How to STEAL Nectar Points - and there's nothing you can do about it..
HTML-код
- Опубликовано: 8 сен 2024
- It's been a bit of a funny day, and it's meant this video has been created in a hurry.. But having a load of money stolen from you is a bit wild, and working out how it's been done has shown me there might be a hole in the security of Nectar cards.
Which means, even without having ANY DATA stolen from you, someone can access all your Nectar points. Which I think is what has happened to us..
Would be great to hear from anyone who's been through similar - As an Amazon Associate, I earn from qualifying purchases.
Drop a comment below!
As an Amazon Associate, I earn from qualifying purchases.
Drop a comment below!
Our channel is powered by Hyperoptic fibre broadband - hyperoptic.kip...
If you fancy getting me a coffee go here - www.ko-fi.com/...
Peruse my Wish List here - wishlist.kipha...
Or follow me on Instagram here - / kiphakes or on Facebook here - / kiphakestv 
Игры
The fact there’s no App approval or PIN number for the cards, SMS code authorisation or something…. IS MENTAL.
It seems that the thieves have also figured out that if they perform a number of transactions in quick succession (e.g. in Sainsbury's, an in-store Argos, and the petrol station) then all three will be allowed - even if there are only enough points for the first of them! This results in the account ending up with a negative balance, which should be impossible.
Nectar must be losing a significant amount of money this way: two or three times the points value, the further returned points to the legitimate customer (and, often a goodwill allowance of a further 2000-3000 points). I also worry about where the money is ending up: are the goods obtained with these points being fenced for cash at car boot sales, or the like? That would seem to cause harm outside Nectar's own sphere of interest or concern.
Thank you for making this. I've just discovered that I've lost 12500 points in three transactions on the opposite side of the country! Interestingly this was just after you posted this video but the thieving scumbags clearly "tried" the card first as there are positive transactions before the negative.
That sucks - sorry to hear this happened to you!
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
This is unacceptable. I can’t believe the IT architecture behind this system is so bad. Absolutely amateur. Thanks for sharing this, I’ll keep an eye on my Nectar account regularly from now on.
Yes, how hard can it be to have a system where you Can log into your Nectar app or account online and are able to lock your nectar card and points from being used, and you only unlock it when you want to use it then lock it again?
heard you on Radio 4 today Kip, great stuff covering this. it's an absolute scandal!
Thank you so much x
Wow… just had over 42k in points taken, and Nectar’s response was we will send you a new card and refund those that were taken. Not even a check to see where I was on the day they were taken. The fact it is so easy to get access is crazy, the thief did do a transaction to add some points first and then I guess they can see how much is there on the receipt. So be careful out there it’s a jungle.
I've just had £102.50 stolen today from the other side of the country where I've never been.
Can't even speak to someone today because the lines are closed!
Sorry to hear this has happened to you.. it’s wild how out of control this is!
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
In financial terms, the cost of implementing security costs more (much more) than they are losing.
Needs to be more than just a financial decision.
Well done and thanks. It's like green shield stamps. They cancelled the scheme while we had books and books. Don't save up points, just spend them as you go. And buy the clothing items that have bonus points. Take the clothes back after. They don't want the points back 🎉
Good tip!
So in effect, this could apply to other store loyalty cards too 😮
I am so shocked and to be fair really angry at how easy that is to scam people's points!
Thanks for the heads up!
I don’t know if other loyalty cards allow you to essentially check for a valid number without any identification. But maybe.. yes!
@kiphakes Hopefully others aren't as lax as that.
i have been seeing people selling nectar cards online and even selling the 'method' for outrageous amounts i never knew this is how its been sourced, glad i didn't get myself involved
Can't they have a system where you Can log into your Nectar app or account online and are able to lock your nectar card and points from being used, and you only unlock it when you want to use it then lock it again? So basically the option to use your points is locked by default until you want to spend them.
I had £220 worth of points stolen by a Nectar thief, also two more points thefts took place, points which I hadn’t got🤷🏼♂️figure that one out, my account now reads -43,116. The irony was that when I called the Nectar helpline I was asked all sorts of security questions 😅 pity the security wasn’t there to prevent the fraud. A new card plus points restored is on its way…….until it happens again😕
This is exactly what has happened to me today! I can’t remember a magic word I set up 15 years ago so they won’t deal with my complaint! Anyone know who the ceo is???!
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
I’m dead bro said Hendon that’s just round da corner Ik who spent ya points😂😂😂
Yes thank you for explaining this issue, someone stole my nectar, I called nectar they sent me new card and gave me back all my points, I hope they do something about this now, my new card has my name printed on back. Hope you get your nectar points back also.
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
I was curious and decided to try your method in the video. It doesn't quite work anymore. When you enter a card number, it will allow you to any number but it doesn't throw the error "That card number isn't recognised..". Instead, the final page after registration is "Oops there is a problem creating the account". So it means the card number doesn't exist, or its been registered to account an already. The validation of the number is right at the end, so it definitely slows a scammer down.
To be honest, it's unlikely peoples points are being stolen in this way. It would be a time-consuming process and you would have to be VERY lucky to hit a person with TONS of points. A savvy person should (or would) have their Nectar card registered already. Instead, there must be some data leak/unauthorised access elsewhere, and/or criminals in shops cloning the cards of high-value accounts that aren't registered.
But the chances of finding a card with alot of points on are far more higher near christmas.
I had £80 worth of points stolen this week! Luckily nectar are reimbursing me but this is quite shocking!
This video is filled with people commenting on similar losses - it’s mad!
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
I had £633 worth of points stolen yesterday ! I have contacted the CEO , customer services and the police who are investigating. The security is ridiculous. The thief did 5 transactions stealing all my points in one day and it was not flagged up on the system.
That’s not very good! Amazing that it still happens
Yes I hope to get the points back but either way I will never use nectar again. Terrible security.
Just had £180 stolen. Came across this video through searching online if it was an issue. This is crazy and absolutely loads of people are getting done.
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
Just had 40000 - £200 stolen this morning. Says someone used it at Argos. Reported to nectar but they seem to be clueless.
Yup.. it’s still rife..
4500 points stolen. Probably exactly the way you've just shown. My points were stolen in Tottenham London and I live in Poole. 😞
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
This has just happened to me. Same response from Nectar - so nothing has changed.
Thank u I’m gonna try this. Wish me luck 🍀
I've just had £180 stolen by someone using my Nectar account number in Argos, Liverpool. Shocking. No helpline available until Monday morning. 😞
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
This has happened to me today, just under £200 gone. I had exactly the same response from nectar, the transaction took place in edmington , miles away from where i am. ., but the team are looking into it, apparently!
Sorry to hear that - judging by the comments on this video, it's a big problem, and Nectar know about it!!
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
Yep had all our points spent recently in store in London (we don't live there) and just realised yesterday. £250 worth, but they spent in total nearly £1k in store as the system doesn't update straight away! Shocking. Luckily I'm getting my points back (+2000 for the inconvenience) but Nectar really need to sort this out by changing the whole system ASAP.
Did they take you to a negative amount of points???
500,000 points?
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
my brother had his points stolen last month. and he works for Sainsbury's
Had 19k points taken Sunday 8th June 2023 £198 worth. Same response from necta, and no explanation how it can happen. Lady on local checkout told me they can just take a photo of barcode at the checkouts!!
Incredible that it still happens ! No sign of it stopping
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
It's still happening we lost £80 the other week. My card is registered but they still managed to steal my points 😡😡😡
Maddening!
This doesnt make much sense, to open an account you have to set up your email, the number you are setting has no email on it because its not being used, its an account ready to be set up. Do you really think people are sitting around putting random numbers into site until they happen to come across one with money ? its much more likely the staff in the store notice you had a high balance and cloned your card with your details
My parents nectar cards recently got hacked and over £80 was taken. Absolutely unacceptable
Ahh I’m sorry to hear that. It’s still rife!
I'm really sorry. I work at sainsburys and it's awful seeing customers come to my till hoping to use points, only to discover they're gone. All we can tell them is they need to contact nectar. I hate it.
Thats the problem with all these reward things, they dont count as money which is why they are called points. Im guessing your 'points' were not reimbursed because they arent money , they are just a reward token to exchange for goods. In an ideal world, they would have issued an apology for leaving your account open to theft and reimbursed your points AND set up better security.
Actually they have refunded my point and agreed it was suspicious activity 🤷🏻♂️ and are sending me a new card.
OMG Kip, hope you get refunded. When I get to £2.50 I always cash out LOL. :}
A good way to keep your points safe is to spend them, or convert them to Avios.
Even that is a problem 😉
Great security. Though I was confused a little (no change there), you mentioned that if an account was already registered (as your wife's was) then you would be prompted for login details after the card number was entered. How did the 'stealer' get around that? I understood the making-up-random-numbers part, but, presumably, that wouldn't tell you online how many points were on the account if it was registered, you just take a chance at checkout.
Well if there is a registered account you’re onto a winner because it means someone obviously cares more about their nectar account. So you can just take the number, print a barcode and use the Nectar card. Using the Nectar site is a mechanism to see if a card number is valid / useable- being able to hijack the card via that is a ‘bonus’.
@@kiphakesmessage me direct i can give you more info on how it was done and what else is getting targeted
Does this work with Tesco Club Card?
asking for a friend
I’m not certain it does.. tell your friend that.. obviously
remember the self checkouts has face cams now too
Indeed!! And they’ve always had CCTV pointing directly at them
mask and hair over the face it is lol@@kiphakes
Were you on Radio 4 today? found you on the back of that if it is you.
It was indeed me! Welcome!🙏🏼
Discovered that mine had been spent but they had put me into the minus which I can’t see how. They must be able to override it somehow because it shouldn’t let you spend points you don’t have
So sometimes the system doesn’t update balance immediately..so it is possible to end up with a negative balance
@@kiphakes ah interesting!
@@matthauke how much was taken from your account?
@@kiphakes I think it was all of it - 21500 points - then they repeated that two more times to leave me with -43000
What’s interesting is the day before the same Sainsburys where my points were stolen shows giving me +22 points…
@@matthauke They used your card once 1st because you have to have used any card in a store within the previous 12 months to be able to spend points, then they were able to see how many points you have too on receipt for when they come back the next day to use your points at the store.
ik this is irrelevant but i love that goomba plushie/plush
Haha! Thank you! Came from the Nintendo Store in New York! I love it! 😍
@@kiphakes oh cool, i should probably go to the nintendo store when i go on holiday to NYC
So sorry to her this kip hope y get it back mste take care
Has Sainsbury fixed this problem now
I’ve not tried it since I made this video
I'm here because I just got done talking to Nectar about this exact issue. So no.
nope, i just tested and got a hit first time... really bad account security
yeah nectar fraud is a big issue, what these people will do is buy expensive items like toothbruses or other electrical product in the range of 100 to 200, purchase it at one store with nectar card then go to another and try to get a refund for a gift card or such.
So I just found out that someone has taken my account to -45000 points! So how do they do that???? Nectar customer service are rubbish
The accounts don’t seem to immediately update.. so for a short moment your points aren’t taken off
Lost points worth 50£ found out today 😢
Dreadful isn’t it?
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
I have had £71 worth of points stolen
Hi there.. as a result of this video this is looking like it might become a news story.. ITV are investigating, but need to hear from as many people as possible to build up a picture of how widespread this is.. Please drop yourstory@itv.com an email ASAP!
I can show you how it was really done , all customers were refunded ✌🏼💙
Sure! Tell me!
What about a linked BA Avios account??
Well.. I would probably worry if I had one..
It doesn’t workv😂
ima check with my mum
Wth
Think your exaggerating the likelihood of this succeeding surely?18 million nectar card users and there’s 100,000,000,000 combos with a 11 digit number. Do the maths and it’s a 0.018% of finding a account.
How do you think it’s done? Because judging by the comments here, it’s happening a LOT
@@kiphakesdon’t doubt that some people have used this method but could also be anything from Sainsbury’s workers using the codes to a different leak in the system which is hacked. Just that mathematically it doesn’t make sense for someone to have just guessed your acc number; still agree tho flawed system and should defo be fixed.
So what you're doing here is teaching people how to commit fraud
I’m showing massive hole in Nectars security that nectar know about but haven’t fixed.