Maximise your Avios, air miles and hotel points

Has the Lloyds Avios Rewards credit card suffered a major data breach?

Links on Head for Points may support the site by paying a commission.  See here for all partner links.

There were many reports on Head for Points yesterday, in the comments, from readers who have seen fake transactions appearing on their Lloyds Avios Rewards credit cards.  It appears that there has been a major attack of card fraud on the Lloyds Avios product.

A Flyertalk poster picked up the comments on here and mentioned it on that site, and there were more reported issues.

There has been no official statement from Lloyds, it seems, which is odd.  If they have been trying to keep it quiet, it is now very much out of the bag.

If you have the Lloyds Avios credit cards, I strongly suggest you check your online statement immediately for potential fraudulent transactions.

Here are a few of the comments:

Via HfP readers:

“About a week ago my wife’s Lloyds Avios Amex card was used fraudulently by someone over in New York for a few different things so we called Lloyds to talk about this and get the card cancelled and a replacement sent out. Logged into her account yesterday to find that my supplementary Amex was also used fraudulently earlier this week, also in New York. As my card has been sitting in a drawer at home and my wife’s has been in her purse the whole time, certainly haven’t been nicked and cloned or anything like that.

When speaking to Lloyds last night, they said that they were currently getting thousands of calls a day as they were seeing a lot of fraud on specifically the Amex cards people had, with the vast majority of the activity being contactless transactions in the US (the one on my card was for $100 at a drug store).

Therefore it might be worth checking your accounts in you have those cards (or perhaps others) and haven’t done so recently just to make sure nothing dodgy going on. The guy we spoke to said that clearly there had been some issue somewhere but given the large quantity of it going on, it was clearly an issue somewhere else and not with us – slightly happy but obviously also concerning there’s a significant issue somewhere else in the system! Certainly explains why it took 25 minutes to get through to their fraud team…”

“I also had two cases of fraud on my Lloyds Amex in the US. Taken off no problem but annoying.”

“I got a text from Lloyds over the weekend asking if I was trying to pay for something in Albertson? As I’d never heard of the place I texted back no. Checked my account and there were six transactions all in New York State I didn’t recognise. Two in Office Depot, one in Babiesrus. Called Lloyds and all removed no problem but it did make me wonder how the card had been cloned, I really use it infrequently.”

“I had to ring them last night as I had a fraudulent transaction appear in my pending transactions. They need to wait until it clears to refund it. Apparently there were a few more attempts that were declined. It does look like there has been a serious breach of security somewhere.”

“I have the Lloyds Amex and mine was also used fraudulently in the USA last week! Very annoying as I’m out of the UK in Japan and Australia for a month and was planning to use it a lot!”

“My Lloyds Amex was used fraudulently to pay some car parking charges in the US. I think there is a huge data breach here with Lloyds – just hope they only lost card numbers and not all of our personal information. I spent two hours on the phone with Lloyds this week trying to sort it, they were blaming Amex for it, until I said I’d call Amex directly and ask, then they changed their mind.”

“Same for me – queued for 45 mins on Saturday afternoon to speak to the fraud team after my card was declined – there was an attempted US transaction on there. And spoke to a colleague this week with the Lloyds Avios Amex whose card had also stopped working. There’s clearly been a massive leak somewhere…”

“Lloyds Amex – four transactions in California, last weekend, before I spotted and got the card cancelled. No issue with the MasterCard…”

“In my case it was Lloyds Mastercard which was used for fraud transactions. 6 attempts and also for luxury shopping bags purchase through online. I have cancelled the card. Looks like a major data breach from Lloyds side and they are staying silent which is suprising, no communication to customer to be vigilant.”

“Exactly the same thing happened to both me and my partner this week with the Amex card! Mine was used in a California petrol station last Tuesday and then two days later she had her card (separate accounts) used in Chicago!! I think it must be a data breach.”

“Have to say me too! 2 days ago $105 at Staples in the US (California) as a contactless transaction on the AMEX. I’ve never put this card onto Paypal so can’t be them, suspect leak from lloyds/amex themselves due to the number of issues. They did mention on the phone also to me that they’ve seen loads of these over the past week.”

“Me too! Mine in Bakersfield, California. Foot Locker, Kohl’s…”

“+1 to the Lloyds Amex fraud. I had a transaction from Office Depot in California – a contactless payment of USD 105 (didn’t even know that a contactless payment could even be for so much). Appears to be a huge data breach here! Called the Lloyds Fraud team and they are credited the transaction. Amex has been blocked and will be re-issued. MC not affected apparently.”

“Interesting to hear of this! My Lloyds AmEx got stopped. I called them and the customer rep started nattering something about “big customer data breach with AmEx” and also something about PayPal. I tried to press him for more details but he sounded either clueless or evasive”

“Whoa this seems like a widespread issue. I thought the two fraudulent transactions on my Lloyds Amex was because I’d recently booked holiday stuff (flights/tours) on Bolivian and Vietnamese websites and thought maybe some of the sites weren’t secured. At the end of October my card was used twice on the same day – one for a transaction with Massachusetts Bay Transportation Authority and another at a grocery store in Anaheim, CA.”

“My BA Amex was used fraudently 7 times in California earlier this week: FedEx, Target, T-Mobile for £800. Got a refund two days later. Impressed by Amex quick response to this annoying situation.”

“Its certainly not a case of card cloning in the sense that someone is copying a card you have handed over, my card has never been used and never left the house!  Attempted fraud took place in USA. I did think someone had cracked the amex code for generating card numbers and then getting lucky with card numbers that were active, but some of the comments say the fraud was taking place using contactless, so dunno. More like a big data breach – i guess in about 6 months time Lloyds will admit it. The reason my amex card was new and hadn’t been used was that it was a replacement for an old card that had also been stopped!!!!”

“I’ve had 4 transactions also in California on my Lloyds AmEx and none on the Mastercard in the last week. All small amounts (i.e sub $30).”

“..and another one – Jeez! My card was used twice in a USA sports goods store about 3 weeks ago. I’d only had the card for about a month. Again it was the Amex, they replaced the Amex card, said that the MC was not compromised. Interestingly, the transactions showed as “magnetic stripe” on the Lloyds app – all my uses had been chip and pin or contactless, so it seems that someone has copied the mag stripe.”

“And another one here. 45 mins on hold and they’ve removed the transactions.  Lloyds really need to make a statement on this. I really don’t trust them now.”

Via Flyertalk readers:

“Lloyds blocked my Amex card, but didn’t tell me about it until I rang them up.”

“Just adding a “Me Too” – the pattern seems to be US-based transactions within the last week or so, usually totalling no more than a couple of hundred dollars.  Given how many of us seem to have fallen victim at the same time, this seems like a massive data breach at either Lloyds or Amex…”

“Last weekend I tried to use the Avios Mastercard and it didn’t work, but the Amex worked at another store 10 mins later so I thought maybe the merchant had a broken card machine. Then I tried to use it 2 days ago and it didn’t work. I called Lloyds and they said they saw fraud and wanted to cancel the Amex but not the Mastercard! They said it was ‘some paypal partner’ that put a charge on the card and it got rejected. ( again nothing suspicious on my statement). When I said that I heard other card members were also affected, they said ‘we do not know about that.’ By this time I had had enough and told them to cancel and reissue both Avios cards, they are on the way to the address, so should get them soon (can already see them on internet banking).”

“This happened to me too. I’ve never used my Lloyds Amex card – I only use the Mastercard as I have a BA Amex card. Phoning them up cleared things up, but I had to wait on hold for 40 minutes to get through.  Two transactions on my statement: Toys ‘R’ Us and Best Buy, and both were in-store with a magnetic stripe. Impressive seeing as the card has never left my house since it came out of its envelope. This must be a hack or an internal security breach that they’ve not made public.”

As I said above, you should take a couple of minutes today to check your online statement and ensure that there is no evidence of card fraud on your Lloyds Avios Rewards credit card.


Want to earn more points from credit cards? – April 2024 update

If you are looking to apply for a new credit card, here are our top recommendations based on the current sign-up bonuses.

In February 2022, Barclaycard launched two exciting new Barclaycard Avios Mastercard cards with a bonus of up to 25,000 Avios. You can apply here.

You qualify for the bonus on these cards even if you have a British Airways American Express card:

Barclaycard Avios Plus card

Barclaycard Avios Plus Mastercard

Get 25,000 Avios for signing up and an upgrade voucher at £10,000 Read our full review

Barclaycard Avios card

Barclaycard Avios Mastercard

5,000 Avios for signing up and an upgrade voucher at £20,000 Read our full review

You can see our full directory of all UK cards which earn airline or hotel points here. Here are the best of the other deals currently available.

British Airways American Express Premium Plus

25,000 Avios and the famous annual 2-4-1 voucher Read our full review

American Express Preferred Rewards Gold

Your best beginner’s card – 20,000 points, FREE for a year & four airport lounge passes Read our full review

The Platinum Card from American Express

40,000 bonus points and a huge range of valuable benefits – for a fee Read our full review

Virgin Atlantic Reward+ Mastercard

15,000 bonus points and 1.5 points for every £1 you spend Read our full review

Earning miles and points from small business cards

If you are a sole trader or run a small company, you may also want to check out these offers:

British Airways Accelerating Business American Express

30,000 Avios sign-up bonus – plus annual bonuses of up to 30,000 Avios Read our full review

American Express Business Platinum

40,000 points sign-up bonus and an annual £200 Amex Travel credit Read our full review

American Express Business Gold

20,000 points sign-up bonus and FREE for a year Read our full review

Capital on Tap Business Rewards Visa

Huge 30,000 points bonus until 12th May 2024 Read our full review

For a non-American Express option, we also recommend the Barclaycard Select Cashback card for sole traders and small businesses. It is FREE and you receive 1% cashback on your spending.

Barclaycard Select Cashback Business Credit Card

1% cashback uncapped* on all your business spending (T&C apply) Read our full review

Comments (156)

This article is closed to new comments. Feel free to ask your question in the HfP forums.

  • Ironbark says:

    I, too, noticed a charge for $100, contactless, in California. I assumed my husband had bought something online, I guess not now. Better give them a call, thanks for the tip.

  • JP says:

    Exactly same thing happened to me on my Lloyd Avios AMEX. 3 transactions in California. Had to ring up and get the card stopped. I thought it was just me until I read this this morning!

  • AB says:

    Happened to me 2 weeks ago – on the Amex card that was last used in the US in March 2016 ,The Mastercard on the same account was unaffected.

    2 transactions promptly refunded and new card issued quickly, but odd it took so long if it was a clone . Lloyd’s hinted on my call that sometimes batches of cloned cards are traded en bloc

  • Ruth Findlay says:

    That’s a worry. My account seems ok but I did get a missed call yesterday from a number which seems to be Lloyds.

  • Mark West says:

    Yes, this has happeded to me… equivalent to about £500 pounds spent at JC Pennies, various Gas stations and sports clothing stores. To give them credit, Lloyds called me before I had noticed. It was the supplimentary card holder card (which has never seen the light of day and was locked away, sticker still in place, at home!), however as my travel generally takes me to places which are considered fraud hot-spots I figured that I had perhaps left a statement (which are forwarded to me through company mail when I amaway for longer periods) inadvertently unshredded and took blamed myself. Only after reading this article did I have any idea that it was a substantial breach. There has been no further suspicous activity since the cards were cancelled and replaced.

  • Yuff says:

    My card is fine, but as I posted last week I was extremely surprised when a 4 figure contactless payment, went through, on my Lloyd’s Amex in Spain. I thought the limit was £30 !!!!!!!!
    That cannot be safe!!!!

    • testpie says:

      Had similar before – buying eight £10 Gift Cards in Wetherspoons, lass behind the till wanted them all done separately for some reason. Three taps later I’m thinking the fourth will fail and I’ll have to enter a PIN; eight taps later and I realise Amex ExpressPay doesn’t seem to have a daily limit of any kind.

  • PaulW says:

    And mine! Two contactless swipe payment on amex in California spotted by lloyds and card changed. Something going on as their fraud hotline had and hour plus queue!

  • Jonathan says:

    Does anyone else find it very odd that this has manafested in lots of individual contactless payments seemingly on both east and West Coast of the U.S.?

    If you extrapolate away from this readership there must be thousands of individual fraudulent transactions.

    Were these really physical transactions in stores? If so surely that would need 50+ people to do it on this scale, unless of course you’re putting all the charges through your own dodgy contactless machine and are siphoning away the proceeds.

    I just don’t see how this would work. Perhaps naively I presume there’s not an active market of the number of people seemingly needed on hand at a moments notice in the U.S. to buy and start using these cloned card details.

    • Jonathan says:

      Clearly from the comments different stores. Perhaps there is a sufficiently deep market of people prepared to use these cloned cards.

This article is closed to new comments. Feel free to ask your question in the HfP forums.

The UK's biggest frequent flyer website uses cookies, which you can block via your browser settings. Continuing implies your consent to this policy. Our privacy policy is here.