Citibank “SEC line item” double-​​books authorized charges on compromised accounts?

We have a Citi Mas­ter­Card that was one of the (appar­ently) hun­dreds of thou­sands whose secu­rity was com­pro­mised in the recent Heart­land Secu­rity Breach.

I’d heard the news about the breach, but the first sign I had that we were involved was when I tried to use the card for an online pur­chase. No email, no phone call, noth­ing from Citi regard­ing the prob­lem. When the trans­ac­tion failed three or four times I knew it wasn’t the ven­dor website’s fault, so I checked my Citi account online. There I saw a bright red warn­ing that my account had been shut down because of risk of compromise.

When I called (this was back on Feb­ru­ary 20th or so, I think) to com­plain about the lack of notice, the cus­tomer ser­vice rep­re­sen­ta­tive explained that Citi had no time or resources to notify all the card­hold­ers, espe­cially given the scale of the pos­si­ble breach, but had rather acted to place all the pos­si­bly com­pro­mised accounts on hold as soon as they could. I was told they had issued new cards with new account num­bers, at no charge to any of us, and that the new card would be here shortly.

Well, we got the new card, and we acti­vated it and set up online access.

Inter­est­ing thing we dis­cover, which (aside from the gen­eral lack of cov­er­age of the Heart­land fiasco in the press and blo­gos­phere) is why I’m both­er­ing to write this: a strange charge we didn’t rec­og­nize, with code TOTAL SEC BALANCE TRANSFR-ITEMIZED. The amount charged ($99) was the same as the new charges that had accrued on the old account before the trans­fer, but “99” is one of those num­bers that makes you won­der about inten­tional design. In any case, this clearly implied we had either been double-​​charged, or charged an extra and unau­tho­rized $99 fee.

So I got back on the phone and called cus­tomer ser­vice just now, and spoke with Jim. He explained to me that TOTAL SEC BALANCE TRANSFR-ITEMIZED was a “sys­tem mes­sage”, which rep­re­sented (as it seemed) the sum of items booked to the old closed account just before the new one was set up. He explained it was an “account­ing quirk in their sys­tem”, and that it would dis­ap­pear at the begin­ning of the next billing cycle. Mer­chants had autho­rized $99 worth of charges right before the account was closed and bal­ances were trans­ferred, and the mys­te­ri­ous line item indi­cated the tran­si­tion from “autho­riza­tion” to actual charge. Jim explained that gen­er­ally this tran­si­tion removes the autho­riza­tion charge from the billing sys­tem, but because the account changed in the interim period, the charge accrued on the new account but the autho­riza­tion couldn’t be removed from the old one (or some­thing like that). He pointed out (very help­fully) that if my card had been mis­placed or stolen, the same dynam­ics would have kicked in there, too, and the same sort of trans­ac­tions would have happened.

This got me think­ing. It may be ephemeral, a “quirk of the sys­tem”, but nonethe­less on the books and until the autho­riza­tion is cleared I owe an extra $99 to Citi. It’s mere coin­ci­dence of tim­ing that our account came to $99. But it seems highly likely (given the several-​​days typ­i­cal delay between autho­riza­tion and charge in many mer­chants’ trans­ac­tions) that any reg­u­lar card­holder might have one or more trans­ac­tions span­ning a period like this.

So here we have hun­dreds of thou­sands, or mil­lions of credit card accounts, all com­pro­mised and all syn­chro­nously being trans­ferred to new accounts. What frac­tion of those had inter­rupted trans­ac­tions span­ning the syn­chro­nized trans­fer, result­ing in these TOTAL SEC BALANCE TRANSFR-ITEMIZED “sys­tem messages”?

The num­bers are hard for me to even esti­mate with the infor­ma­tion I have on hand (though Jim did allow it was “really a lot” of cards). Seems big.

The thing I have to won­der about is: just at this cru­cial junc­ture in the finan­cial cri­sis, when the com­pany is under the clos­est scrutiny in decades and the stock is suf­fer­ing from mas­sive loss of investor faith, Citi has double-​​booked a siz­able Accounts Receiv­able sum.

And prob­a­bly not just Citi.…

14 thoughts on “Citibank “SEC line item” double-​​books authorized charges on compromised accounts?

  1. 3÷1÷09 — Same thing hap­pened to me. Thought it was an on-​​line error because card still worked at gas sta­tion recently. No phone call or e-​​mail like I have always received in the past with any sus­pi­cious activ­ity. When I called to check my bal­ance by phone, no men­tion of a prob­lem with the card. I finally talked to cus­tomer ser­vice who gave me the same story you men­tion above. I guess it all seems lligit, but am also sur­prised that I’m not hear­ing about this in the news…

  2. Thanks so much for this expla­na­tion. I was about to call Citi too — fig­ured they had made a mistake.

    I had no idea why I had my account closed of why I had received a new card. When I called them, they asked if I had given any one access to my account. Seems to me they should have explained it was THEIR prob­lem, and not mine, instead of mak­ing me think what may have hap­pened. I also had a Dis­cover and a Bank of Amer­ica card replaced, again telling me my account may have been com­pro­mised, but I have my cards and noth­ing was lost or stolen. Who needs these headaches? Geez.

  3. Thanks for post­ing this. I had the same issue. I had an Ama­zon pay­ment in process when my Citi card was switched over, so I also had a line with “TOTAL SEC BALANCE TRANSFR”.

  4. Thanks for shar­ing your infor­ma­tion.
    My wife just found out our online bill has the same “total sec bal­ance trans­fer item­ized” for $66.03 on 320 but we recently did not pay any­thing in that exactly amount with this card.
    I won­dered if Citi­Card charged its clients for replac­ing new card. If it is true, it really unjustifiable…

  5. Yea go the same TOTAL SEC BALANCE TRANSFR-​​ITEMIZED mes­sage on mine state­ment after switch­ing over to the new card num­ber (which by the way is stu­pid that we have to go thru this). The amount shows 167 being charged and is include my Cur­rent total activ­ity amount. But it is not reflected in my Cur­rent Total Bal­ance. I had called and the lady I spoke with told me this is solely for CITI’s record. This is a really stu­pid thing to do the all these card hold­ers espe­cially hav­ing to switch due to a SECURITY BREACH!! all i can say is wow citi thanks for wast­ing my time

  6. Just saw this on my Citi card. I have credit cards from the major play­ers and Citi’s been the one I trust the least. I had a low inter­est rate card that has been raised quite a lot. Like many peo­ple I have no bal­ance and have paid on time for years. I opted out of this and will wee if they go through with can­celling me in 2010. They spent a lot of mar­ket­ing money try­ing to get me to sign up for this card.…guess I’m not as prof­itable to them as they thought. Like other this “account­ing glich” is just another issue I don’t need to waste my time on. Plenty of other competitors.….don’t need Citi anymore.

  7. Ha.. well, thank you for post­ing this. I just got my $570 Total Sec Bal­ance Trans­fer item on my account.

    Need­less to say I was a lit­tle freaked out at first. Called them up, and they said the same thing you did. Would have been nice to get some expla­na­tion on this when they sent me the new card. Sigh… oh well.

  8. I just got a sur­prise new card in the mail from Citi, and the same mes­sages online. When I called the cus­tomer ser­vice oper­a­tor told me this wasn’t a dou­ble charge, but actu­ally a sep­a­rate charge equal to the bal­ance on my account before it was closed. I am con­cerned I am going to end up pay­ing twice… Thanks for the info! I’m going to keep work­ing on it.

  9. CiTi gLiTcH.

    No prob­lem. The charge means noth­ing. Record keep­ing my ass though, like they don’t know how much your bal­ance is… and why print it as a charge ? Bal­ance trans­fer? Really. They have my num­ber they should’ve text.

  10. Got the same TOTAL SEC BALANCE TRANSFR-​​ITEMIZED mes­sage, but mine totaled $2269.04! It did not raise the total bal­ance but sure had me ticked off. The Indian woman on the phone was 1. Com­pletely unin­tel­li­gi­ble and 2. Just told me “not to worry about it”. Glad I found this web­site– puts my mind at ease. Unfor­tu­nately, I have a $1600.00 pay­ment I want to send them and the web­site will not accept an online pay­ment pre­sum­ably until I active the new card, which I do not have yet.

  11. I got this mes­sage in April 2010 for 153.54. Hope­fully all the above infor­ma­tion is true because I only call citi if I abso­lut­ley have to… gotta love out­sourc­ing jobs, right. Give India a bunch of jobs while bor­row­ing money from the Chi­nese to bail out cit­i­group.. Ah, don’t get me started. Thanks for the info, everyone.

  12. I’ve just checked my Citi Card bal­ance online and found this TOTAL SEC BALANCE TRANSFR-​​ITEMIZED mes­sage. (Today is Aug 2, 2010).
    After read­ing other vic­tims’ mes­sages, now I feel bet­ter, but I am going to dis­pute this “new charge” online just to make Citi busy.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>