Unauthorized payment card appears in safari autofill

I had the same thing appear in my credit card list as China UnionPay Card and I too, was freaking out, because my debit card was used fraudently just a few days ago. However I checked my Ikea Family member card number, it ends in the same 4 digits. I deleted if from the Safari autofill credit cards.

Thanks for the tip and saving me from hours of research.

I had the same problem. A strange JCB credit card, complete with the JCB icon, appeared in Safari as a popup for Autofilling a credit card field on a web form. I have figured it out! The problem is Safari has incorrectly recognized a 16-digit code issued by American Express in their "Plenti" rewards card system, and which I entered in the intro screens as I established my Plenti account online. Safari has incorrectly Autostored this Plenti Card as a JCB Card. Plenti cards are used by numerous retailers (ATT, Exxon, etc, and in my case RiteAid Drug). Apparently the first four digits of my Plenti Card (3104) are reserved to JCB cards, and Safari is just "too smart for its own good" and makes the leap of misjudgment that I have a JCB card. With this being the source of the problem, I simply deleted the card from Safari and dismissed the problem.

Indeed the last four digits under the China UnionPay listing were the same as my IKEA Family account. This has been a horrible experience given the current security risks in the wild. Someone needs to do better stat. Thanks to Google for quickly finding this post. I was not looking forward to a lengthy phone support session with Apple.

Today I joined IKEA Family - they issued me a number.

When I made a purchase, I entered that number so I will get my points.

The keychain asked if it should remember the card, and I automatically hit OK...thinking I will fix it later.

When I went to auto fill the credit card information, the FAMILY card is listed as CHINA UNIONPAY.

Freaked me out at first....but the software was just trying to ID the card number that I had asked it to remember.

No biggie....no hacking....no malware....just my mistake.

Is this an isolated attempt to sign into your account. If it continues you may feel finding an alternative to gmail easier to cope with. As I don't use the service (or trust Google) I am not acquainted with the way they do things ... but it looks fairly authentic.

Have to retire now but in case you are up and able to read a bit more, here are a few notes from highly regarded people in these forums. They may give you guidance.

Viruses, Trojans, Malware - and other aspects of Internet Security: Apple Support Communities This is by Klaus1.

The Safe Mac : Mac Malware Guide This is from the same thomas who answered with one post earlier. Check the notes on the right hand side.

And here is a link to one of the best regarded of ways to find files and folders when you are clearing out your system.

Freeware applications and services for Mac - DEVONtechnologies

Thank you for the stars. Save any more for the final solution.

Avast is not the best regarded program here, but it is better than some. However, if you downloaded it from Softonic's website, you need to get rid of it as soon as you can. This company works hand in glove with some of the worst security Apps you can find.

Clam X AV and Sophos are probably the most generally accepted apps, but as I said, they should not be necessary. I am concerned that gmail have flagged security issues. Via what security system, do you know?

You don't want to keep changing passwords if you can help it and when we know more about where you got Avast from and any others you may have encountered then we may be able to tell you what best to do.

Had the exact same thing here. Have a Visa and MasterCard. Clicked to autofill one of those cards and a third China Union Pay card dropped down that I have never seen. Viewed the iCloud Keychain and it's listed there, but unlike my other saved cards where you can view the card holder's name the card holder is "xxxx". Convenient. And way sketchy. Awesome.

I want to echo other replies here for anyone concerned. I can confirm that my IKEA membership number has been saved as a China UnionPay card.

If you're having this issue and were ever an IKEA customer, search your email for your IKEA customer number and check it against the China UnionPay number showing up in your credit card list. If they match, you shouldn't have anything to worry about.

For what it's worth, I experienced this same issue described by mactrouble101 above. While purchasing an item at the Ikea website, I entered my customer loyalty card, which began with the digits 62. Safari first prompted me to save this card number (which I did), and then logged it in Safari as a China UnionPay card; this is consistent with sparotta's description above.

Suspicious activity in your Gmail account is not an indication that your computer is infected with malware. "Avast" is completely useless, and would be just as useless even if you did have malware.

If you are doubtful you need to satisfy your suspicions; my first enquiries would be to learn something about China UnionPay Card, just dig around.

Then I would go check the Anti Virus system. Macs really don't need such 'help' which in most cases will cause far more damage than a three your old with a hammer. Which one did you buy?

And I would certainly Google Amex and China union to learn more about the tie up. The last thing you need from your credit card is inertia selling. On the other hand China Union is rapidly overtaking Visa as a world number 1 in credit cards so I very much doubt you need be overly concerned.

Tell us more about the Anti Virus program.