Maximise your Avios, air miles and hotel points

Why the Lloyds Avios Amex fraud happened (probably)

Links on Head for Points may pay us an affiliate commission. A list of partners is here.

As a follow-up to my recent articles on the major fraud in the US on Lloyds Avios Rewards American Express cards, I was contacted last week by a reader who works in the credit card industry on the fraud side who explained how he believed it had happened.

You may remember that Lloyds Bank claimed to be the innocent party in all this.  The line given to the media, including me, was that there had been a data breach somewhere on the American Express side.

This had a funny smell to it, as I said to all of the journalists who contacted me.  The fraudsters had made fully working American Express credit cards.  I found it unlikely, to put it mildly, that you could make a fully working plastic Amex card just from knowing the card number.

Lloyds Avios American Express card fraud

The reader thought that Lloyds Bank does not appear to have implemented two important security features on its credit cards.  Firstly, he believes that the Lloyds Bank / Amex processing system does not verify most of the key card information, including the expiry date, before transactions are approved.  The net result of this is that you only need the credit card number in order to manufacture a fake Lloyds Bank American Express credit card.  As the first six digits of Lloyds Bank American Express cards appear to be the same for all cards, it is easier to churn through various permutations to find working numbers even if there was no data breach.

In addition, the reader believes that Lloyds does not appear to match the data from the card terminal (which tells Lloyds whether a transaction is chip, swipe or a contactless tap) with the security data used for verification.  If this was right, it would mean that it would accept the lower level of verification required for contactless transactions – and this is low level verification because contactless fraud is virtually impossible – even when the transaction was not contactless.  It is apparently possible to overwrite the magnetic strip on a real credit card (issuer and card number immaterial) with the lower level of data required to validate a contactless transaction which would be charged to a Lloyds Avios Amex account.

I should stress that we don’t know if any of the above is actually true, but the hypothesis does appear to fit the known facts in this case.


Want to earn more points from credit cards? – December 2020 update

If you are looking to apply for a new credit or charge card, here are our December 2020 recommendations based on the current sign-up bonus

You can see our full directory of all UK cards which earn airline or hotel points here.

British Airways American Express card

British Airways American Express

5,000 Avios for signing up, no annual and a companion voucher for spending £20,000 Read our full review

BA Premium Plus American Express card BAPP

British Airways American Express Premium Plus

25,000 Avios and the UK’s most valuable credit card perk – the 2-4-1 companion voucher Read our full review

Nectar American Express

American Express Preferred Rewards Gold

Your best beginner’s card – 20,000 points, FREE for a year & two airport lounge passes Read our full review

American Express Platinum card Amex

The Platinum Card from American Express

30,000 points and an unbeatable set of travel benefits – for a fee Read our full review

Virgin Rewards Plus credit card

Virgin Atlantic Reward+ Mastercard

15,000 points bonus and the most generous non-Amex for day to day spending Read our full review

Earning miles and points from small business cards

If you are a sole trader or run a small company, you may also want to check out these:

American Express Business Gold card

American Express Business Gold

20,000 points sign-up bonus and free for a year Read our full review

Amex Platinum Business American Express

American Express Business Platinum

40,000 points sign-up bonus and a long list of travel benefits Read our full review

British Airways Accelerating Business American Express card

British Airways Accelerating Business American Express

Earn both Avios and BA On Business points with your business spending Read our full review

Capital On Tap Business Rewards Visa

The most generous Avios Visa or Mastercard for a limited company Read our full review

Disclaimer: Head for Points is a journalistic website. Nothing here should be construed as financial advice, and it is your own responsibility to ensure that any product is right for your circumstances. Recommendations are based primarily on the ability to earn miles and points and do not consider interest rates, service levels or any impact on your credit history.  By recommending credit cards on this site, I am – technically – acting as a credit broker.  Robert Burgess, trading as Head for Points, is regulated and authorised by the Financial Conduct Authority to act as a credit broker.

Comments (106)

  • johnny_c-l says:

    On the Zeek offer they have various Amazon vouchers @ 1/2% discount so these are now valid for the free £5 when spending £50 offer. Picked up a few of these earlier on today.

  • Bctraveler says:

    Good luck with the maple leaf club and star alliance access… i was dnied at no less than 6 star alliance lounges with m maple leaf lunge card. All AC said was sorry. 700 dollars of sorry

    • Alex Sm says:

      Actually, their own lounges are of little value too. I recently did a lounge crawl at Heathrow T2B cluster – United was 5* with great ambience, cocktails and food, Singapore was ok (the downside was it was too crowded as it was just before a packed A380 flight, perhaps at quieter times it will look better, but AC was unevenful and the mixer drinks they offered were from Waitrose Essential range. Waitrose Essential for premium travellers, Carl!

  • signol says:

    I now buy Amazon gift cards at Morrisons, to get their points. Works out at a few % back.