Curve card added to someone else’s Apple Wallet without my consent
I’m posting this as a warning and also because I’m honestly shocked by how this has been handled so far.
I have a Curve card on the highest tier, and yesterday I received a notification saying that my card had been added to someone else’s Apple account. Shortly after that, four payments of £25 each were made without my authorisation.
After blocking the card, I called Apple immediately. They blocked the card on their side, and during the call they confirmed that the issue appears to be on Curve’s side. From what I understand, a third party was somehow able to add my card to their Apple Wallet without me receiving any notification or verification prompt.
I’m very security-conscious and I’m confident I haven’t done anything careless on my side, so at this point I strongly suspect the leak or failure happened with Curve. Once this is resolved, I’ll be cancelling my Curve card, because I simply don’t trust it anymore.
What makes this even worse is the response from customer support. I reported this 24 hours ago and have still had no reply from Curve, even though I would expect something like this to be treated as extremely urgent. By comparison, Apple handled it properly: I reported it, they offered a callback, and they called me back within a few hours.
Edit: in fairness, they have just replied saying that they have already reimbursed the fraudulent charges and that they are investigating to see what happenee. It took about one working day, so not too bad.