OnePlus issues an official response to address concerns regarding security of credit card information

OnePlus has issued an official response to multiple complaints from OnePlus users claiming incidents of credit card fraud. The reason for complaints was because the **fraudulent transactions** started after these users had used their cards to make purchases on the OnePlus website. [caption id=“attachment_4215865” align=“alignleft” width=“380”] The OnePlus 5T.[/caption] We contacted OnePlus for an official response to address these complaints and the company sent the link of a forum post where ‘Mingyu’, a member from the ‘Web Team’ at OnePlus answered a number of questions that customers may have regarding this incident. We have added the full text of the statement below: Who might be affected? The reports have come from some customers who made credit card payments directly on oneplus.net (without involving a third party such as PayPal). We are investigating each report. Is my credit card info stored on oneplus.net? No. Your card info is never processed or saved on our website - it is sent directly to our PCI-DSS-compliant payment processing partner over an encrypted connection, and processed on their secure servers. What about the “save this card for future transactions” feature? If you checked the “save this card for future transactions” while making a payment, all this means is that our payment processing partner encrypted and securely stored your card info and sent us a few digits (for identification purposes; see image below), plus a “token” - a string of symbols that represents your card. This token is stored in our system, but it’s impossible for us to decrypt it and access your card info. Next time you make a payment at oneplus.net, this token will be recognized by our payment processing partner, who then fetches your original card info from their secure vault and uses it for payment processing. Is oneplus.net affected by the Magento bug? Oneplus.net was initially built on the Magento eCommerce platform. However, since 2014 we have been re-building the entire website with custom code, and credit card payments were never implemented in Magento’s payment module at all. So no, we shouldn’t be affected. What about the forum cases? Payment fraud is a perennial concern with all online payments. If you notice suspicious charges in your card statement, contact your bank immediately so they can reverse the payment. Our website is HTTPS encrypted, so it’s very difficult to intercept traffic and inject malicious code, however, we are conducting a complete audit. [caption id=“attachment_4213975” align=“alignnone” width=“1280”] The AMOLED display is nice and bright. Image: tech2/Rehan Hooda[/caption] What can I do? If you suspect that your credit card info has been compromised, please check your card statement and contact your bank to resolve any suspicious charges. They will help you initiate a chargeback and prevent any financial loss. What next? This is an ongoing investigation. We are working with our third-party providers, and will update you on our findings as they surface. Information security is a very serious topic, and it has always been one of our top priorities. If you have any suggestions or comments, please send them to security@oneplus.net.