Walmart ships fraudulent order to hacker's address then leaves customer to recoup cost - CBC News | Canada News Media
Connect with us

Business

Walmart ships fraudulent order to hacker's address then leaves customer to recoup cost – CBC News

Published

 on


The alarm bells went off for Bill Tomlinson after he got an odd text message — in French — on Feb. 2 from Walmart Canada. The Pelham, Ont., man doesn’t speak French and hadn’t ordered anything. 

“I thought, what the heck is that? … oh, something’s gone wrong,” Tomlinson told Go Public.

He logged into his Walmart.ca account and discovered fraudsters were using it and his credit card on file to place orders and ship them to Montreal.

There were four orders, all on that same day. Two were for dumbbells at $500 apiece, the other two for Apple TVs worth about $250 each.

Walmart had cancelled the first three orders on its own, but Tomlinson noticed the last one for an Apple TV had just been shipped. He called Walmart right away to let the company know, expecting the retail giant would refund the order.

Instead, two days later, Tomlinson says Walmart told him the product had been delivered to Montreal and that he was on his own to try to get the money back.

“They basically washed their hands of it,” Tomlinson said. 

“They said, there’s nothing more we can do for you. This product was ordered on the account, it was paid for by your credit card, it was delivered by us. We did everything that we were supposed to do.”

He says Walmart told him he would have to “deal with his bank” to see if it would reverse the charge.

The fraudster placed four orders on Bill Tomlinson’s Walmart.ca account for pricey dumbbells and Apple TVs. Their fraud detection system caught three of the transactions — but still shipped an Apple TV. (Walmart.ca)

Independent financial fraud expert Vanessa Iafolla says she gets several calls a week from people looking for advice on how to recoup their losses after being defrauded online.

“Any company that is going to offer online retail services and make it available for clients or customers to set up accounts is responsible for protecting the security of that account,” Iafolla said.

“I think Walmart really is dropping the ball on this.”

‘More than one chance to stop the order’

When Tomlinson first called Walmart, he was told the company’s fraud detection system had caught the first three orders but not the fourth, and that it needed to look into things before taking action.

Tomlinson does not understand the delay, since all the fraudulent orders were placed on the same day for the same products, and the company already knew the first three were a problem.

He also wants to know why Walmart did not stop the delivery after he flagged the fraud. Failing both those things, Tomlinson says the company should have refunded him the charge without hassle.

“They had more than one chance to stop the order,” Tomlinson said.

“They should have owned up to the fact that they had enough time to solve the problem and they didn’t.”

The Walmart.ca website shows the Apple TV was left at the front door of some address in Montreal, more than 650 kilometres from Tomlinson’s address that was on the account. (Bill Tomlinson)

Walmart did not say if it followed up at the Montreal address where the Apple TV was delivered to see who lives there or why its systems failed to flag the fourth fraudulent order.

Go Public wanted to visit the location, but after Tomlinson asked Walmart to lock down his account, he was not able to access the address and Walmart wouldn’t provide details.

The company told Go Public “there was no breach” of its systems and that Tomlinson’s account was taken over by “a bad actor [who] gained access through the customer’s login credentials that were compromised at some point prior to the transactions.”

It said it doesn’t know when or how those credentials were compromised.

WATCH | Customer charged for Apple TV that Walmart shipped to fraudster: 

Walmart shipped fraudulent purchases to hacker, left customer to pay for it | Go Public

15 hours ago
Duration 2:04

An Ontario man says after his online Walmart account was hacked, the company shipped some fraudulent purchases to the hacker and said he’d have to cover the costs – until Go Public stepped in. 2:04

How fraudsters access online accounts

The number of “account takeovers” — a term for what happened to Tomlinson — has been increasing over the past six months, according to Kimberly Sutherland, vice president of fraud and identity strategy for LexisNexis Risk Solutions, a company that works with government and businesses to combat online fraud.  

A survey report by the company, called The True Cost of Fraud, found Canadian retailers, in general, are doing a poor job of preventing fraud attacks.

In 2021, e-commerce retailers surveyed said they prevented about 4,860 attacks, but failed to stop about 4,800 others.

The survey also suggests online and mobile fraud attacks on retailers appear to be rising since the pandemic started, up 45 per cent in Canada from 2020 to 2021.

The report is based on a survey of 1,118 risk and fraud executives (145 Canadian, 973 U.S.) in small-, mid-, and large-scale retail and e-commerce companies. 

Kimberly Sutherland, vice president of fraud and identity strategy for LexisNexis Risk Solutions, says fake accounts and account takeovers are among the most common online retail frauds. (LexisNexis Risk Solutions)

Sutherland says fraudsters get passwords and credentials from websites that are compromised, then reuse them on other sites to see if they work, or they use malicious software that rapidly generates common user and password combinations to get into accounts.

“One of the big challenges with online accounts is that people tend to use the same username and password combinations in multiple accounts. So if one gets compromised, many may end up being compromised,” she said.

Her advice for online shoppers:

  • Delete online accounts you don’t use anymore, including consumer and government program accounts.
  • Use strong passwords and change them frequently.
  • Don’t use the same username and passwords for multiple accounts.
  • Use the strongest authentication methods available, such as two-factor authentication, which often requires a code sent by text message or another means in addition to a password to access the account.

Inside Walmart’s cyber attack problems

While Walmart says Tomlinson’s problem was caused by compromised credentials — not a cyber attack — Sutherland says companies across the board are dealing with such attacks on a regular basis.

Walmart’s 2021 annual report says the company’s websites and apps are “regularly subject to cyber attacks” which include “attempts to gain unauthorized access … to obtain and misuse customers’ or members’ information including payment information.” 

Similar to the LexisNexis survey, the Walmart report says the pandemic has made things even worse.

With more work being done remotely, some of Walmart’s “services and third-party service providers’ systems” have had “limited security breaches.” While those had little impact on operations, the report said, “there can be no assurance of a similar result in the future.”

As for Tomlinson, he did get his money back. After Go Public contacted Walmart, the company refunded the cost of the Apple TV as a goodwill gesture, he says.

He is happy to have his money back but is still deciding if he will shop using Walmart’s website or app again.

Submit your story ideas

Go Public is an investigative news segment on CBC-TV, radio and the web.

We tell your stories, shed light on wrongdoing and hold the powers that be accountable.

If you have a story in the public interest, or if you’re an insider with information, contact GoPublic@cbc.ca with your name, contact information and a brief summary. All emails are confidential until you decide to Go Public.

Follow @CBCGoPublic on Twitter.

Read more stories by Go Public.

Adblock test (Why?)



Source link

Continue Reading

Business

Telus prioritizing ‘most important customers,’ avoiding ‘unprofitable’ offers: CFO

Published

 on

 

Telus Corp. says it is avoiding offering “unprofitable” discounts as fierce competition in the Canadian telecommunications sector shows no sign of slowing down.

The company said Friday it had fewer net new customers during its third quarter compared with the same time last year, as it copes with increasingly “aggressive marketing and promotional pricing” that is prompting more customers to switch providers.

Telus said it added 347,000 net new customers, down around 14.5 per cent compared with last year. The figure includes 130,000 mobile phone subscribers and 34,000 internet customers, down 30,000 and 3,000, respectively, year-over-year.

The company reported its mobile phone churn rate — a metric measuring subscribers who cancelled their services — was 1.09 per cent in the third quarter, up from 1.03 per cent in the third quarter of 2023. That included a postpaid mobile phone churn rate of 0.90 per cent in its latest quarter.

Telus said its focus is on customer retention through its “industry-leading service and network quality, along with successful promotions and bundled offerings.”

“The customers we have are the most important customers we can get,” said chief financial officer Doug French in an interview.

“We’ve, again, just continued to focus on what matters most to our customers, from a product and customer service perspective, while not loading unprofitable customers.”

Meanwhile, Telus reported its net income attributable to common shares more than doubled during its third quarter.

The telecommunications company said it earned $280 million, up 105.9 per cent from the same three-month period in 2023. Earnings per diluted share for the quarter ended Sept. 30 was 19 cents compared with nine cents a year earlier.

It reported adjusted net income was $413 million, up 10.7 per cent year-over-year from $373 million in the same quarter last year. Operating revenue and other income for the quarter was $5.1 billion, up 1.8 per cent from the previous year.

Mobile phone average revenue per user was $58.85 in the third quarter, a decrease of $2.09 or 3.4 per cent from a year ago. Telus said the drop was attributable to customers signing up for base rate plans with lower prices, along with a decline in overage and roaming revenues.

It said customers are increasingly adopting unlimited data and Canada-U.S. plans which provide higher and more stable ARPU on a monthly basis.

“In a tough operating environment and relative to peers, we view Q3 results that were in line to slightly better than forecast as the best of the bunch,” said RBC analyst Drew McReynolds in a note.

Scotiabank analyst Maher Yaghi added that “the telecom industry in Canada remains very challenging for all players, however, Telus has been able to face these pressures” and still deliver growth.

The Big 3 telecom providers — which also include Rogers Communications Inc. and BCE Inc. — have frequently stressed that the market has grown more competitive in recent years, especially after the closing of Quebecor Inc.’s purchase of Freedom Mobile in April 2023.

Hailed as a fourth national carrier, Quebecor has invested in enhancements to Freedom’s network while offering more affordable plans as part of a set of commitments it was mandated by Ottawa to agree to.

The cost of telephone services in September was down eight per cent compared with a year earlier, according to Statistics Canada’s most recent inflation report last month.

“I think competition has been and continues to be, I’d say, quite intense in Canada, and we’ve obviously had to just manage our business the way we see fit,” said French.

Asked how long that environment could last, he said that’s out of Telus’ hands.

“What I can control, though, is how we go to market and how we lead with our products,” he said.

“I think the conditions within the market will have to adjust accordingly over time. We’ve continued to focus on digitization, continued to bring our cost structure down to compete, irrespective of the price and the current market conditions.”

Still, Canada’s telecom regulator continues to warn providers about customers facing more charges on their cellphone and internet bills.

On Tuesday, CRTC vice-president of consumer, analytics and strategy Scott Hutton called on providers to ensure they clearly inform their customers of charges such as early cancellation fees.

That followed statements from the regulator in recent weeks cautioning against rising international roaming fees and “surprise” price increases being found on their bills.

Hutton said the CRTC plans to launch public consultations in the coming weeks that will focus “on ensuring that information is clear and consistent, making it easier to compare offers and switch services or providers.”

“The CRTC is concerned with recent trends, which suggest that Canadians may not be benefiting from the full protections of our codes,” he said.

“We will continue to monitor developments and will take further action if our codes are not being followed.”

French said any initiative to boost transparency is a step in the right direction.

“I can’t say we are perfect across the board, but what I can say is we are absolutely taking it under consideration and trying to be the best at communicating with our customers,” he said.

“I think everyone looking in the mirror would say there’s room for improvement.”

This report by The Canadian Press was first published Nov. 8, 2024.

Companies in this story: (TSX:T)

Source link

Continue Reading

Business

TC Energy cuts cost estimate for Southeast Gateway pipeline project in Mexico

Published

 on

 

CALGARY – TC Energy Corp. has lowered the estimated cost of its Southeast Gateway pipeline project in Mexico.

It says it now expects the project to cost between US$3.9 billion and US$4.1 billion compared with its original estimate of US$4.5 billion.

The change came as the company reported a third-quarter profit attributable to common shareholders of C$1.46 billion or $1.40 per share compared with a loss of C$197 million or 19 cents per share in the same quarter last year.

Revenue for the quarter ended Sept. 30 totalled C$4.08 billion, up from C$3.94 billion in the third quarter of 2023.

TC Energy says its comparable earnings for its latest quarter amounted to C$1.03 per share compared with C$1.00 per share a year earlier.

The average analyst estimate had been for a profit of 95 cents per share, according to LSEG Data & Analytics.

This report by The Canadian Press was first published Nov. 7, 2024.

Companies in this story: (TSX:TRP)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Business

BCE reports Q3 loss on asset impairment charge, cuts revenue guidance

Published

 on

 

BCE Inc. reported a loss in its latest quarter as it recorded $2.11 billion in asset impairment charges, mainly related to Bell Media’s TV and radio properties.

The company says its net loss attributable to common shareholders amounted to $1.24 billion or $1.36 per share for the quarter ended Sept. 30 compared with a profit of $640 million or 70 cents per share a year earlier.

On an adjusted basis, BCE says it earned 75 cents per share in its latest quarter compared with an adjusted profit of 81 cents per share in the same quarter last year.

“Bell’s results for the third quarter demonstrate that we are disciplined in our pursuit of profitable growth in an intensely competitive environment,” BCE chief executive Mirko Bibic said in a statement.

“Our focus this quarter, and throughout 2024, has been to attract higher-margin subscribers and reduce costs to help offset short-term revenue impacts from sustained competitive pricing pressures, slow economic growth and a media advertising market that is in transition.”

Operating revenue for the quarter totalled $5.97 billion, down from $6.08 billion in its third quarter of 2023.

BCE also said it now expects its revenue for 2024 to fall about 1.5 per cent compared with earlier guidance for an increase of zero to four per cent.

The company says the change comes as it faces lower-than-anticipated wireless product revenue and sustained pressure on wireless prices.

BCE added 33,111 net postpaid mobile phone subscribers, down 76.8 per cent from the same period last year, which was the company’s second-best performance on the metric since 2010.

It says the drop was driven by higher customer churn — a measure of subscribers who cancelled their service — amid greater competitive activity and promotional offer intensity. BCE’s monthly churn rate for the category was 1.28 per cent, up from 1.1 per cent during its previous third quarter.

The company also saw 11.6 per cent fewer gross subscriber activations “due to more targeted promotional offers and mobile device discounting compared to last year.”

Bell’s wireless mobile phone average revenue per user was $58.26, down 3.4 per cent from $60.28 in the third quarter of the prior year.

This report by The Canadian Press was first published Nov. 7, 2024.

Companies in this story: (TSX:BCE)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Trending

Exit mobile version