·Time Warner Cable
|reply to Camelot One |
Re: Sears.com order verification - very strange
said by Camelot One:Yes, why deal with PCI issues over the data when it is so easily & readily available on a seconds notice from elsewhere.
The person I talked to in the fraud department confirmed they were the ones my wife talked to last night. He said they pull that information from multiple databases and that the information is not stored in any Sears database.
The difference between physical storage & access is nonexistent on a practical level.
said by Camelot One:They accessed your wife's data because the system they use did exactly what it's intended to do, correctly (or incorrectly) identifying your wife's order as potentially fraudulent.
He pointed out that the same department handles in-store credit card application processing, which might explain how and why they defaulted to gathering such detailed information.
said by Camelot One:That's really neither here nor there, but it would make sense on many levels if it were outsourced if even to a subsidiary.
He gave me the impression that the department is outsourced to another company.
said by Camelot One:That may have been a diversion from policy but I'd put that in the favorable column.
It's worth pointing out that throughout my call this morning, I had the rep rattling off the actual information they had, ie, her job title, what car she drives, etc. I had to provide nothing but my name and the order number to get him talking. My name is not on the order, and I was calling from a different phone number.
Too often companies will hide behind policy rules to avoid answering questions.
That was probably about someone sensing your concern over the matter & not amplifying it with 'policy rules'.
said by Camelot One:Yes, the more you use your ID for online purchases the easier it is to verify correct info.
I order thousands of dollars worth of equipment online every week, and I have never been asked what kind of car I drive or where I own property.
said by Camelot One:Those are big items for sure but other factors come into play.
It's usually nothing more than making sure the name, address, and phone number on the order matches the credit card being charged.
Your IP being out of your normal range is one of the more common items that can flag an order.
said by Camelot One:Again, I'd be grateful for that given the circumstances but only if I could handle the truth, LOL
I've also never been able to get a rep to start spewing personal information without much more verification of my identity.
Glad the incident was legit, but of course that depends on the definition of 'legit'.