Other Customer Service Support

[priteshpatel4]

Fraud!! Someone gained access to my account and opened a credit card in my name

I discovered yesterday that someone has gained access to my Best Buy account and then made a purchase with a Best Buy Citi Bank credit card. I immediately cancelled these orders, and changed my password. I never opened or should have a Best Buy Citi Credit Card. I called CitiBank and they confirmed there was no cards opened with my SSN.

How does Best Buy issue a credit card to someone without a SSN. Please help me investigate and get solutions

[priteshpatel4]

I discovered yesterday that someone has gained access to my Best Buy account and then made a purchase with a Best Buy Citi Bank credit card. I immediately cancelled these orders, and changed my password. I never opened or should have a Best Buy Citi Credit Card. I called CitiBank and they confirmed there was no cards opened with my SSN.

How does Best Buy issue a credit card to someone without a SSN. Please help me investigate and get solutions

[jdogg836]

"Fraud!! Someone gained access to my account and opened a credit card in my name"

"How does Best Buy issue a credit card to someone without a SSN. Please help me investigate and get solutions"

They can't.  In store and online requires not only the SSN but a bunch of other details to confirm it's you.  They likely added someone else's stolen credit card details to your account once they gained access.

Based on everything I've read here, it seems that they accessed your account which would require knowing your password.  Have you checked any of the data breach websites to see where your passwords have previously been leaked?  Are you reusing passwords or using easily discovered details to create your passwords like initials, dates, names, etc?

Changing your password is a great first step, just make sure it's a strong password and not reused elsewhere.  Like many websites serious about security, you can also enable 2-step authentication which provides an extra layer of protection.  It requires you to enter a constantly changing authetication code to be entered, so if your password is exposed again they still cannot access without also entering that code.  I personally recommend using it on every website that allows it.

[jdogg836]

They can't.  In store and online requires not only the SSN but a bunch of other details to confirm it's you.  They likely added someone else's stolen credit card details to your account once they gained access.

Based on everything I've read here, it seems that they accessed your account which would require knowing your password.  Have you checked any of the data breach websites to see where your passwords have previously been leaked?  Are you reusing passwords or using easily discovered details to create your passwords like initials, dates, names, etc?

Changing your password is a great first step, just make sure it's a strong password and not reused elsewhere.  Like many websites serious about security, you can also enable 2-step authentication which provides an extra layer of protection.  It requires you to enter a constantly changing authetication code to be entered, so if your password is exposed again they still cannot access without also entering that code.  I personally recommend using it on every website that allows it.

[priteshpatel4]

That is honestly relieving to hear. What is concerning is the my best buy visa card on my profile had my name phone number and address (of course as mentioned, no sign of oh number or ssn being used per Citi Bank).

I've since updated email, password and 2 step auth. Just worried my name is still being used on this card somewhere

[AndrewB-BBY Social Media Specialist]

Good afternoon, priteshpatel4,

Thank you for taking the time to visit our community forums. As someone who has had my identity stolen, I know how surprising it is to receive notifications for purchases you did not make. I appreciate you reaching out and would be glad to give you some more details on recommended steps moving forward.

As jdogg836 mentioned, changing the password associated with your My Best Buy account as well as the email address is a great first step. If you haven't already done so, I would recommend contacting your local law enforcement to file a report. 

I would recommend continuing to work with Citibank as they will be able to provide more details on cards issued using your personal information. Have you been able to follow up with Citibank since making these posts? Please let me know if you have any more questions I can help with at this time!