QUOTE(fruitie @ Nov 8 2025, 02:42 AM)
Just now suddenly I received an OTP request for my VI, to spend HKD 20,713.76 @ Cebu Air.

Quickly went into UOB app to block the card.
Called CS and asked what to do next since I already blocked the card, he said it still needs to be replaced because if I continue using the card and if there are other fraud charges, bank is not liable for them.
Since I seldom use this card so I’m OK to get everything replaced. Will receive within 3-5 working days.
If you ever used the card on apps or website, the card details and your detailed infos are on hacker hands, hacker dont use the card details, they sell the info on telegram or darkweb to willing buyers.
Bank knows this and they couldn't do anything except to block the transaction and issue new card for you if you ever reported it.
To increase the security, try to use apple pay or google pay for transaction authentication.
Gpay pass the virtual card number to app/website, which is different from physical card.
the virtual card details are useless to hackers.
Anyway most bank credit card security functions still way behind some e-wallet eg Wise and Revolut.
Both have fine grained control to enable/disable card functions, even if your card info leaked, you still can use it for ATM withdrawal, without disable the whole things.
For oversea, i use Google pay as much as possible, for contactless.