Following the https://news.ycombinator.com/item?id=40916260 Evolve Bank and Trust breach, in a few days my Mercury.com Business card was fraudulently charged by Noon.com, Vodafone UK, and Prezzee for close to US$4,000. We have initiated disputes, but so far in over a week Mercury's response was "are you sure it was a single user card?". The charges are in different currencies, certainly to different addresses, so I guess the fraud prevention at Mercury/Evolve is very weak. Mercury also failed to notify me about a failed $300 transaction a day before the hack. If I saw that in time I would have frozen the cards.
It is the first time in my life my card data was somehow stolen and used successfully.
Both Noon.com, Vodafone, and Prezzee's support were entirely unhelpful. I'm not sure what to do next besides moving to an EU bank with transaction OTP.
Please be vigilant and freeze your Mercury cards.
0