KICKSTARTER: unauthorized use of your credit card payment data

[Duna]

Yes, as incredible as it looks, this is just what has happened to me this morning.

I only used Kickstarted once last year, to support the Spinosaurus by Mesozoic-life and I used my credit card to pay for it.
This morning I was warned by 8 emails that I had "backed" 3 different proyects in Kickstarter that I haven't even heard of. One about silicone wheels, another about an App game of Black people and another for something in Africa written in Danish. Of course I didn't back for them, but my credit card was used with the information Kickstarted had from the other proyect I backed.

I managed to cancel 2 of them, but one with 100$ was "funded" and I can't cancel it. So to get my money back I must sue them at the Police office, go to speak with the bank manager and so on. I have cancelled my credit card just to be sure.

I have also talked to Kickstarter and complained about how can it be possible for someone to access to my payment data in my profile in such a secure web and use it for their advantage. They said "thank you for your warning" and we'll be investigating.

So be careful, and I highly encourage you to access now to your profile and delete every information about your credit card and then after every payment you make.

[Faelrin]

Sorry to see you experienced this. I've been using kickstarter since 2016, and never once had this occur though. I think your account was unfortunately hacked somehow. Are you able to get in and change the password to it at all? I would recommend a long (20 character+) password with mixed characters and numbers.

[ceratopsian]

What an unpleasant surprise for you @Duna.  Thanks for the warning.

[Duna]

You're welcome. Hope it's useful for everyone.

[Duna]

Sorry to see you experienced this. I've been using kickstarter since 2016, and never once had this occur though. I think your account was unfortunately hacked somehow. Are you able to get in and change the password to it at all? I would recommend a long (20 character+) password with mixed characters and numbers.

Thanks for your advice. The password is fine. I don't use it for other accounts.

[Faelrin]

@Duna What I mean is you should probably change the password on the kickstarter account to prevent whoever hacked it to continue using it.

[stargatedalek]

The company Kickstarter did not do that, your account was hacked somehow. Check if they changed the shipping locations to have items sent to themselves or a PO box instead of your address.

[Duna]

The company Kickstarter did not do that, your account was hacked somehow. Check if they changed the shipping locations to have items sent to themselves or a PO box instead of your address.

Yes, of course they didn't do that, but somehow someone managed to get to my payment data. That should have been protected like it is in every payment web where you have to accept every credit card charge. There are no shipping orders. My account has a strong and long password exclusive for that web. Yes, I've changed that again.

I wonder how many scams like those in "legit" proyects are going in Kickstarter actually. Probably they are wondering that, too and trying to do something to avoid that giving bad name to their web.

[Faelrin]

Unfortunately there's only so much companies can do to prevent hackers. It's also why having strong passwords are so important, and to also routinely change them. Even then there's no guarantees, as things like database breaches can and do happen unfortunately. Even government things around the globe routinely get hacked, and one would think those have better protections then things like kickstarter, etc.

In any case I hope you don't feel like any of this is your fault. It just happens sometimes unfortunately, because some people are cruel. I do wonder if there is a way for kickstarter to remove or undo any activity the hacker did such as backing any of those kickstarters (even if failed they sit on your list of pledged things, which can also influence what gets shown to you in the recommended kickstarters).

[TooOldForDinosaurs]

What a nightmare! @Duna Thanks for the warning and I hope you can get the last payment refunded as well. I have been doing that (deleting payment information) for a while now with AliExpress. Never had any problems but I just don't trust the app fully.

[Duna]

Hi all, I finally got my money refunded. It seems the author doesn't want any negative publicity: now my comment is deleted (as I'm not supporting the proyect).
I don't believe any word of him, but that's my personal opinion. When you have credit card data you don't go altruistically funding Kickstarter proyects in deadline.

Just be careful

[Jose S.M.]

I'm glad to hear you got your money back!

[Faelrin]

@Duna Glad to see you got your money back in the end.