According to a September 26 report, bloggers on social media have alleged that unauthorized transactions have occurred on Bank of China MasterCard cards.
Other users who suspect their cards were also compromised left comments under the blogger's post, saying they too received suspected fraudulent transaction text messages, and noting that so far they have only received alerts about suspected risky transactions and notifications that their cards had been frozen.
On the same day, another blogger on Weibo posted that in the middle of the night they received a notification that their primary Apple Pay card had become invalid. After opening the relevant app, they found the card had been locked and an additional bill from Brazil had appeared. The blogger said the physical card had never been taken out and used, and had always been used through Apple Pay, and urged netizens that if they have a Bank of China MasterCard, they should lock the card immediately upon seeing this message.
At present, most of the leaked information involves pound-denominated cards, but there are also US dollar and other currencies.
SPD Bank MasterCard also suffered unauthorized transactions last year
In September 2025, SPD Bank also experienced unauthorized transaction incidents, which were highly similar to this Bank of China incident: 1. Both involved concentrated overseas unauthorized transactions on MasterCard cards. 2. Both involved cards bound to Apple Pay. 3. The currencies involved in the unauthorized transactions also included currencies of Latin American countries such as Brazil.
The handling measures taken by SPD Bank at that time included: immediately launching an emergency response with the MasterCard organization, setting up a special task force to trace the source of risk, actively responding to customer concerns, and advancing the fund protection process.
This Bank of China MasterCard unauthorized transaction incident once again warns that the security protection of mobile payments cannot rely solely on technical measures at a single link, and banks, card organizations, and device manufacturers need to establish a closer coordinated risk control system.
For cardholders, before the investigation results are clear, proactively locking the card to stop losses is the most effective means of self-protection.
Comments