Debit card received without me aplying for it

[spendorman]

Yesterday I received in the post a TSB Debit card with my details on it. I had not applied for it and never had an account with TSB.

I phoned TSB and they said that they would cancel the card and the bank account associated with it. They told me it was opened on the 2nd of May. TSB said that someone probably opened the account using my identity, possibly getting the information by intercepting letters to me, and that they would be investigating this suspected identity theft

TSB advised me getting a credit report, I did this using Experian, and there was nothing untoward on it, except two searches on 2 May by TSB.

Experian suggested reporting the suspected identity theft to Action Fraud, which I did. Experian also said that they would be investigating too.

My computer is pretty secure, so I don't think there is any spyware etc. on it. I have done scans with Malwarebytes, Avast and ESET, nothing was found.

Is there anything else I should do?

[Dynamics]

No I think you've done everything. But don't you need a passport to open an account or what documents would they need to show, to have faked being you in opening an account.

I went on online banking once and my account was -£3000 in debt and I looked at the transactions and they related to a shopping mall in holland. My card had been cloned.

It took about a month until HSBC reinstated the balance as it was before the fraud and as it obviously wasn't me (I've never been to Holland). So I think even it did happen again and some dodgy people read my card with a reader device added inside the card device, it's the banks problem.

I suppose it becomes a different thing if crimes are involved. I'd maybe say then having said you've done everything, just maybe report to local police and get a call reference number and date, and get a letter from the bank saying it's identity fraud and ask them to investigate how it happened. Covers you if people commit crime in your name, but I think you've got so much information no police force would think, if crimes were committed in your name, you are responsible. But I would keep documents to show it was a fraud. I wouldn't worry at all but you do need to cover yourself in case it does come back to you and keep the documents I'd say. TSB will probably delete any letters they send you after 6 months for data protection reasons. If it were me I'd want to know how it happened and they could open an account in your name and address.

[spendorman]

Thanks Simon, the only thing that's changed with me lately is that I'm using contactless payment in a well known supermarket.

The local Police is an idea, but I have reported to Action Fraud and they gave me a reference number.

[Dynamics]

I read just now too that an easy one is going through rubbish, as apparently you don't need a passport to open an account. So if you don't have a shredder for all personal letters etc, I'd look at getting one.

I'd have a guess it's a money laundering scam, to try and pay money into an account to 'clean' its origins etc, then shut it down. As they could probably then try and redirect mail to a different address once they have an account in your name. Unless you receive money in the post in cheques etc and they've intercepted that possibility from it being intimated in a letter someone has opened, and targeted you, to steal money that may then come in another similar looking letter. Dodgy postman etc. But I'd bet on the money laundering thing, is what's going on.

[spendorman]

Thanks Simon, TSB asked me of how I dispose of bank statements, I told them that I don't, I keep them. I only receive the occasional share dividend cheque in the post. There is of course, other stuff, I will shred from now on.

You mention Postmen, we have had a few new temporary ones lately.

Not thought of money laundering, yes, very likely.

Incidentally, I have a very unusual and uncommon surname, if I was a fraudster, think I would pick on a more common name!

[walpurgis]

I read just now too that an easy one is going through rubbish

I burn all paperwork with addresses and other personal details on.

[struth]

Yes i tear off all the addresses etc and destroy those bits. Not really allowed to burn things outside here.

[struth]

Yesterday I received in the post a TSB Debit card with my details on it. I had not applied for it and never had an account with TSB.

I phoned TSB and they said that they would cancel the card and the bank account associated with it. They told me it was opened on the 2nd of May. TSB said that someone probably opened the account using my identity, possibly getting the information by intercepting letters to me, and that they would be investigating this suspected identity theft

TSB advised me getting a credit report, I did this using Experian, and there was nothing untoward on it, except two searches on 2 May by TSB.

Experian suggested reporting the suspected identity theft to Action Fraud, which I did. Experian also said that they would be investigating too.

My computer is pretty secure, so I don't think there is any spyware etc. on it. I have done scans with Malwarebytes, Avast and ESET, nothing was found.

Is there anything else I should do?

Interesting one. Wonder how they were going to proceed. Anyway glad youve caught it

[Mark Grant]

Is there anything else I should do?

I would add a Cifas entry to your credit file, £20 for two years.
Read about it as it makes it very hard for anyone even you to apply for any type of credit as thorough checks will be made.
https://www.cifas.org.uk/pr_for_individuals

Sometimes your bank or card provider will add a Cifas for free when you have been a victim, I would just pay the £20 today and do it right now.

Now that someone has enough information and ID to open a bank account in your name it will be easy for them to buy iPhones and ipads in your name on contracts that you will have to deal with also payday loans etc might be applied for.

Also sign up for all of the free credit reports such as https://www.clearscore.com/ and https://www.noddle.co.uk/
They only up date Monthly so not much use with ongoing fraud as always out of date data. They will send you a monthly email to remind you to check for changes and the email will say if your score has changed or new accounts opened etc.

Also make sure your email accounts are secure with 2 factor login authorisation etc.

Good luck !

[hifinutt]

I read just now too that an easy one is going through rubbish, as apparently you don't need a passport to open an account. So if you don't have a shredder for all personal letters etc, I'd look at getting one.

I'd have a guess it's a money laundering scam, to try and pay money into an account to 'clean' its origins etc, then shut it down. As they could probably then try and redirect mail to a different address once they have an account in your name. Unless you receive money in the post in cheques etc and they've intercepted that possibility from it being intimated in a letter someone has opened, and targeted you, to steal money that may then come in another similar looking letter. Dodgy postman etc. But I'd bet on the money laundering thing, is what's going on.

few months back , someone dumped several bags of rubbish outside our house . after I contacted the council we found at least 4 lots of separate bank accounts details in there !! needless to say identity theft was not on their minds . they did get caught though for dumping rubbish

[spendorman]

I would add a Cifas entry to your credit file, £20 for two years.
Read about it as it makes it very hard for anyone even you to apply for any type of credit as thorough checks will be made.
https://www.cifas.org.uk/pr_for_individuals

Sometimes your bank or card provider will add a Cifas for free when you have been a victim, I would just pay the £20 today and do it right now.

Now that someone has enough information and ID to open a bank account in your name it will be easy for them to buy iPhones and ipads in your name on contracts that you will have to deal with also payday loans etc might be applied for.

Also sign up for all of the free credit reports such as https://www.clearscore.com/ and https://www.noddle.co.uk/
They only up date Monthly so not much use with ongoing fraud as always out of date data. They will send you a monthly email to remind you to check for changes and the email will say if your score has changed or new accounts opened etc.

Also make sure your email accounts are secure with 2 factor login authorisation etc.

Good luck !

Thank you Mark, some useful stuff there. Not sure how to do 2 factor login authorisation for email, I'm with Talktalk and use Outlook 2007 as an email client. When emails come in to Outlook, they are deleted on the Talktalk server.

[spendorman]

Just had a thought, I am a customer of Talktalk, in 2015 they had a security breach, I may be the victim of this.

[struth]

Just had a thought, I am a customer of Talktalk, in 2015 they had a security breach, I may be the victim of this.

Ah, yes that could be it. Ive been lucky so far, but must double my efforts to avoid similar

[spendorman]

I had already signed up with Experian, thanks to Mark, yesterday I signed up to Noddle with a free account, which does not include alerts. Then I remembered, just after Taltalk had their security breach they emailed me a free voucher code for alerts with Noddle. Sure enough, there was a mention of the Talktalk voucher code on Noddle site, but when I entered it, came up with Invalid Code.

The alerts should tell me if anyone tries to open up bank accounts in my name etc.

I contacted Talktalk, and after a while they told me that the offer of free alerts had finished, but if I paid Noddle the £20 alerts fee, Talktalk would credit me with £2.50 per month for a year, which more than covers a year of alerts.

I'd say this is good service from Talktalk.

I started signing up to Clearscore, but part way though it was asking me for my annual income including any benefits, pensions and dividend payments. I halted at this point.

[spendorman]

Just a bit of an update. Over the last few days I've been busy changing various account passwords and memorable data. There are so many, including Paypal Ebay and Amazon. Probably, understandably, I have been feeling unsettled by what appears to be identity theft.

I have registered with cifas and removed my name from the electoral roll, but I can still vote.

Experian have been very good, my own banks too have been helpful.

However, today, I received a call from the Complaints Manager at TSB (the bank that sent me the debit card with my details on, that I did not apply for), and he said that the case was now closed and they had done everything required of them and had done nothing wrong.

I asked for my personal details that the fraudster provided TSB to enable them to open an account. They said that they would not tell me. I said that this was not reasonable and they said that they could not tell me because it was not me that opened the account!

I said I was not happy with this, they replied that I could take it to the Financial Ombudsman. I asked who pays the Financial Ombudsman, the reply was the banks. I asked for the name of this guy's line manager, he refused, and said if I phone in again and ask, I will be refused again.

I then asked if TSB would be making a gesture of goodwill for all the trouble and expense I have had, the answer was no. I said that I might report the whole matter to Money Which. He said that I could do that.

Interestingly, towards the end of the call the guy told me that they had recorded the call, I said I had too. I also pointed out that they should have told me at the beginning of the call, and that is another complaint. He said to me that I should have told him too at the beginning of the call. My reply was that I am not a professional company.

Not too happy with TSB's way of treating me. Just thinking of what to do next.

[Spectral Morn]

Just a bit of an update. Over the last few days I've been busy changing various account passwords and memorable data. There are so many, including Paypal Ebay and Amazon. Probably, understandably, I have been feeling unsettled by what appears to be identity theft.

I have registered with cifas and removed my name from the electoral roll, but I can still vote.

Experian have been very good, my own banks too have been helpful.

However, today, I received a call from the Complaints Manager at TSB (the bank that sent me the debit card with my details on, that I did not apply for), and he said that the case was now closed and they had done everything required of them and had done nothing wrong.

I asked for my personal details that the fraudster provided TSB to enable them to open an account. They said that they would not tell me. I said that this was not reasonable and they said that they could not tell me because it was not me that opened the account!

I said I was not happy with this, they replied that I could take it to the Financial Ombudsman. I asked who pays the Financial Ombudsman, the reply was the banks. I asked for the name of this guys line manager, he refused, and said if I phone in again and ask, I will be refused again.

I then asked if TSB would be making a gesture of goodwill for all the trouble and expense I have had, the answer was no. I said that I might report the whole matter to Money Which. He said that I could do that.

Interestingly, towards the end of the call the guy told me that they had recorded the call, I said I had too. I also pointed out that they should have told me at the beginning of the call, and that is another complaint. He said to me that I should have told him too at the beginning of the call. My reply was that I am not a professional company.

Not too happy with TSB's way of treating me. Just thinking of what to do next.

That's appalling. Speak to your local police force and get them involved. I would also approach local independent media and the BBC and get them involved through a suitable TV or radio show. The TSB will not like the publicity.

[spendorman]

That's appalling. Speak to your local police force and get them involved. I would also approach local independent media and the BBC and get them involved through a suitable TV or radio show. The TSB will not like the publicity.

That's what I feel, tomorrow, I'll probably go to the local Police Station, yes we still have one, but it's not open often.

Nearly every day I listen to BBC Three Counties consumer programme, headed by JVS (Jonathan Vernon-Smith), possibly I could contact them. Also, my neighbour often writes, and gets published, letters to newspapers like The Times. He would do a good one for me.

[TazSob]

Hi Alex, download and run this software https://home.sophos.com is free and will find almost any hidden viruses within your system. From what I understand some malicious files can hide in folders where normal anti virus programs won't look, this will find them. I thought I was really secure till I found 2 Trojans hiding away...

[spendorman]

Thank you Taz, I will do and report back.

[spendorman]

I have Avast free on the machine, I presume that Sohos is compatible?

[TazSob]

I have Avast free on the machine, I presume that Sohos is compatible?

Yes this will run regardless of what other virus programs you have installed. It'll connect to the net and download the latest information from it's server then will take around 2/3 hours to do a complete scan

[spendorman]

Thanks, downloading now.

[spendorman]

Sofos would not install, it said that Avast must be removed first, did that, installed Sophos, scanning now.

[sq225917]

Tsb need slapping, shame them publicly.

[spendorman]

Tsb need slapping, shame them publicly.

I feel the same.

Even if it was my fault that my details were accessed by the fraudster, which I don't think it is, I need to know what details were supplied by the identity thief so that I could remedy matters for the future.

However, I might give them one last chance by reporting the case to TSB's CEO, who I believe is Paul Pester.

[spendorman]

Sophos finished scanning, nothing really found, a couple of what it calls "potentially unwanted programs" but I know what they are. Just scanning with Clamwin now!

[Dynamics]

I wouldn't worry about that spendorman, just creating extra hassle for you. The banks and authorities are responsible if they cock up on identity theft etc anyway. The banks can't disclose personal data about others to you, under dpa 1998, even if they are criminals etc. They may report to police.

It's reasonable for them to tell you how it happened after an investigation and if you want to, make a request in writing. In order for you to find out which personal data the person got hold of from you to open an account so you can work out how it happened, Make a subject access request under the data protection act for all personal data tsb hold regarding you. Section 7 of dpa 98. You have to pay £10 unfortunately. This would mean if the person had one of your letters, which assumes is the case if they opened the bank account, your personal personal data.

Under ripa which deals with police largely you don't have tell someone that you are recording them and you can use the information as a recorded call for personal use only i.e. Not disclosing to a third party (unless they have your consent)

[spendorman]

Hi Simon, I have already made a request in writing which included asking which personal data the person got hold of to open an account in my name. No reply as yet.

Thank for the advice to request under the Data Protection Act Section 7 of dpa 98, for all data TSB hold on me. I will do this, but need to get a reply from my letter first.

The bit about recording the call I only included to show their arrogance, well at least that one guy's arrogance.

I had thought of trying to apply for an account with TSB myself and see what data they require to open the account, probably not advisable.

Perhaps members of the forum that have joined up with TSB recently can say what type of data was requested of them to open an account.

[Dynamics]

I'd make the request under the dpa formally as these firms don't often take it as such unless you state section 7, where it will go to their dpa team. If you don't state it as a formal request they are unlikely to pass it on to their dpa team. I'd try and get them to deal with it without the £10 which is the most they can charge (no matter amount of info they have and admin costs etc), as you don't have an account with them, and the information you seek (possible personal letters of yours the fraudster has) is likely to be limited. I'd find out the dpa team detail and email them and get them to acknowledge you. You have to have Id to make a subject access request, you can scan and send or if you can't do this letter in post with photocopies. This is a suggestion of what to say ;

Dear Sirs

Re : subject 7 data access request

I am writing to make a subject access for 'personal data' pursuant to section 7 of the data protection act (1998) following my exchanges with x on x by email/letter (your ref x)

I attach two forms of identification pursuant to the guidance of the information commissioner for making access requests. These are x and x, dated x and x.

Please confine your search to any and all documents you hold in respect to communications between myself and your mr/ms/mrs x as referred to above, in addition in relation to records you hold as part of accounts taken out in my name (state your full name and middle names) residing at (state your full address). In addiiton all internal emails within tsb constituting my personal data as well as any and all other electronic records.

Personal data is that which refers to me either implied or expressly as well as any personal correspondence from me including utility bills or any other forms of identification. Please do not redact any part of such personal data, except as referring to third parties. Any content in reference to me in an implied or express sense, but not identifying individuals or organisations, still constitutes my personal data.

I anticipate my personal data will be relatively limited therefore I ask that you please wave the £10 statutory fee, particularly in the circumstances that your above colleague will be aware of how I have come to be involved with tsb, to whom I have not/never taken out any accounts myself.

It would be helpful to me if your data team could confirm the information and proof of identity documents required to take out an account (state account type per card you got) with tsb.

Should you require payment of the maximum £10 fee, please can you let me know but I'm hopeful this won't be necessary.

You are obviously aware you have 40 days from receipt of my £10 cheque or confirmation you are prepared to wave the fee, to comply with my data request.

Thank you for your consideration to this matter and looking forward to hearing from you in the above regard with your acknowledgement.

Yours faithfully

xxxxx'

I know all this stuff as used to work as a liability loss adjuster making these all the time.

[spendorman]

Hi Simon, that is excellent, thank you, I was beginning to think that you might be a lawyer, but you explained your knowledge.

I will use your draft letter, but need to find out is TSB have received the letter that I sent last week asking for the same information as your letter, but not in nearly such a good way.

[Mark Grant]

Perhaps members of the forum that have joined up with TSB recently can say what type of data was requested of them to open an account.

It is on the TSB website, read all of it as someone knows the answers about you:

https://apply.tsb.co.uk/personal/a/apply_current_account/classicaccountVER

You can presume that someone knows all of your details such as name, address, date of birth, time at address, marital status, town of birth, income and employment etc, basically the whole Shebang :(

If no money or assets have been lost then the police wont be interested, it will just be logged.

TSB will know the IP address used to make the application and they will have the contact phone and email address used for the form but might not tell you.

I would be looking at making yourself more secure rather than spending too much time chasing TSB as they have not really done much if anything wrong.

I would suggest another email address to use for all financial stuff and maybe another phone number on all your financial logins as even though you have changed your passwords an enterprising scammer will just phone up and pretend to be you as they know all the answers to any questions. If you change your phone and email on all important sites the scammers wont know those answers about email and phone numbers as they will have changed.

[spendorman]

Thanks Mark, in fact I did look at the TSB website last night and could see most of the info needed. I don't think one can get all unless one fills in the form. Thanks also for the tip to change email address, I'll get on to that.

[spendorman]

Right, I've already changed password, memorable data for financial things, just changing my mobile number and email address too, but what do I do about the landline number registered with the banks, leave it, or delete it and just rely on the mobile.

Just been to my local Tesco to buy a cheap mobile. They said that they did not have any at first, then the Manager came out with two old stock Tesco Nokia 225's, I thought he said £50 each and I said that was too much, he said not £50, 50P!!!! I thought he was joking. No, he was serious, bought them and put £10 in the Cancer Research UK charity box.

[Dynamics]

It is on the TSB website, read all of it as someone knows the answers about you:

https://apply.tsb.co.uk/personal/a/apply_current_account/classicaccountVER

You can presume that someone knows all of your details such as name, address, date of birth, time at address, marital status, town of birth, income and employment etc, basically the whole Shebang :(

If no money or assets have been lost then the police wont be interested, it will just be logged.

TSB will know the IP address used to make the application and they will have the contact phone and email address used for the form but might not tell you.

I would be looking at making yourself more secure rather than spending too much time chasing TSB as they have not really done much if anything wrong.

I would suggest another email address to use for all financial stuff and maybe another phone number on all your financial logins as even though you have changed your passwords an enterprising scammer will just phone up and pretend to be you as they know all the answers to any questions. If you change your phone and email on all important sites the scammers wont know those answers about email and phone numbers as they will have changed.

I doubt they could know every detail, only the stuff that requires an answer in the application so where they ask profession it's not something they would need verify as to job, on an application

[spendorman]

At the beginning of all this I wrote to TSB asking for various details in including what sort my of identification was provided by the identity thief to open an account.

I have received a reply from the not very helpful guy at TSB that I had a telephone conversation with.

20312

Next, will be the letter based on Simon's draft that he kindly did.

[spendorman]

The letter that Simon kindly drafted has now been sent to TSB.

A further development, yesterday I received through the post, an overdue bill for £90 from Sky Mobile. I have never has anything to do with Sky. Needless to say I phoned them. Sky confirmed that contracts had been taken to the value of about £3000. I must say Sky were very helpful, accepted immediately that It was identity theft, and told me that I would not be responsible for anything. They told me that the TSB account that I received a debit card for was the one that the fraudster used to buy stuff from them.

[struth]

Question is how could he access details of account and card no etc if you have it?

[spendorman]

He must have had the bank account details associated with the card.