Apple Valet pay Scam

I have a CBD credit card that has been active since March 2024. Recently, I discovered that someone from Saudi Arabia had added my card to their Apple Wallet. I received an OTP on August 24, 2024, but did not see or share it until I noticed the fraudulent transaction. I was unaware of this transaction until I saw the notification on the morning of August 26, 2024.

I initially reported the issue to CBD Bank’s customer service and raised a dispute request on August 26, 2024, around 10:00 AM, within 12 hours of the fraudulent transaction. Despite several follow-ups with the bank to prevent the payment to the merchant, I was informed on September 11, 2024, that the payment had been released to the merchant without a thorough investigation.

CBD Customer Care informed me that my dispute request was closed because the transaction was processed via Apple Pay. Although I had requested the bank to withhold payment to the merchant (MAGHA CAFE) due to the fraudulent transaction, and did not share my OTP or card details, the fraudster attempted two additional transactions that were blocked by the bank.

I am uncertain how my credit card details and OTP were compromised or if there was a security breach on the bank’s side. Despite my repeated requests, CBD Bank has not provided the OTP used for this transaction or the Apple ID associated with it, and they continue to avoid sharing this information.

This incident has made me aware of similar occurrences within my circle, highlighting that many customers are vulnerable to fraud despite no fault of their own. This situation reveals a significant gap in consumer protection. I believe that transactions through any digital wallet should require a security PIN or OTP specifically for the credit card, rather than relying solely on phone-based authorizations.

CBD Customer Care has indicated that the transaction is considered legitimate since it was processed through Apple Wallet. However, following this transaction, there were two subsequent unauthorized transaction attempts that were detected and halted proactively by the bank.