For the second time since the dawn of the Computer Age, I have been defrauded online. And while neither episode has cost me money, I have paid a price in stress and wasted time.
A couple of nights ago, I was trying to download an App for my iPod touch when my password was rejected time after time, even though I knew I was writing it correctly. The following morning, on a hunch, I checked my online credit-card statement and found three new iTunes transactions, each totaling $40 and change. These certainly weren't mine, so I called my credit-card company, and a fraud squad rep told me the card would be canceled and all copies of it should be shredded. I will get a new card in about a week. Meanwhile, I am being kept busy cancelling all recurring payments with the shredded card, as well as other scheduled payments.
I suspected my password had been breached and tried to call Apple, but got a recording telling me to e-mail the company. The response was relatively quick but awkward, since I had to keep e-mailing back as other questions arose. My iTunes account was temporarily suspended and the Apple rep informed me that someone had changed both my password and e-mail address. She wrote, "I urge you to contact your financial institution as soon as possible to inquire about canceling the card or account and removing the unauthorized transactions. You should also ask them to launch an investigation into the security of your account. Your bank or credit card company's fraud department should then contact the iTunes Store to resolve this issue. The iTunes Store cannot reverse the charges." That sounded to me as though the credit-card company has to do most of the work, but what do I know.