Discussion Forum: Thread 287767

 Author: tbreeze View Messages Posted By tbreeze
 Posted: Apr 7, 2021 20:24
 Subject: Banned from Lego.com (worth the read)
 Viewed: 334 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

tbreeze (20)

Location:  USA, Iowa
Member Since Contact Type Status
Jan 7, 2020 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BrickItOrTicket
I felt I need to share this with the community. First I have to say I am a loyal
customer with Lego and a VIP through lego.com.
About a month ago I tried placing an order online, after placing multiple orders
over the past 2 years(more than 10 sets) with no issues. I was out of state
on vacation when it I placed an order (gingerbread house when it was briefly
in stock) and had recently got a new credit card due to a fraud alert weeks before.
After the order seemed to go through (but not charged) my credit card, I received
an email from Lego stating "your order didn't pass our order validation checks...make
sure all payment information is accurate..." I had just figured it had something
to do with me being out of state an my credit card had stopped the order, or
Lego really was out of stock when I placed the order and couldn't fulfill
it. Then a few weeks later I placed an order for my step daughter (friends shopping
mall). Again after showing my credit card had a pending charge with Lego, I
received another email from Lego saying the same as the last time I tried ordering.
I was not out of state this time and made sure all my payment information was
accurate. After talking with customer service about this, they said they would
ask the validation team to check again. I received an email back stating "as
we've had to cancel your recent orders in accordance with our shipping and
handling terms, we've decided not to accept any further orders from your
account..." So I called customer service again to try and get answers. Basically
what I found this time was apparently there are other people tied to my account
somehow that have been using the services of Lego maliciously and taking advantage
of Lego groups return policies (ex. lost set in mail, wrong sets etc.).
Again I called to try and get answers as I had not done any of that and the only
thing I have ever done was contact Lego on one occasion for a broken or missing
piece and the only "free" thing I got from Lego was the VIP pirate coin which
I used my VIP points to obtain. I was able to speak with a supervisor who said
it seemed odd of my situation. Basically what she was able to inform me without
breaking privacy issues was there are 15 different accounts that have connection
to my account somehow. She gave examples that they may have very similar name
with slight change to it or use my address or phone number or email address or
all these were very similar to mine and those accounts were doing those malicious
activities which resulted in be not being able to order from lego.com anymore.

I can't express how frustrated I have been about this and how concerned I
am for current and future Lego online customers of this happening to them. I
hope for everyone that this was either a rare thing that has happened, or even
a mistake by Lego, which they tried to assure they do not believe it was, but
I have and never would take advantage of Lego return policies. I felt silly
enough just contacting Lego the one time I had a broken piece.
I'm mostly curious if anyone else has ever had this happen to them, and also
want to give a heads up that there could be some sort of new hacking work being
done to Lego online customers that make it look like your are taking advantage
of Lego. I notified the supervisor that they should really look into how this
happened so that there won't be other Lego online customers who fall victim.
I don't know if I will continue to support Lego because of this. I fell
like I'm not only a victim to the people who were hacking my account, but
also to the Lego Group as I am no longer able to order online and take advantage
of the VIP benefits. So be aware and do all you can to secure your accounts,
even though I was already doing that.
 Author: kzinti View Messages Posted By kzinti
 Posted: Apr 7, 2021 22:35
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 126 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

kzinti (4478)

Location:  USA, Missouri
Member Since Contact Type Status
Jun 20, 2001 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: The Brick Bin
In LEGO, tbreeze writes:
  I felt I need to share this with the community. First I have to say I am a loyal
customer with Lego and a VIP through lego.com.
About a month ago I tried placing an order online, after placing multiple orders
over the past 2 years(more than 10 sets) with no issues. I was out of state
on vacation when it I placed an order (gingerbread house when it was briefly
in stock) and had recently got a new credit card due to a fraud alert weeks before.
After the order seemed to go through (but not charged) my credit card, I received
an email from Lego stating "your order didn't pass our order validation checks...make
sure all payment information is accurate..." I had just figured it had something
to do with me being out of state an my credit card had stopped the order, or
Lego really was out of stock when I placed the order and couldn't fulfill
it. Then a few weeks later I placed an order for my step daughter (friends shopping
mall). Again after showing my credit card had a pending charge with Lego, I
received another email from Lego saying the same as the last time I tried ordering.
I was not out of state this time and made sure all my payment information was
accurate. After talking with customer service about this, they said they would
ask the validation team to check again. I received an email back stating "as
we've had to cancel your recent orders in accordance with our shipping and
handling terms, we've decided not to accept any further orders from your
account..." So I called customer service again to try and get answers. Basically
what I found this time was apparently there are other people tied to my account
somehow that have been using the services of Lego maliciously and taking advantage
of Lego groups return policies (ex. lost set in mail, wrong sets etc.).
Again I called to try and get answers as I had not done any of that and the only
thing I have ever done was contact Lego on one occasion for a broken or missing
piece and the only "free" thing I got from Lego was the VIP pirate coin which
I used my VIP points to obtain. I was able to speak with a supervisor who said
it seemed odd of my situation. Basically what she was able to inform me without
breaking privacy issues was there are 15 different accounts that have connection
to my account somehow. She gave examples that they may have very similar name
with slight change to it or use my address or phone number or email address or
all these were very similar to mine and those accounts were doing those malicious
activities which resulted in be not being able to order from lego.com anymore.

I can't express how frustrated I have been about this and how concerned I
am for current and future Lego online customers of this happening to them. I
hope for everyone that this was either a rare thing that has happened, or even
a mistake by Lego, which they tried to assure they do not believe it was, but
I have and never would take advantage of Lego return policies. I felt silly
enough just contacting Lego the one time I had a broken piece.
I'm mostly curious if anyone else has ever had this happen to them, and also
want to give a heads up that there could be some sort of new hacking work being
done to Lego online customers that make it look like your are taking advantage
of Lego. I notified the supervisor that they should really look into how this
happened so that there won't be other Lego online customers who fall victim.
I don't know if I will continue to support Lego because of this. I fell
like I'm not only a victim to the people who were hacking my account, but
also to the Lego Group as I am no longer able to order online and take advantage
of the VIP benefits. So be aware and do all you can to secure your accounts,
even though I was already doing that.

Perhaps your identity was indeed stolen, if so, file online with the Feds, and
let Lego know. Might not help, but if you do nothing more you're still where
you are, so you have nothing to lose.

https://www.ic3.gov/Home/ComplaintChoice
 Author: crxefx View Messages Posted By crxefx
 Posted: Apr 8, 2021 01:30
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 96 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

crxefx (1796)

Location:  USA, Wisconsin
Member Since Contact Type Status
Jan 28, 2017 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: A and R Brick
This is horrible indeed! I'd definitely have a chip on my shoulder concerning
lego.. Their customer service at very least. As was mentioned and I will compound
on, you should definitely get a copy of your credit report and have a good look
at it. Things could be worse than not being able to buy from lego. I hope thats
not your case. Good luck
 Author: tbreeze View Messages Posted By tbreeze
 Posted: Apr 9, 2021 15:08
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 45 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

tbreeze (20)

Location:  USA, Iowa
Member Since Contact Type Status
Jan 7, 2020 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BrickItOrTicket
I appreciate your response.
Yes, in prospective, things could be much worse. I did check my credit report,
and everything looked fine. It's mostly frustrating that I can no longer
order online or pre order or acquire the benefits of the VIP program. With
no Lego store within 3 hours of me, I am left to buying from box stores with
the limited sets they have and whenever they get those sets. Unfortunately,
they don't have every Lego set available like lego.com would, but I'm
glad to see target providing more of the 18+ sets. Thanks.

In LEGO, crxefx writes:
  This is horrible indeed! I'd definitely have a chip on my shoulder concerning
lego.. Their customer service at very least. As was mentioned and I will compound
on, you should definitely get a copy of your credit report and have a good look
at it. Things could be worse than not being able to buy from lego. I hope thats
not your case. Good luck
 Author: tbreeze View Messages Posted By tbreeze
 Posted: Apr 9, 2021 15:10
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 34 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

tbreeze (20)

Location:  USA, Iowa
Member Since Contact Type Status
Jan 7, 2020 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BrickItOrTicket
I appreciate your response.
I did check my credit and it all seemed fine. Lego Group made it sound like
my identity was not stolen and they protect that information. I believe based
on the little information I received, that it was some sort of connection between
15 different accounts. Accounts could be ebay, bricklink, etc. I informed them
that I do have an ebay and bricklink account, but have not sold on ebay for years
(never sold Lego on it) and I have bricklink mostly for buying parts from others
but have never sold on it. I do have a store that I may someday sell parts,
but I mostly have it to keep track of inventory I have of pieces.
Because Lego Group can not provide me any information of the other 15 accounts,
it has basically made it impossible for me to figure out who or what the people
are doing. Hoping Lego Group will continue to investigate to see how these accounts
are associated both for myself and for current and future Lego customers so this
may not happen to them.


In LEGO, kzinti writes:
  In LEGO, tbreeze writes:
  I felt I need to share this with the community. First I have to say I am a loyal
customer with Lego and a VIP through lego.com.
About a month ago I tried placing an order online, after placing multiple orders
over the past 2 years(more than 10 sets) with no issues. I was out of state
on vacation when it I placed an order (gingerbread house when it was briefly
in stock) and had recently got a new credit card due to a fraud alert weeks before.
After the order seemed to go through (but not charged) my credit card, I received
an email from Lego stating "your order didn't pass our order validation checks...make
sure all payment information is accurate..." I had just figured it had something
to do with me being out of state an my credit card had stopped the order, or
Lego really was out of stock when I placed the order and couldn't fulfill
it. Then a few weeks later I placed an order for my step daughter (friends shopping
mall). Again after showing my credit card had a pending charge with Lego, I
received another email from Lego saying the same as the last time I tried ordering.
I was not out of state this time and made sure all my payment information was
accurate. After talking with customer service about this, they said they would
ask the validation team to check again. I received an email back stating "as
we've had to cancel your recent orders in accordance with our shipping and
handling terms, we've decided not to accept any further orders from your
account..." So I called customer service again to try and get answers. Basically
what I found this time was apparently there are other people tied to my account
somehow that have been using the services of Lego maliciously and taking advantage
of Lego groups return policies (ex. lost set in mail, wrong sets etc.).
Again I called to try and get answers as I had not done any of that and the only
thing I have ever done was contact Lego on one occasion for a broken or missing
piece and the only "free" thing I got from Lego was the VIP pirate coin which
I used my VIP points to obtain. I was able to speak with a supervisor who said
it seemed odd of my situation. Basically what she was able to inform me without
breaking privacy issues was there are 15 different accounts that have connection
to my account somehow. She gave examples that they may have very similar name
with slight change to it or use my address or phone number or email address or
all these were very similar to mine and those accounts were doing those malicious
activities which resulted in be not being able to order from lego.com anymore.

I can't express how frustrated I have been about this and how concerned I
am for current and future Lego online customers of this happening to them. I
hope for everyone that this was either a rare thing that has happened, or even
a mistake by Lego, which they tried to assure they do not believe it was, but
I have and never would take advantage of Lego return policies. I felt silly
enough just contacting Lego the one time I had a broken piece.
I'm mostly curious if anyone else has ever had this happen to them, and also
want to give a heads up that there could be some sort of new hacking work being
done to Lego online customers that make it look like your are taking advantage
of Lego. I notified the supervisor that they should really look into how this
happened so that there won't be other Lego online customers who fall victim.
I don't know if I will continue to support Lego because of this. I fell
like I'm not only a victim to the people who were hacking my account, but
also to the Lego Group as I am no longer able to order online and take advantage
of the VIP benefits. So be aware and do all you can to secure your accounts,
even though I was already doing that.

Perhaps your identity was indeed stolen, if so, file online with the Feds, and
let Lego know. Might not help, but if you do nothing more you're still where
you are, so you have nothing to lose.

https://www.ic3.gov/Home/ComplaintChoice
 Author: Tracyd View Messages Posted By Tracyd
 Posted: Apr 9, 2021 15:19
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 96 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Tracyd (302)

Location:  USA, Texas
Member Since Contact Type Status
May 29, 2003 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: Tracyd's
In LEGO, tbreeze writes:
  I appreciate your response.
I did check my credit and it all seemed fine. Lego Group made it sound like
my identity was not stolen and they protect that information. I believe based
on the little information I received, that it was some sort of connection between
15 different accounts. Accounts could be ebay, bricklink, etc. I informed them
that I do have an ebay and bricklink account, but have not sold on ebay for years
(never sold Lego on it) and I have bricklink mostly for buying parts from others
but have never sold on it. I do have a store that I may someday sell parts,
but I mostly have it to keep track of inventory I have of pieces.
Because Lego Group can not provide me any information of the other 15 accounts,
it has basically made it impossible for me to figure out who or what the people
are doing. Hoping Lego Group will continue to investigate to see how these accounts
are associated both for myself and for current and future Lego customers so this
may not happen to them.



You might ask LEGO why those accounts were linked to yours without your express
permission. No accounts should be linked without permission from the account
holders. You should also point out to them that as it is your account you are
entitled to the information about the accounts linked to yours or they need to
unlink them and reevaluate your account without those accounts attached to it.
 Author: tbreeze View Messages Posted By tbreeze
 Posted: Apr 9, 2021 20:50
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 54 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

tbreeze (20)

Location:  USA, Iowa
Member Since Contact Type Status
Jan 7, 2020 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BrickItOrTicket
They are more connected and not linked. It’s kind of hard to explain especially
since I don’t know the full details. Basically my understanding is there are
15 accounts that are in connection in some way like maybe using same IP address
or email address that is linked to an address I’ve had or phone number etc.
It was very confusing to me and without being able to know exactly what was happening
it’s hard to explain it. I just know I’ve never done anything in the wrong towards
the lego group.

In LEGO, Tracyd writes:
  In LEGO, tbreeze writes:
  I appreciate your response.
I did check my credit and it all seemed fine. Lego Group made it sound like
my identity was not stolen and they protect that information. I believe based
on the little information I received, that it was some sort of connection between
15 different accounts. Accounts could be ebay, bricklink, etc. I informed them
that I do have an ebay and bricklink account, but have not sold on ebay for years
(never sold Lego on it) and I have bricklink mostly for buying parts from others
but have never sold on it. I do have a store that I may someday sell parts,
but I mostly have it to keep track of inventory I have of pieces.
Because Lego Group can not provide me any information of the other 15 accounts,
it has basically made it impossible for me to figure out who or what the people
are doing. Hoping Lego Group will continue to investigate to see how these accounts
are associated both for myself and for current and future Lego customers so this
may not happen to them.



You might ask LEGO why those accounts were linked to yours without your express
permission. No accounts should be linked without permission from the account
holders. You should also point out to them that as it is your account you are
entitled to the information about the accounts linked to yours or they need to
unlink them and reevaluate your account without those accounts attached to it.
 Author: BasKrie View Messages Posted By BasKrie
 Posted: Apr 8, 2021 02:44
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 116 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

BasKrie (5504)

Location:  Netherlands, Drenthe
Member Since Contact Type Status
Dec 5, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: BasKrie
In LEGO, tbreeze writes:
  and had recently got a new credit card due to a fraud alert weeks before

Isn't the answer in this sentence?
Maybe the old CC was used to buy things at Lego and scam them.
Since that CC was tied to your account it got flagged, hence you are not able
to buy with Lego.
Perhaps you could send the fraud alerts to Lego and they can remove your old
CC info from your account.
 Author: tbreeze View Messages Posted By tbreeze
 Posted: Apr 9, 2021 15:03
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 42 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

tbreeze (20)

Location:  USA, Iowa
Member Since Contact Type Status
Jan 7, 2020 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BrickItOrTicket
I don't believe it was an issue with my old credit card, as I had removed
that information from my Lego.com account prior to making any additional purchases.
I believe based on the little information I received, somehow there was a connection
to 15 accounts in someway that some of those accounts were misusing Lego Groups
terms.
Accounts could be ebay, bricklink, etc. I informed them that I do have an ebay
and bricklink account, but have not sold on ebay for years (never sold Lego on
it) and I have bricklink mostly for buying parts from others but have never sold
on it. I do have a store that I may someday sell parts, but I mostly have it
to keep track of inventory I have of pieces.
Because Lego Group can not provide me any information of the other 15 accounts,
it has basically made it impossible for me to figure out who or what the people
are doing. Hoping Lego Group will continue to investigate to see how these accounts
are associated both for myself and for current and future Lego customers so this
may not happen to them.


In LEGO, BasKrie writes:
  In LEGO, tbreeze writes:
  and had recently got a new credit card due to a fraud alert weeks before

Isn't the answer in this sentence?
Maybe the old CC was used to buy things at Lego and scam them.
Since that CC was tied to your account it got flagged, hence you are not able
to buy with Lego.
Perhaps you could send the fraud alerts to Lego and they can remove your old
CC info from your account.
 Author: cosmicray View Messages Posted By cosmicray
 Posted: Apr 8, 2021 07:06
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 102 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

cosmicray (3126)

Location:  USA, Florida
Member Since Contact Type Status Collage
Oct 1, 2000 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
View Collage Pic
Store: Cosmic Toys
In LEGO, tbreeze writes:
  I was out of state
on vacation when it I placed an order (gingerbread house when it was briefly
in stock) and had recently got a new credit card due to a fraud alert weeks before.

If you have had fraudulent charges on a CC, that was being used for card not
present
charges, I strongly urge you to either use (if you already have it)
or get a different card (one that does have it) a virtual card number
feature. Do not expose the primary card's credentials to any merchant where
the card is being applied remotely.

One of my CCs was breached back in January. The card issuer killed it, sent me
a new one, and it breached 28 days later. It now appears that the card issuer
may have triggered the second breach, by sending the new card details out to
all the merchants they believed to be sending automatic recurring charges. If
a card is shut down and reissued, make sure you tell them up front to disable
the automatic notification feature. You can handle that manually. All the recurring
charges are card not present, so I strongly urge you to micro-manage those
with a rotation of VCNs.

For those who have never heard of a VCN, it is a proxy card number, issued to
you for a short period of time, and for a fixed amount (that you specify). If
hackers get ahold of that number it will be of limited, or no, value to them.
It will effectively self destruct in short order.

Nita Rae
 Author: legomaster100 View Messages Posted By legomaster100
 Posted: Apr 8, 2021 07:50
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 89 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

legomaster100 (14)

Location:  USA, Texas
Member Since Contact Type Status
Jun 1, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: The Brick Llama
In LEGO, cosmicray writes:
  In LEGO, tbreeze writes:
  I was out of state
on vacation when it I placed an order (gingerbread house when it was briefly
in stock) and had recently got a new credit card due to a fraud alert weeks before.

If you have had fraudulent charges on a CC, that was being used for card not
present
charges, I strongly urge you to either use (if you already have it)
or get a different card (one that does have it) a virtual card number
feature. Do not expose the primary card's credentials to any merchant where
the card is being applied remotely.

One of my CCs was breached back in January. The card issuer killed it, sent me
a new one, and it breached 28 days later. It now appears that the card issuer
may have triggered the second breach, by sending the new card details out to
all the merchants they believed to be sending automatic recurring charges. If
a card is shut down and reissued, make sure you tell them up front to disable
the automatic notification feature. You can handle that manually. All the recurring
charges are card not present, so I strongly urge you to micro-manage those
with a rotation of VCNs.

For those who have never heard of a VCN, it is a proxy card number, issued to
you for a short period of time, and for a fixed amount (that you specify). If
hackers get ahold of that number it will be of limited, or no, value to them.
It will effectively self destruct in short order.

Nita Rae

Great idea!
I might try that soon
Thanks
 Author: tbreeze View Messages Posted By tbreeze
 Posted: Apr 9, 2021 15:00
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 45 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

tbreeze (20)

Location:  USA, Iowa
Member Since Contact Type Status
Jan 7, 2020 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BrickItOrTicket
I appreciate the response.
After my first credit card was closed because of potential fraud charge ($0.40
charge to Jet Frog which I never purchased and my C.C. sent me a notice before
it was even charged, so they knew it was a potential fraud charge), I had to
manually change my C.C. for all automatic payments (ex. subscriptions, monthly
bills etc.) My card did not automatically make the changes to those automatic
payments. I will look into the VPN you mentioned. Thanks.
Also, it seems maybe it wasn't an issue with my credit card, however it was
some sort of link to 15 accounts in some way. Could be ebay, bricklink, etc.
I informed them that I do have an ebay and bricklink account, but have not sold
on ebay for years (never sold Lego on it) and I have bricklink mostly for buying
parts from others but have never sold on it. I do have a store that I may someday
sell parts, but I mostly have it to keep track of inventory I have of pieces.
Because Lego Group can not provide me any information of the other 15 accounts,
it has basically made it impossible for me to figure out who or what the people
are doing. Hoping Lego Group will continue to investigate to see how these accounts
are associated both for myself and for current and future Lego customers so this
may not happen to them.

I appreciate the feedback.
I did check my credit report and everything looked ok fortunatly. It seems based
on the little information I got from Lego Group that there are 15 accounts that
are all linked in some way and they may not be all lego.com accounts. Could
be ebay, bricklink, etc. I informed them that I do have an ebay and bricklink
account, but have not sold on ebay for years (never sold Lego on it) and I have
bricklink mostly for buying parts from others but have never sold on it. I do
have a store that I may someday sell parts, but I mostly have it to keep track
of inventory I have of pieces.
Because Lego Group can not provide me any information of the other 15 accounts,
it has basically made it impossible for me to figure out who or what the people
are doing. Hoping Lego Group will continue to investigate to see how these accounts
are associated both for myself and for current and future Lego customers so this
may not happen to them.


In LEGO, cosmicray writes:
  In LEGO, tbreeze writes:
  I was out of state
on vacation when it I placed an order (gingerbread house when it was briefly
in stock) and had recently got a new credit card due to a fraud alert weeks before.

If you have had fraudulent charges on a CC, that was being used for card not
present
charges, I strongly urge you to either use (if you already have it)
or get a different card (one that does have it) a virtual card number
feature. Do not expose the primary card's credentials to any merchant where
the card is being applied remotely.

One of my CCs was breached back in January. The card issuer killed it, sent me
a new one, and it breached 28 days later. It now appears that the card issuer
may have triggered the second breach, by sending the new card details out to
all the merchants they believed to be sending automatic recurring charges. If
a card is shut down and reissued, make sure you tell them up front to disable
the automatic notification feature. You can handle that manually. All the recurring
charges are card not present, so I strongly urge you to micro-manage those
with a rotation of VCNs.

For those who have never heard of a VCN, it is a proxy card number, issued to
you for a short period of time, and for a fixed amount (that you specify). If
hackers get ahold of that number it will be of limited, or no, value to them.
It will effectively self destruct in short order.

Nita Rae
 Author: Skullfyre View Messages Posted By Skullfyre
 Posted: Apr 8, 2021 12:54
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 49 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Skullfyre (14)

Location:  USA, North Carolina
Member Since Contact Type Status
Jan 7, 2021 Contact Member Buyer
Buying Privileges - OK
If you haven't already done this, run all three of your credit reports immediately.
You may have accounts, addresses, cards, etc. under your name that are not yours.
But the debt or negative repercussions will be yours.
 Author: tbreeze View Messages Posted By tbreeze
 Posted: Apr 9, 2021 14:52
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 35 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

tbreeze (20)

Location:  USA, Iowa
Member Since Contact Type Status
Jan 7, 2020 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BrickItOrTicket
I appreciate the feedback.
I did check my credit report and everything looked ok fortunatly. It seems based
on the little information I got from Lego Group that there are 15 accounts that
are all linked in some way and they may not be all lego.com accounts. Could
be ebay, bricklink, etc. I informed them that I do have an ebay and bricklink
account, but have not sold on ebay for years (never sold Lego on it) and I have
bricklink mostly for buying parts from others but have never sold on it. I do
have a store that I may someday sell parts, but I mostly have it to keep track
of inventory I have of pieces.
Because Lego Group can not provide me any information of the other 15 accounts,
it has basically made it impossible for me to figure out who or what the people
are doing. Hoping Lego Group will continue to investigate to see how these accounts
are associated both for myself and for current and future Lego customers so this
may not happen to them.


In LEGO, Skullfyre writes:
  If you haven't already done this, run all three of your credit reports immediately.
You may have accounts, addresses, cards, etc. under your name that are not yours.
But the debt or negative repercussions will be yours.
 Author: CPgolfaddict View Messages Posted By CPgolfaddict
 Posted: Apr 8, 2021 18:47
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 74 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

CPgolfaddict (3853)

Location:  USA, North Carolina
Member Since Contact Type Status
Jan 27, 2008 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Git Yer Bricks Y'all
When Lego replied with "... we've decided not to accept any further orders
from your
account" was the word "account" referring to your lego.com account, or your
new credit card account?

If your Lego.com account was used for suspect orders, I think you would see those
orders in your Lego.com order history. If it is a new credit card, AND you are
shipping to a different name and address (like a gift) vs. what is on the card
that could be part of it. Or...did you purchase Lego elsewhere (e.g. eBay) and
have it shipped to the same shipping address?

10+ years ago I bought two sets on eBay. Months later I tried to buy on lego.com
again. The lego.com order was cancelled. I called Lego to figure out what
was wrong and they told me. It turns out the eBay seller was using stolen credit
cards to buy from Lego and ship to me as if it was a gift. After I gave them
all the info I had on the eBay seller, Lego reinstated my account.
 Author: tbreeze View Messages Posted By tbreeze
 Posted: Apr 9, 2021 14:47
 Subject: Re: Banned from Lego.com (worth the read)
 Viewed: 51 times
 Topic: LEGO
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

tbreeze (20)

Location:  USA, Iowa
Member Since Contact Type Status
Jan 7, 2020 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BrickItOrTicket
I appreciate your response!
In regards to my account, they are referring to my lego.com account which I have
my VIP points on. From my understanding, I can still utilize my VIP points,
but as you know somethings may require you purchase something to get the reward
(VIP coins). I believe I should be able to get in store gift cards with my VIP
left, but will not be able to accumulate any more points.
They mentioned they had contacted through email all the accounts that were linked
to the issue, which I believe they said there were 15. From my understanding
too is that it may not just be a lego.com connection, but that maybe an ebay
account, bricklink, other external sites. I don't believe it has anything
to do with my credit card. I had changed my credit card information when I got
my new card. In January when I had a charge that was not one I made, it was
for $0.40 at Jet Frog. I looked up Jet Frog, which is a phone app, which I have
never owned or anyone in my family has owned.
Because it was many accounts associated with each other, my specific account
did not have any other orders than what I personally ordered. I even looked
back to try and find the order number that Lego Group provided me, which I was
not able to find in my account. I have used 2 different mailing address for
delivering my packages (sometimes its a gift for a family member so don't
want them to see the package delivered) but my billing address is always accurate
with the C.C.
I have purchased Lego sets on Ebay with in the last 2 years. Maybe 2 or 3, but
mostly I purchase through Lego, or boxstores and sometimes local marketplace
(craigslist etc.)
My experience sounds a bit similar to what you dealt with through Ebay, but I
have no way of knowing if this is the issue, as Lego Group is unable to provide
me any information about the other accounts involved as it would be a breach
of privacy. Basically for me, I have no way of knowing who or what the people
are doing that is connected to me somehow. The supervisor at Lego Group said
she'd continue to dig for information so she can try an understand what happened,
but informed me that Lego Groups decision is final. I'm hopeful that they
will still investigate to figure out how this happened both for me and for current
and future Lego customers that it won't happen to them.



In LEGO, CPgolfaddict writes:
  When Lego replied with "... we've decided not to accept any further orders
from your
account" was the word "account" referring to your lego.com account, or your
new credit card account?

If your Lego.com account was used for suspect orders, I think you would see those
orders in your Lego.com order history. If it is a new credit card, AND you are
shipping to a different name and address (like a gift) vs. what is on the card
that could be part of it. Or...did you purchase Lego elsewhere (e.g. eBay) and
have it shipped to the same shipping address?

10+ years ago I bought two sets on eBay. Months later I tried to buy on lego.com
again. The lego.com order was cancelled. I called Lego to figure out what
was wrong and they told me. It turns out the eBay seller was using stolen credit
cards to buy from Lego and ship to me as if it was a gift. After I gave them
all the info I had on the eBay seller, Lego reinstated my account.