conversation: User (thiswastillavailable): "So someone got into our Kohl's shopping account and ordered $1000+ worth of stuff and had it shipped to our house.  It was an odd thing, why would they do that?  I called and disputed the charges as I didn't really want the goods and they opened a case and said more information would be forthcoming.  \n\nA week or so later I get a letter saying that they have determined that the charges were legitimate and that they have closed the case.  \n\nIn the mean time I have $1000 worth of stuff in my house waiting for "further instructions"\n\nI call back in and am a little frustrated at this point.  They explain that what the perps are after was the Kohl's Reward Cash, which also goes into your shopping account as well as gets emailed to you.  \n\nI do recall this from the first call, she said that she was going to "get the Kohls Cash quick"... but that was all that was said at that point.\n\nSo I reiterate that I did not make the charges but wanted to know what I am supposed to do now.  \n\nThey said to just return the stuff to the store get my refund and be on my merry way.  Easy enough... other than the inconvenience of doing so.\n\nThis is where it goes bad.\n\nI return the stuff to the store... but they can't give me full credit for it because... someone spent the $200 Kohl's Cash already.  \n\nCue the next phone call while the store manager (who was awesome I might add) works with me trying to resolve the issue... this isn't the first time they have seen this issue, at this store just the week prior they had another fraud return.  I'm guessing there is an exploit on their website somewhere that people have gotten into or something, they didn't get into our email or anything else... someone needs better site security\n\nI digress.\n\nAnyway, turns our that the cash was indeed spent, and they track it down to a store literally across the country from me.  Guy says "no problem, I will put back in the dispute and they will clear up the $200 no problem... unfortunately I can't do it, I have to reopen the ticket with the original person running the dispute"\n\nI'm starting to gather that this "original person" is a real moron.\n\nOk, so I'm happy again.  Things will get patched up no problem right?\n\nWrong.\n\nI get my bill a week or so later, the $200 is still on there and now they want me to pay for it.\n\nI call in again.\n\nThis time I'm rather mad, I've been kind long enough but this is going on 5 weeks now.\n\nTurns out Original Person decided that since the Kohl's Cash was indeed delivered to our email address that we MUST have spent it ourselves... somehow teleporting across the country to do so, and also forgetting that the perps had access to our shopping account and got the Cash info as it is instantly delivered with your purchase.\n\nSo now I open the dispute again, we spelled out the problem for Mr./Mrs Original Person what the problem is, explaining that it was spent in a different state, and that the shopping account which also contained the cash was compromised.\n\nWhat other recourse do I have?  This stupid card doesn't have a Visa/MC logo or anything on it.  I'm about to shred the whole thing and let it sit out there and dispute it at the credit agency level.\n\nKOHL'S Get your act together and secure your dumb website!\n\nEdit:\n\nThanks for all the suggestions and help.  It is a great community here!\n\nI did run the https://haveibeenpwned.com/ search, great idea BTW.  One hit showed up but that site was only an email database, no passwords attached to it, leading me back to the idea that it is possibly an exploit on their website.  If you read down through the replies, it seems like it is an organized group doing this based on the types of items being purchased (rugs in several) they group that hit me also had the ability to spam our inbox trying to hide the order confirmation email among the garbage messages, no everyone has that ability.  "
  Self: "You might want to check in with the folks at r/legaladvice.   \n\nI would recommend filing a police report for the identity theft, and then using the police report to help escalate this up the chain of command with Kohl’s. You didn’t sign for this purchase, so you’re not responsible for the charges.  I would also cancel your Kohl’s account (they suck, so why give them anymore business?). \n\nThen I would also recommend checking your credit reports (credit karma, as well as a lot of major credit cards offer them for free, and you get one free per year per credit bureau, too), to ensure you don’t have anything unexpected there.  I’d put a credit freeze and fraud alert on all three.  I’d also change all your passwords - credit cards, banks, email account etc., and enable 2-factor authentication.  Can’t be too careful.  "
  IMovedYourCheese (IMovedYourCheese): "Whenever something like this happens, my first advice to anyone is **file a police report**. Every customer service interaction you have from there on - whether with a store, bank, credit card company or whoever else - will be dramatically different as soon as you mention the words "police report number". "
  TheDukeOfIdiots (TheDukeOfIdiots): "I've been laughed at and informed of a supervisor's close relationship with the police chief before. Yet my issue was still resolved, and I'd have to guess that person was probably fired. Dunno though."
  