Has the Lloyds Avios Rewards credit card suffered a major data breach?

There were many reports on Head for Points yesterday, in the comments, from readers who have seen fake transactions appearing on their Lloyds Avios Rewards credit cards.  It appears that there has been a major attack of card fraud on the Lloyds Avios product.

A Flyertalk poster picked up the comments on here and mentioned it on that site, and there were more reported issues.

There has been no official statement from Lloyds, it seems, which is odd.  If they have been trying to keep it quiet, it is now very much out of the bag.

If you have the Lloyds Avios credit cards, I strongly suggest you check your online statement immediately for potential fraudulent transactions.

Lloyds Avios Rewards card fraud

Here are a few of the comments:

Via HFP readers:

“About a week ago my wife’s Lloyds Avios Amex card was used fraudulently by someone over in New York for a few different things so we called Lloyds to talk about this and get the card cancelled and a replacement sent out. Logged into her account yesterday to find that my supplementary Amex was also used fraudulently earlier this week, also in New York. As my card has been sitting in a drawer at home and my wife’s has been in her purse the whole time, certainly haven’t been nicked and cloned or anything like that.

When speaking to Lloyds last night, they said that they were currently getting thousands of calls a day as they were seeing a lot of fraud on specifically the Amex cards people had, with the vast majority of the activity being contactless transactions in the US (the one on my card was for $100 at a drug store).

Therefore it might be worth checking your accounts in you have those cards (or perhaps others) and haven’t done so recently just to make sure nothing dodgy going on. The guy we spoke to said that clearly there had been some issue somewhere but given the large quantity of it going on, it was clearly an issue somewhere else and not with us – slightly happy but obviously also concerning there’s a significant issue somewhere else in the system! Certainly explains why it took 25 minutes to get through to their fraud team…”

“I also had two cases of fraud on my Lloyds Amex in the US. Taken off no problem but annoying.”

“I got a text from Lloyds over the weekend asking if I was trying to pay for something in Albertson? As I’d never heard of the place I texted back no. Checked my account and there were six transactions all in New York State I didn’t recognise. Two in Office Depot, one in Babiesrus. Called Lloyds and all removed no problem but it did make me wonder how the card had been cloned, I really use it infrequently.”

“I had to ring them last night as I had a fraudulent transaction appear in my pending transactions. They need to wait until it clears to refund it. Apparently there were a few more attempts that were declined. It does look like there has been a serious breach of security somewhere.”

“I have the Lloyds Amex and mine was also used fraudulently in the USA last week! Very annoying as I’m out of the UK in Japan and Australia for a month and was planning to use it a lot!”

“My Lloyds Amex was used fraudulently to pay some car parking charges in the US. I think there is a huge data breach here with Lloyds – just hope they only lost card numbers and not all of our personal information. I spent two hours on the phone with Lloyds this week trying to sort it, they were blaming Amex for it, until I said I’d call Amex directly and ask, then they changed their mind.”

“Same for me – queued for 45 mins on Saturday afternoon to speak to the fraud team after my card was declined – there was an attempted US transaction on there. And spoke to a colleague this week with the Lloyds Avios Amex whose card had also stopped working. There’s clearly been a massive leak somewhere…”

“Lloyds Amex – four transactions in California, last weekend, before I spotted and got the card cancelled. No issue with the MasterCard…”

“In my case it was Lloyds MasterCard which was used for fraud transactions. 6 attempts and also for luxury shopping bags purchase through online. I have cancelled the card. Looks like a major data breach from Lloyds side and they are staying silent which is suprising, no communication to customer to be vigilant.”

“Exactly the same thing happened to both me and my partner this week with the Amex card! Mine was used in a California petrol station last Tuesday and then two days later she had her card (separate accounts) used in Chicago!! I think it must be a data breach.”

“Have to say me too! 2 days ago $105 at Staples in the US (California) as a contactless transaction on the AMEX. I’ve never put this card onto Paypal so can’t be them, suspect leak from lloyds/amex themselves due to the number of issues. They did mention on the phone also to me that they’ve seen loads of these over the past week.”

“Me too! Mine in Bakersfield, California. Foot Locker, Kohl’s…”

“+1 to the Lloyds Amex fraud. I had a transaction from Office Depot in California – a contactless payment of USD 105 (didn’t even know that a contactless payment could even be for so much). Appears to be a huge data breach here! Called the Lloyds Fraud team and they are credited the transaction. Amex has been blocked and will be re-issued. MC not affected apparently.”

“Interesting to hear of this! My Lloyds AmEx got stopped. I called them and the customer rep started nattering something about “big customer data breach with AmEx” and also something about PayPal. I tried to press him for more details but he sounded either clueless or evasive”

“Whoa this seems like a widespread issue. I thought the two fraudulent transactions on my Lloyds Amex was because I’d recently booked holiday stuff (flights/tours) on Bolivian and Vietnamese websites and thought maybe some of the sites weren’t secured. At the end of October my card was used twice on the same day – one for a transaction with Massachusetts Bay Transportation Authority and another at a grocery store in Anaheim, CA.”

“My BA Amex was used fraudently 7 times in California earlier this week: FedEx, Target, T-Mobile for £800. Got a refund two days later. Impressed by Amex quick response to this annoying situation.”

“Its certainly not a case of card cloning in the sense that someone is copying a card you have handed over, my card has never been used and never left the house!  Attempted fraud took place in USA. I did think someone had cracked the amex code for generating card numbers and then getting lucky with card numbers that were active, but some of the comments say the fraud was taking place using contactless, so dunno. More like a big data breach – i guess in about 6 months time Lloyds will admit it. The reason my amex card was new and hadn’t been used was that it was a replacement for an old card that had also been stopped!!!!”

“I’ve had 4 transactions also in California on my Lloyds AmEx and none on the MasterCard in the last week. All small amounts (i.e sub $30).”

“..and another one – Jeez! My card was used twice in a USA sports goods store about 3 weeks ago. I’d only had the card for about a month. Again it was the Amex, they replaced the Amex card, said that the MC was not compromised. Interestingly, the transactions showed as “magnetic stripe” on the Lloyds app – all my uses had been chip and pin or contactless, so it seems that someone has copied the mag stripe.”

“And another one here. 45 mins on hold and they’ve removed the transactions.  Lloyds really need to make a statement on this. I really don’t trust them now.”

Via Flyertalk readers:

“Lloyds blocked my Amex card, but didn’t tell me about it until I rang them up.”

“Just adding a “Me Too” – the pattern seems to be US-based transactions within the last week or so, usually totalling no more than a couple of hundred dollars.  Given how many of us seem to have fallen victim at the same time, this seems like a massive data breach at either Lloyds or Amex…”

“Last weekend I tried to use the Avios Mastercard and it didn’t work, but the Amex worked at another store 10 mins later so I thought maybe the merchant had a broken card machine. Then I tried to use it 2 days ago and it didn’t work. I called Lloyds and they said they saw fraud and wanted to cancel the Amex but not the Mastercard! They said it was ‘some paypal partner’ that put a charge on the card and it got rejected. ( again nothing suspicious on my statement). When I said that I heard other card members were also affected, they said ‘we do not know about that.’ By this time I had had enough and told them to cancel and reissue both Avios cards, they are on the way to the address, so should get them soon (can already see them on internet banking).”

“This happened to me too. I’ve never used my Lloyds Amex card – I only use the Mastercard as I have a BA Amex card. Phoning them up cleared things up, but I had to wait on hold for 40 minutes to get through.  Two transactions on my statement: Toys ‘R’ Us and Best Buy, and both were in-store with a magnetic stripe. Impressive seeing as the card has never left my house since it came out of its envelope. This must be a hack or an internal security breach that they’ve not made public.”

As I said above, you should take a couple of minutes today to check your online statement and ensure that there is no evidence of card fraud on your Lloyds Avios Rewards credit card.
Bits: £119 Park Plaza London deal, Virgin Clubhouse in LA joins Priority Pass
Bits: double Avios on Kaligo hotel bookings, Hyatt double points promo, last day for 'buy Avios' bonus
About Head for Points

We help business and leisure travellers maximise their Avios, frequent flyer miles and hotel loyalty points. Visit every day for three new articles or sign up for our FREE emails via this page or the box to your right.

Comments

  1. Wondering if there could be any link with age of account/when card was issued? I’ve had my card for years and (so far at least) am unaffected. Friends that have been affected all got their cards in the past year or so…

  2. Richard Jackson says:

    I had my card cancelled by Lloyds – and they didn’t bother to tell me. Tried to use it to buy a couple of margaritas and had it declined. Phone them the next day – and they deign to let me know they’ve cancelled it and will send a new one within 5 working days.

    The ability to earn avios on foreign spend with no transaction fees is excellent, so I certainly won’t be choosing to move my business elsewhere.

    • Richard Jackson says:

      Quick update – I complained to Lloyds and requested that they refund the £24 annual fee as a gesture of goodwill. They phoned me the next day and offered me c. £100 compensation. My new card has since arrived. I’m quite impressed with the response.

      • Would you tell me please which number you phoned in Lloyds, as they assure me that no money has been paid as compensation to customers when I asked to be treated similarly.

  3. I got the Lloyds Choice Rewards Amex card which is also affected, Lloyds is taking ages to process the refunds and the new card keeps getting declined randomly..

  4. Steve Smith says:

    I have been hacked on my LLoyds Choice reward Amex. They informed me I can still use the MasterCard but closed my Amex and sent me a new one. Will see if I suffer the same as Peter did