QUOTE(Sycamore @ Aug 25 2021, 01:43 PM)
How it happened?
They have stolen your card number and cvv code from unsecured website.
And then facebook allow transaction with only credit card number and cvv, skipping the TAC verification.
I have used my cc for at least 50 websites. So it is very hard to pin-point which website leaked my cc info.
This happens after I purchased an iphone from apple website.
QUOTE(stupiak07 @ Aug 25 2021, 01:44 PM)

malware/trojan/viruses
never store any important information in device that able access internet
Credit card info are stored encrypted, not in plaintext. There's probably man in the middle attack, or there's a website that stores my info in plain text.

QUOTE(zakiyunos @ Aug 25 2021, 01:46 PM)
i realize before the incident... i activate paid fb ad and google ad to promote my product.
payment by credit card.
I didn't give facebook have my payment details. Someone else must've use my credit card info.
QUOTE(taitianhin @ Aug 25 2021, 01:46 PM)
Maybe is not CIMB....
Just try to recall if you made any CC Payment online for the past few months?
True true... The fraud starts after I purchased iphone from apple.com.my