We Got Our First Nigerian Scammer
Our office here has an online reservation server so you can book our homes online. We usually get about five or six bookings a day on it, as well as all the bookings we get from people calling us.
Last night we had a $2,000 booking online that the front desk was getting all excited about, until they noticed the card didn't go through. Since I have access to the credit card logs on the server, I looked at the logs and it gave an ugly error code followed by "Hold Card -- Call" which I assume meant that the card was stolen. They tried to call the phone number on the reservation, and it didn't go through (and reverse look-ups didn't show anything). So I started to look a little closer at the reservation, and there were several things that were whacky:So I knew this was obviously a stolen card, and since it was an online transaction, there would be some sort of IP record in my server logs for this guy (and Visa was probably going to ask for it when we call). Since a full online booking with our system only hits a certain page after the booking was completed, it was easy to search the log lines out just by searching for that file name. After matching up the time stamps from the booking with the logs, I come to find out that the booking was made from an IP address in Nigeria.
Needless to say, the booking has been cancelled and our accountant will be calling Visa here shortly. More than likely, the owner of the card was caught up in some phishing scam and gave out their credit card number. Just the same, I do want to make sure whoever did this gets busted (though I do doubt that it will happen).