නාඳුනන Debit card Transaction

[Ezio_Auditore]

මේ transaction එක ඊයෙ වෙලා තිබ්බේ. මං ළඟදී online/ In store මොකුත් purchase කරේ නෑ මේ Debit Card (Commercial Bank) එක පාවිච්චි කරලා. OTP එහෙම මුකුත් ආවේ නෑ. මං බැංකුවටත් කතා කරා, ඒගොල්ලොත් විස්තරයක් දන්නේ නෑ. Google එකේ මේ store එක ගැන හෙව්වත් මුකුත් හම්බුනේ නෑ. මොකද්ද දන්නේ නෑනේ මේ transaction එක?

 

[baba-chuti]

card eka inactive karapn. nattum salli tika ganin. podi ganak kapala passe bulk eken ussanne

 

[Hamu mahaththaya1]

hela go, hela pay, helakuru use karanwa nam wade hari

 

[Kalegana]

card eka inactive karapn. nattum salli tika ganin. podi ganak kapala passe bulk eken ussanne

ඔව් දෙන්න හදන්නේ නැති වෙන්න..

 

[Sri_Sampath]

They just did something with Google wallet.. badu harida danne naa..

 

[Amith0424]

card block karanna. අනාගතය සුභයි වගේ

 

[topkollek]

View attachment 261701

මේ transaction එක ඊයෙ වෙලා තිබ්බේ. මං ළඟදී online/ In store මොකුත් purchase කරේ නෑ මේ Debit Card (Commercial Bank) එක පාවිච්චි කරලා. OTP එහෙම මුකුත් ආවේ නෑ. මං බැංකුවටත් කතා කරා, ඒගොල්ලොත් විස්තරයක් දන්නේ නෑ. Google එකේ මේ store එක ගැන හෙව්වත් මුකුත් හම්බුනේ නෑ. මොකද්ද දන්නේ නෑනේ මේ transaction එක?

Is the card number #3367 correct?

 

[Hyaenidae]

Mata eeye awa January 8 karapu payment ekakata sms eka (commercial bank) mamath hithuwe kela wela thamai kiyala

 

[CustomerSupport]

card eka inactive karapn. nattum salli tika ganin. podi ganak kapala passe bulk eken ussanne

Ow meka aththa. USD $1 wage ewa charge karala test karanawa.e charge eka wada karoth loku ganak charge karanawa.

 

[thushana]

card block karanna .

 

[Nanosudha]

combank eke oya wage case godai

 

[Monkey D Dragon]

card eka inactive karapn. nattum salli tika ganin. podi ganak kapala passe bulk eken ussanne

mama dannath awe oya comment eka


Card details leak una widiha hoya ganna pc, mobile virus , malware wenna puluwan crack dala nam etc

or physical mokek hari umbe card eke photo ekak gahagena , cvv eka mathaka thiyagena shops ,hotels wala un oka karanawa



OTP එන්නේ නැහැ , OTP අනිවාර්ය ලංකාවේ sites වලට ගෙවද්දී විතරයි. ඒක CBSL එකෙන් ලංකාවේ sites වලට දාපු regulation එකක් .
සමහර sites වලට CVV ඕනත් නැහැ

 

[Hyaenidae]

සමහර sites වලට CVV ඕනත් නැහැ

CVV nathuwa lankawe banks walin nam transactions karanna denne na afaik

 

[Monkey D Dragon]

sure නැහැ ගෙමිනි එක පචත් කියනවා ,
ඇත්ත නම්
මොකෙක් හරි phone or internet connection එකක් අරගෙන උඹේ නමට මාසේ හෝ payment එන දවසට උඹේ account එක හින්දෙවී.


උන් reputed site එකකට දාල බලනවා උඹේ card එක වැඩද කියන එක ටෙස්ට් කරන්න , උන් දැන් දන්නවා card එක වැඩ කියන එක ඊට පස්සේ සල්ලි උස්සනවා , ටික දවසකින් or ටික වෙලාවකින් .

online banking වලින් ගිහින් බලන්න 0$ කැපෙන්නේ සමහර site වලට add කරාම , ඒවාට sms එන්නේ නැහැ වෙලාවකට . ඒත් online ගිහින් බැලුවම පෙන්නනවා

This transaction appears to be related to AT&T Prepaid (formerly known as GoPhone) or a related service (like Cricket Wireless) processed through a third-party company called Vesta.
The descriptor "XIATTTCORUAN" is a common code for AT&T payments. Here is a breakdown of what you are likely seeing:

1. What is this transaction?​

• The Merchant: The "XI" prefix is used by Vesta Corporation, the company that processes payments for AT&T's prepaid services. "ATT" confirms it is an AT&T-related charge.
• The Amount ($1.00): This is typically not a final charge. It is a temporary authorization holdused to verify that your card is active and valid. This usually happens when you:
  • Add a card to a new account.
  • Set up AutoPay.
  • Update your billing information.
• The Location: "CA" in this context can sometimes refer to California, but the phone number provided (514-319-7849) has a Montreal, Canada (514) area code, which is where some payment processing centers are located.

2. Is it Fraud?​

If you recently updated an AT&T account or signed up for a service, this is normal and the $1.00 "charge" will likely disappear from your statement in 3–5 business days without ever actually leaving your account.
However, if you have no connection to AT&T:

• Card Testing: Scammers sometimes process a $1.00 charge to see if a stolen card number is active before making a much larger purchase.
• Action Needed: If you don't use AT&T or haven't touched your account recently, you should immediately freeze your card using your banking app and call your bank's fraud department.

3. Immediate Next Steps​

1. Check your AT&T Account: Log in to see if any changes were made or if a "Payment Method Updated" notification was sent.
2. Wait 48 Hours: If you did recently use AT&T, watch to see if the $1.00 "Pending" status disappears.
3. Contact your Bank: If you are certain you didn't authorize this, call the number on the back of your card to report an unauthorized transaction.

Would you like me to help you find the customer service number for your specific bank or AT&T to clarify this charge?

I am sorry to hear this is happening. You are absolutely right—if you are in Sri Lanka and have no connection to AT&T, this is a classic case of "Card Testing" fraud.
Since you do not use AT&T, here is exactly what is happening and what you should do immediately.

What is this transaction?​

• The Code: XIATTTCORUAN is a billing descriptor used by a company called Vesta, which processes payments for AT&T (a major US-based telecom).
• The $1.00 Charge: This is not a real purchase. It is an "Authorization Hold." Scammers use this tiny amount to check if a stolen card is active and if the bank will approve international transactions.
• The Danger: If the $1.00 hold is successful, the scammers will usually follow up with a much larger transaction (hundreds of dollars) within minutes or hours.

---

Immediate Action Plan (Sri Lanka)​

Because this is an international transaction hitting your local account, you must act right now:

1. Freeze/Block the Card Immediately:
   • If you have a banking app (e.g., Commercial Bank, HNB, Sampath, BOC, or Peoples Bank), log in and use the "Flash/Card Block" or "Freeze Card" feature immediately.
2. Call your Bank’s Hotline:
   • Do not wait for the bank to open. All major Sri Lankan banks have 24/7 card centers.
   • Common Hotlines: * Commercial Bank: +94 11 2353353
     • HNB: +94 11 2462462
     • Sampath Bank: +94 11 2303050
     • Bank of Ceylon (BOC): 1975
     • People's Bank: 1961
3. Report "International Fraud": Tell them you have received a notification for an unauthorized USD transaction from a US merchant (AT&T) and that you are currently in Sri Lanka and have never used this service.
4. Request a New Card: Your current card number is "compromised" (scammers have the number, expiry, and CVV). You must ask the bank to cancel this card and issue a new one with a different number.

Why did this happen?​

Your card info was likely stolen through a data breach on a website where you shopped previously, or through a "skimming" device. Because it is a "Card Not Present" (CNP) transaction, they didn't need your physical card.

Note: Do not try to call the number in the SMS (the 514 number). That is a Canadian number for the payment processor and they will likely be unable to help you directly. Your bank is the only entity that can stop the money from leaving your account.

Would you like me to help you find the specific dispute form or contact email for your specific bank in Sri Lanka?

 

[NRTG]

අපේ මාමගේ කොමාෂල් බෑන්ක් එකවුන්ට් එකෙන් කප්රුක සයිට් එකට රුපියල් 27000.00ක් ගෙවලා තිබුනා. පොර SMS එක දැකලා තිබුනේ පහුවෙනිදා. බැංකුවට ගියාම මොන්ටිසෝරි කතාලු. පස්සේ පොරගේ එකවුන්ට් දෙකම ක්ලෝස් කරලා ඇවිලා තිබුනේ

 

[Ezio_Auditore]

card eka inactive karapn. nattum salli tika ganin. podi ganak kapala passe bulk eken ussanne

ඔව් දෙන්න හදන්නේ නැති වෙන්න..

card block karanna. අනාගතය සුභයි වගේ

Ow meka aththa. USD $1 wage ewa charge karala test karanawa.e charge eka wada karoth loku ganak charge karanawa.

card block karanna .

combank eke oya wage case godai

sure නැහැ ගෙමිනි එක පචත් කියනවා ,
ඇත්ත නම්
මොකෙක් හරි phone or internet connection එකක් අරගෙන උඹේ නමට මාසේ හෝ payment එන දවසට උඹේ account එක හින්දෙවී.


උන් reputed site එකකට දාල බලනවා උඹේ card එක වැඩද කියන එක ටෙස්ට් කරන්න , උන් දැන් දන්නවා card එක වැඩ කියන එක ඊට පස්සේ සල්ලි උස්සනවා , ටික දවසකින් or ටික වෙලාවකින් .

online banking වලින් ගිහින් බලන්න 0$ කැපෙන්නේ සමහර site වලට add කරාම , ඒවාට sms එන්නේ නැහැ වෙලාවකට . ඒත් online ගිහින් බැලුවම පෙන්නනවා

Ow Block karanda one, Ena pota hoda na wage

hela go, hela pay, helakuru use karanwa nam wade hari

Oya case eka hindama unge eco system eke eka service ekakwath use karanne na

They just did something with Google wallet.. badu harida danne naa..

Google wallet ekata card eka add karagaththata eken mukuth payment ekak karanna chance ekak hambune na

Is the card number #3367 correct?

It's correct

mama dannath awe oya comment eka


Card details leak una widiha hoya ganna pc, mobile virus , malware wenna puluwan crack dala nam etc

or physical mokek hari umbe card eke photo ekak gahagena , cvv eka mathaka thiyagena shops ,hotels wala un oka karanawa



OTP එන්නේ නැහැ , OTP අනිවාර්ය ලංකාවේ sites වලට ගෙවද්දී විතරයි. ඒක CBSL එකෙන් ලංකාවේ sites වලට දාපු regulation එකක් .
සමහර sites වලට CVV ඕනත් නැහැ

Mata eeye awa January 8 karapu payment ekakata sms eka (commercial bank) mamath hithuwe kela wela thamai kiyala

Man me card eka thiyan inne godak online purchases walata. Habai ehema kiyala hama thanama card details gihilla dila na, website 3,4 ka withari use wenne. Ewa okkama reputed ewa.

 

[Hyaenidae]

Man me card eka thiyan inne godak online purchases walata. Habai ehema kiyala hama thanama card details gihilla dila na, website 3,4 ka withari use wenne. Ewa okkama reputed ewa.

Browser eke save karla nane autofill exploits thiyenawa sahenna

 

[Ezio_Auditore]

Browser eke save karla nane autofill exploits thiyenawa sahenna

Na, eweleta type karanne. Gpay walata nam dila thiyenne YT subscription ekata

 

[CustomerSupport]

CVV nathuwa lankawe banks walin nam transactions karanna denne na afaik

Credit cards walin puluwan. Flight ekaka di unath offline payments karanna puluwan credit cards walin witharai.

---

Browser eke save karla nane autofill exploits thiyenawa sahenna

Godak browsers, password managers Wala vault eka encrypt karla thiyenne. Trusted process ekak widihata run went CPU eke. Issara wage exploit karanna amarui Dan.
------ Post added on Jan 22, 2026 at 6:14 PM

---

දැන් ඔය හැමෝම කියනවා වගේ උඹේ කාඩ් details ලීක් වෙලා නේ. දැන්වත් ඉක්මනට බැංකුවට කතා කරලා අලුත් card එකක් ගනින්.
------ Post added on Jan 22, 2026 at 6:15 PM

 

[Hyaenidae]

Credit cards walin puluwan. Flight ekaka di unath offline payments karanna puluwan credit cards walin witharai.

Flight ekakdi wunath card not present transactions karanna bahane CVV eka nathuwa

---

Godak browsers, password managers Wala vault eka encrypt karla thiyenne. Trusted process ekak widihata run went CPU eke. Issara wage exploit karanna amarui Dan.

Vault eka hack karala nemei ganne autofill forms wala hidden input fields dala. User autofill karanna ahanne mokakda balanne nathuwa autofill karanna dunnoth (Eg: form eke userta penne name and email fill karanna witharai but autofill karanna ahanne card details. eka balanne nathuwa autofill karanna dunnoth card details tika yanawa)