink

Comment has been collapsed.

That is true, we are going to do some further searches. She always paid through Amazon Payments, while I prefer Paypal. I have not yet had any problems, but I thought I should at least give a heads up to the steamgits community

11 years ago
Permalink

Comment has been collapsed.

Maybe a trojan or Keylogger. Check your computer for virusses / trojans.

11 years ago
Permalink

Comment has been collapsed.

+1

11 years ago
Permalink

Comment has been collapsed.

Yes, there is an option to pay with Credit Card. So yea, you can pay through Credit Card in the US.
But I don't think they would do that :(

10 years ago
Permalink

Comment has been collapsed.

Tell your bank don't block your payments........but anyways you can't use credit card directly there :S

11 years ago
Permalink

Comment has been collapsed.

I wouldn´t do this. If someone tried to buy something for 5000 dollars, I would definately keep he security measures up

11 years ago
Permalink

Comment has been collapsed.

Why you no use paypal?

11 years ago
Permalink

Comment has been collapsed.

Humble doesn't handle credits directly, so the leak is at some service...

11 years ago
Permalink

Comment has been collapsed.

this is what i thought, you cannot pay via credit card, u have to pay via paypal, amazon, google and bitcoin, so its one of those at fault

11 years ago
Permalink

Comment has been collapsed.

I wonder how the bank could tell that the HiB transaction was the trigger.

The problem could also be a manipulated ATM - unless you're sure you never used your CC to buy anything besides HiBs and never used your card at an ATM.

11 years ago
Permalink

Comment has been collapsed.

Since we are in Denmark, why would we make payments of 5.000 dolars at a travel agency and a few other bucks at a local restaurant in the USA. Manipulate an ATM in Copenhagen, and then run to america and use it there? Somehow the bank's idea with the payment seems more adequate... Then again, we have to ask around Amazon, since there seems to be the problem itself

11 years ago
Permalink

Comment has been collapsed.

I'm not saying that you made the payment.

The data of a manipulated ATM can be transfered to the US by electronic means, no need to go there physically (and people that manipulate ATMs normally don't work alone, so it could be a plausible scenario).

The small amounts from your HiB transactions probably looked suspicious to your bank, that does not mean that HiB gave away your CC info.

11 years ago
Permalink

Comment has been collapsed.

I agree with this. They have no idea where and when your card info was leaked. But we know that the likelihood that paypal/google wallet through HIB was the cause is very unlikely. SO basically, it was either some ATM you used, or a sketchier website.

10 years ago
Permalink

Comment has been collapsed.

Many people who steal CC info sell them to other people. So someone could steal your info in Denmark and sell it to someone in the US.

11 years ago
Permalink

Comment has been collapsed.

CC data can be stolen at the restaurant or a gas station, then sent out of the country and misused in another part of the world. There are devices that can be attached to ATM to scan your PIN. You are actually safer while using the card over the Internet, if you use common sense while doing that.

11 years ago
Permalink

Comment has been collapsed.

Normally when a credit card is stolen the thief makes some trial $1 purchases to ensure the card is valid. They just flagged humble bundle because of the amounts. When my card got stolen they made some $1 purchases on iTunes and my bank called me.

10 years ago
Permalink

Comment has been collapsed.

Det er nogen svin! :(

11 years ago
Permalink

Comment has been collapsed.

nein!

10 years ago
Permalink

Comment has been collapsed.

And that's why I use Paypal on all sites.

11 years ago
Permalink

Comment has been collapsed.

Sheeeeiiiiit.. I'm from Denmark as well, and was thinking about buying this Bundle. Now I'm too scared

11 years ago
Permalink

Comment has been collapsed.

PayPal er din ven.

11 years ago
Permalink

Comment has been collapsed.

Er jeg den eneste på internettet der ikke har en PayPal?

11 years ago
Permalink

Comment has been collapsed.

Du kan nemt lave en. Koster cirka 15 kr. når du skal verify dit credit card, og så kan du bare begynde :)

11 years ago
Permalink

Comment has been collapsed.

That's disturbing :P You should really use paypal or something like that.

11 years ago
Permalink

Comment has been collapsed.

People who steal card info generally make several small purchases to test the card. The bank most likely mentioned the HB purchases because it's "suspicious" in that regard. If HB had some sort of data breach we'd probably be hearing a lot about it considering the number of people who have bought their bundles since it started.

11 years ago
Permalink

Comment has been collapsed.

+1

11 years ago
Permalink

Comment has been collapsed.

+1

11 years ago
Permalink

Comment has been collapsed.

This is what happened, most likely. Me and one of my friends have also had their info used (It's very common. 1 in 3 people, I think?) and with mine, they made a ten dollar donation to charity to test it and with my friend's, they used it in one of those soda machines that take debit cards to test it.

11 years ago
Permalink

Comment has been collapsed.

That's why I always try to pay in cash IRL shops. You cannot always trust a clerk that earns about minimum wage and may not work in that place anymore in a month. Also, try to be paranoid with ATM's, try to use always the same ones, and be suspicious of any changes.

11 years ago
Permalink

Comment has been collapsed.

How can the bank know the problem came from humblebundle?

11 years ago
Permalink

Comment has been collapsed.

because it is the only payment we make towards USA, and it seems to correspond to the general area of the payments. Other than HB, we use the card in our own country

11 years ago
Permalink

Comment has been collapsed.

haven't you buy anything from the internet besides humble?

11 years ago
Permalink

Comment has been collapsed.

no, not really. all we might need we can buy from the local stores. We only rarely use online payments, and these were pretty much all the payments we made online in the last several weeks, maybe even more than a month

11 years ago
Permalink

Comment has been collapsed.

There was a card theft in our city like this and it turned out that the thieves had the card info for 2 years.They waited for the right moment so they couldn't be suspected.

I suggest you to check your payments in last 1 or 2 years and contact the Humble Bundle.

Oh and by the way, I have 2 cards for 1 bank account.One of them is for game expenses and has 150$ limit, this way I can stop myself from buying everything and be safe from thefts.I suggest you to do the same ^-^

11 years ago
Permalink

Comment has been collapsed.

Well that is were they get a lot of card info. Less than honest local business owners, or even just an employee, modify a card reader to steal the data. It happened to a friend of mine at a dollar store in a small town a few years ago.

10 years ago
Permalink

Comment has been collapsed.

That doesn't really say anything.
Every country is capable of credit card theft, and humble bundle doesn't even look at the card's info Paypal, Amazon Payment, and Google Cash do, so that does not make sense at all.

11 years ago
Permalink

Comment has been collapsed.

Wonder how the bank knew that the problem came from 1$ transactions? That doesn't make sense to me. Did they catch the scammer already? Or did he write 'That's what you get for buying Humble Bundles!' in the reference field? And like someone else said, you pay with PayPal, Amazon Payments or Google, Humble only receives a notification that the transaction was completed, so they're not to blame. They don't get access to your PayPal password or anything like that.

11 years ago
Permalink

Comment has been collapsed.

My thoughts exactly, it looks like the bank is just assuming that the humble bundle was a scam site.

11 years ago
Permalink

Comment has been collapsed.

Normally when a credit card is stolen the thief makes some trial $1 purchases to ensure the card is valid. They just flagged humble bundle because of the amounts. When my card got stolen they made some $1 purchases on iTunes and my bank called me.

10 years ago
Permalink

Comment has been collapsed.

make a new bank account with 50€ for buy from internet, and add founds when u needed, also use paypal allways.

11 years ago
Permalink

Comment has been collapsed.

That's what I do, one can never be too sure

11 years ago
Permalink

Comment has been collapsed.

That's a good bank, they actually do their job.

11 years ago
Permalink

Comment has been collapsed.

Well that's why i use my Virtual Debit Card. This way unless i put money into it even if they have it, there is nothing in it.

11 years ago
Permalink

Comment has been collapsed.

Not sure if your bank have support for it, but my bank (Swedbank) in Sweden has a service that allows me to make temporary digital debit cards with a fixed sum on them. It is similar to having two or more bank accounts, but everything is automated, and you never give out your real card number.
Won't help now, but if they have the service, it might help in the future.

11 years ago
Permalink

Comment has been collapsed.

why the hell would you give your CC data to a small company that has no means to properly manage it? use paypal next time...

11 years ago
Permalink

Comment has been collapsed.

Wait, I thought HIB only used payment processors. The don't handle any credit card data do they?

11 years ago
Permalink

Comment has been collapsed.

Paypal, Amazon Payments, Google Wallet, Bitcoin.
Humble Bundle do NOT handle credit card payments themselves.

11 years ago
Permalink

Comment has been collapsed.

phishing probably. Someone routed you through their system and collected your credit card data that was supposed to go directly to humble bundle. Otherwise, what evidence does your bank have that humblebundle was the one doing it? "came from" could mean, as others have said, that this was the start of the problem. The first illegitimate purchase in which the card is tested. Because all the transactions were made to US companies that would be flagged as unusual when you usually buy things in Denmark.

Otherwise $1 to the humble bundle, really? $1?

11 years ago
Permalink

Comment has been collapsed.

I didnt think u could you pay via credit card?

you have to pay via Paypal, Amazon, Google and Bitcoin, so its one of those at fault

11 years ago
Permalink

Comment has been collapsed.

So..... Paypal, there's no way they could get access to your paypal account, and you cant buy "directly from your CC" so.. yea..

11 years ago
Permalink

Comment has been collapsed.

Definitely not Humble Bundle. They never even receive your credit card details, so it can't be them. Your bank was speculating.

11 years ago
Permalink

Comment has been collapsed.

they are assuming humblebundle.com is a scam site because of it being 1$ transactions. Thats it.

11 years ago
Permalink

Comment has been collapsed.

This. Lots of small payments will look suspicious as that is one way of stealing money from your account gradually without you noticing. However you know what these payments are for and as others have said, Humble Bundle uses 3rd party payment services to handle the transactions and so never has access to your credit card details.

11 years ago
Permalink

Comment has been collapsed.

This is almost certainly the case. A lot of frauders will make very small purchases to verify that the card is still valid before trying to use it for a big purchase. This is probably why they flagged the humblebundle purchases as being related to the fraudulent charges. I can't say with 100% certainty that it's not, but is extremely, EXTREMELY unlikely.

11 years ago
Permalink

Comment has been collapsed.

Closed 10 years ago by posedatull.