I was using my UK bank account debit card in India, to buy few flight tickets for my inter city travel. Using my own laptop, in a co-working space.
Website used : www.makemytrip.com -- is one of the top Indian online travel companies.
First transaction worked fine. I had few more tickets to book. Second transaction failed, saying bank could not process this request. Tried again. got the same error message.
Soon Got a call from my UK banks anti fraud team, saying my card is blocked and canceled as a transaction attempt was made on Indian e-commerce website Jabong for a total of INR 52,000. I have not done any such transaction. Jabong is a good website; leading e-commerce in India.
They said there were two failed attempts on makemytrip.com; Failure reason was incorrect information entered. I was sure I entered correct information on the failed transactions. During this process of failed transactions; someone hacked my card details and used it maliciously on Jabong website.
The Bank could not give me more details as they are not authorized to give more information
I want to know how this is possible from a technical point of view.
Website was not a phishing website.
I was on https. Antivirus McAfee running with all updates.
My doubts are chrome extensions or other open tabs? wifi network?
How is this possible? Is there a possibility that my bank just canceled because transactions were from India? But if then how did they specify amount of the fraud transaction and e-commerce website it was tried on.
Should this question be asked in another place?
The amount i was making on the makemytrip app was not equivalent to the fraud amount. fraud amount was 5 times higher .