Consumer complaint received 2023-11-13
Product: Credit card — General-purpose credit card or charge card
Issue: Problem with a purchase shown on your statement — Card was charged for something you did not purchase with the card
Company: TD BANK US HOLDING COMPANY (VA)

On XX/XX/2023, I was using my personal XXXX laptop and unexpectedly received a popup prompting me to enter my XXXX XXXX password. At that time, that popup seemed harmless indicating some issue with my XXXX XXXX password. So, I clicked cancel multiple times until it disappeared ( it took at least 10 tries for that to happen ). However, a few hours later, that same popup reappeared. After doing research on XXXX about this popup, others indicated that entering the password in the popup is needed to resync my XXXX account. So, I entered my password and the popup did not appear again and did not notice anything unusual. 
The following morning, I logged into my XXXX XXXX and XXXX accounts and, to my surprise, I noticed that my points balance was significantly reduced. So, after researching further, I discovered that under my XXXX account there were tons of activity and someone was able to purchase digital gift cards with my connected credit card accounts using points which does not require any additional authentication ( another major security issue ) as well as the credit cards saved on my XXXX profile. 
At that point, I spent hours on the phone with XXXX, XXXX XXXX and XXXX explaining the situation to prevent any more damage to my online accounts and credit cards. The only way someone could have accessed all these accounts is if they had access to my master XXXX password vault which was compromised when | entered it on the popup that I mentioned earlier. To further explain, my XXXX XXXX account contains not only the passwords/credential information but also full credit card information ( numbers, expirations and CVV ) as this is a security feature offered by XXXX XXXX to sign into websites and use save credit card numbers for shopping online. 
At that same time, | went ahead and changed all my passwords to the affected websites that! became aware of at the time ( XXXX, XXXX and XXXX ), removed alt linked payments and was in continuous contact with XXXX as well as XXXX and XXXX XXXX about the situation. 
Eventually, XXXX, XXXX XXXX and XXXX investigated the transactions and refunded back all my points and unauthorized charges. It was not until XX/XX/2023 when noticed a {$1400.00} payment withdrawn from my checking account for my Target Mastercard credit card that | did not recognize. I have Autopay on all my credit cards to pay the Full Balance. So, when | looked at my Target.com account, I was shocked to see multiple orders listed using my Target same time the above fraudulent activity occurred. So, I contacted Target Mastercard support well as the Target gift card support to report the fraudulent transactions. My Target.com account has a total of 16 online orders for digital gift cards, 10 of which were canceled due to technical error which to me indicates something seriously wrong with all these transactions and my account. 

Here are the Fraudulent Target.com transactions and amounts I was charged for : XX/XX/XXXX TARGET.COM {$470.00} XX/XX/XXXX TARGET.COM {$95.00} XX/XX/XXXX TARGET.COM {$230.00} XX/XX/XXXX TARGET.COM {$230.00} XX/XX/XXXX TARGET.COM {$200.00} XX/XX/XXXX TARGET.COM {$200.00} I reached out to Target Fraud department multiple times and I am always told that we can not discuss this over the phone and I should have received a letter. However, I never receive these letters and every time I speak to someone I am never given satisfactory answers. I have always been transparent with the Credit Card company and spent many hours to collect documentation related. I also went to the Police and also filed an Identity Theft claim. 

I have attached all the documentation I have collected as PDFs and I have sent that to Target Fraud Department.