I'm writing to make everyone aware of a new credit card scam that depends on DoorDash.
Today I ordered lunch using my DoorDash account, and I was asked to provide a payment methtod. DoorDash has my VISA credit card information on file, so that seemed unusual. However I believed I was using my account, as my picture was displayed, so I just assumed it was a legitimate request.
Turns out, it wasn't. My first clue was when the delivery map displayed, with the order going to somewhere I'd never heard of. So I checked the account details, and my email address was the only item in the account that was actually mine!
So, someone had used just my email address with DoorDash to convince me to enter credit card information, and thus commit credit card fraud that way. It was possible because the email address is the user name. So when they accessed that account, it was someone else's account instead.
I contacted my credit union right away and had that VISA card canceled. It's an inconvenience, but only a small one. I have several other credit cards that I can use if I need to during the 5-7 days it will take to get my replacement card. There are other vendors with my card on file, so those will need to be changed as well, but I can live with that, too. Better that than having my actual credit card details on the dark web.
The moral of this story is, if you try to place an order with a vendor who has your credit card info on file, and you're asked to provide it again, be more suspicious than I was. Check the account details and make really sure that it's YOUR account that's asking. Email addresses are all over the internet, and should not be the only item used as user names, but they often are.
