Unauthorized payment card appears in safari autofill

Indeed the last four digits under the China UnionPay listing were the same as my IKEA Family account. This has been a horrible experience given the current security risks in the wild. Someone needs to do better stat. Thanks to Google for quickly finding this post. I was not looking forward to a lengthy phone support session with Apple.

I had the same thing appear in my credit card list as China UnionPay Card and I too, was freaking out, because my debit card was used fraudently just a few days ago. However I checked my Ikea Family member card number, it ends in the same 4 digits. I deleted if from the Safari autofill credit cards.

Thanks for the tip and saving me from hours of research.

If you are doubtful you need to satisfy your suspicions; my first enquiries would be to learn something about China UnionPay Card, just dig around.

Then I would go check the Anti Virus system. Macs really don't need such 'help' which in most cases will cause far more damage than a three your old with a hammer. Which one did you buy?

And I would certainly Google Amex and China union to learn more about the tie up. The last thing you need from your credit card is inertia selling. On the other hand China Union is rapidly overtaking Visa as a world number 1 in credit cards so I very much doubt you need be overly concerned.

Tell us more about the Anti Virus program.

Avast is not the best regarded program here, but it is better than some. However, if you downloaded it from Softonic's website, you need to get rid of it as soon as you can. This company works hand in glove with some of the worst security Apps you can find.

Clam X AV and Sophos are probably the most generally accepted apps, but as I said, they should not be necessary. I am concerned that gmail have flagged security issues. Via what security system, do you know?

You don't want to keep changing passwords if you can help it and when we know more about where you got Avast from and any others you may have encountered then we may be able to tell you what best to do.

Is this an isolated attempt to sign into your account. If it continues you may feel finding an alternative to gmail easier to cope with. As I don't use the service (or trust Google) I am not acquainted with the way they do things ... but it looks fairly authentic.

Have to retire now but in case you are up and able to read a bit more, here are a few notes from highly regarded people in these forums. They may give you guidance.

Viruses, Trojans, Malware - and other aspects of Internet Security: Apple Support Communities This is by Klaus1.

The Safe Mac : Mac Malware Guide This is from the same thomas who answered with one post earlier. Check the notes on the right hand side.

And here is a link to one of the best regarded of ways to find files and folders when you are clearing out your system.

Freeware applications and services for Mac - DEVONtechnologies

Thank you for the stars. Save any more for the final solution.

Suspicious activity in your Gmail account is not an indication that your computer is infected with malware. "Avast" is completely useless, and would be just as useless even if you did have malware.

Where exactly do you see this payment card -- in your iCloud keychain? If so, do you synchronize that keychain with other devices? Do you know who might have had access to any of them?

If you have ever entered your iCloud password (or any other password) on a computer that isn't yours, then you should consider everything linked to that password compromised and act accordingly.

Had the exact same thing here. Have a Visa and MasterCard. Clicked to autofill one of those cards and a third China Union Pay card dropped down that I have never seen. Viewed the iCloud Keychain and it's listed there, but unlike my other saved cards where you can view the card holder's name the card holder is "xxxx". Convenient. And way sketchy. Awesome.

I had this issue today. We found that if you enter a Card number that starts with 62 or 88 and is 16-19 characters long, Safari will ask you if you want to save the card. If you save the card, it will be labeled as a China UnionPay card.

Safari thinks it's being smart by using the information here http://en.wikipedia.org/wiki/Bank_card_number to label cards. There is no Malware/Virus. Just Safari trying too hard.