MTA*NYCT PAYGO RECOVER

Question

Level 1

8 points

MTA*NYCT PAYGO RECOVER

Has anyone else seen NYC MTA attempt to charge Apple Pay when you weren't using the subway? I see an attempted charge on my Apple Cash card (which has no balance) from the middle of the night. One hour of my life lost this morning to three poorly-trained Apple support representatives telling me different things - including that someone could have logged into my Apple ID on their own device and downloaded my Apple Cash card onto their device - and all without Apple ever having notified me on my own devices, despite 2FA.

I'm trusting that isn't true - because if it is, someone needs to call the NYT and expose Apple's gross negligence and I need to get rid of every apple device and get my data out of their system. I believe this is necessary however, since Apple throws warnings and notifications at me if I so much as use a different browser on my own device. I was told by one representative that I should change every one of my passwords because of this incident and check with my banks. There is no limit to how much of someone's time an incompetent person is willing to waste.

Then I see an old thread in this community that there appears to be an issue that's impacted > 1000 people who clicked "me too" with async charges or charge attempts by that name. Yet apple support seems to know nothing about it?!

Well, I'm glad the community exists -- but it's really sad to see Apple ignoring such feedback and such poor training for apple support - INCLUDING supervisors.

Posted on Mar 17, 2023 7:10 AM

Reply

Answer 1

Kurt Lang

Level 9

68,490 points

Mar 17, 2023 7:20 AM in response to sknyc

Knowing both your Apple ID and password, and knowing the answers to your 2FA questions is far beyond any chance of luck of guessing all three.

Someone already knew these and logged into your account from another device. There's no reason for Apple to flag it when all of the information is correct. Though even then, you should have gotten a notice that a new device had logged into your account. And it sounds like you did:

since Apple throws warnings and notifications at me if I so much as use a different browser on my own device.

But there's a way around even that. Software exists for Windows that allows a person to directly access your account on Apple's servers. But they still need to know your credentials. However, you did (apparently) get notifications of access to your account, so this one is unlikely.

Somewhere, somehow, another person got hold of your credentials. That would have to be a relative, friend, co-worker, etc. No one could possibly guess all three without being locked out after five attempts.

Reply