taeyoungwoo

Not an IP address--the user. A user account had to use my card info to purchase the goods. If Tagged can't tell me who did it, at least they can shut down that account for fraud.

I'm looking through Tagged's terms of service and privacy policy right now to see what their terms are on issues like this.

Many independent high schools throughout the country (mostly boarding schools) have similar Internet policies, mine included.

First, thank you all for your comments--I just recently opened my first checking account so I am new to this whole credit/debit card business. It's great to receive feedback from people who know a lot more than I do about these issues.

Tagged contacted me today at noon (Sunday Feb 12), but NOT as a response to the direct contacts I made. They responded after reading my blog post (which I'm pretty sure they saw through HN or through Twitter). Interesting.

I have screenshots of all the transactions, which include the date/time of transaction and the order ID, and I sent this information to Tagged. They responded within 20 minutes saying that they are "looking into [their] systems to gain some clarity."

$200 of the $300 has been restored to my checking account, and I am still waiting for the final $100 to be returned. However, regardless of having the money returned quickly, I wanted to (and still want to) find out exactly who did this. That is why I contacted Tagged on top of Bank of America (which responded very quickly). Google Wallet advices to contact the seller directly about the orders, which I did.

To answer some of the common questions among the comments: yes I do have 2-step authentication for Google, yes I changed my password, and I rarely log onto my Google account on shared computers.

I am trying to find out the identity of the person who made the fraudulent charges--that's why I contacted Tagged. Tagged should be able to quickly identify which user used my card information to purchase goods from their website. I sent them three separate requests as a follow-up of the three separate transactions made through Google Wallet, but did not receive a response for any of them.

Yes, I do have the 2-factor authentication and yes, I change my password quite frequently (and changed my passwords for all my accounts on various sites as soon as I found out about this).

1) No 2) No 3) No

I rarely check my email or sign onto my Google account on any other computer.