Groupon Storing Card Details without Authorisation

Hi everyone, just came across this and wanted to share it with everyone that you should not use credit card on groupon. Maybe use paypal. Every time you make a purchase on groupon using a credit or debit card they will store your card details even without you agreeing to it. There is no option to disable it from saving. If you go back to buy something else you will see your credit card details already filled in.

YOU WILL NEED TO CONTACT THEM AFTER EVERY PURCHASE IF YOU WANT TO REMOVE YOUR CARD DETAILS FROM THE SITE.. WTF!!!

I had a chat with their support and they confirmed it as well. See below for details:

[myself] Issue: I need to add, remove, or update a credit card

[Mary G.] Hi, sunny.

[Mary G.] Thank you for contacting Groupon. My name is Mary.

[Mary G.] No worries. I’ll be more than happy to help you with this one. Please bear with me a minute or two while I’ll pull up your account.

[myself] Hi, I would like to remove my credit card details. And I do not remember saving them for future.

[Mary G.] Thanks for waiting. For security purposes of your account, kindly verify your full name, first line of your address and postal code registered on your Groupon account?

[myself] sunny lastname
[myself] xxxxxx
[myself] xxxxx

[Mary G.] Thanks for confirming. I've already updated your credit card details on your Groupon account. Once you make a purchase you will need to enter your credit card details manually.

[myself] But where do you guys have that option that saves the credit card details?

[Mary G.] When you make your first purchase with Groupon, your credit/debit card number is transmitted by encrypted SSL directly to a secure electronic vault for your convenience at the time of checkout. Please be assured that at no time is your credit card information ever stored on our servers.

[myself] You are saying its not stored on your servers, then how could I see it again?

[myself] When I did the first purchase I did not choose to save my card details.

[Mary G.] This will not be reflected on your Groupon account, sunny.

[myself] I understand it wont be reflected from now. But how and why did you guys store it previously?

[myself] Where is the option which says the details will be stored?

[Mary G.] This is on the time when you make your first purchase, sunny.

[myself] If I make a purchase today will your site save the card details again?

[Mary G.] Yes, sunny. But you can request to remove or update or your credit card.

[myself] So I have to again go through this process?

[Mary G.] Yes, sunny.

[myself] Won't use Groupon ever again and tell my friends as well in that case.

[Mary G.] Please accept my sincere apologies for the inconvenience caused.

Related Stores

Groupon Australia
Groupon Australia
Marketplace

closed Comments

  • its well known issue, i think first time i knew this was like 2 years ago. was shocked at that time but hey what can we do? just dont use them if you are not happy

  • At least it will make more and more people aware not to use the card directly on their website. Use paypal instead i guess.

  • Groupon are signed up with PCI DSS (Payment Card Industry Data Security Standard): https://www.pcisecuritystandards.org/get_involved/participat…

    https://engineering.groupon.com/2014/misc/pci-at-groupon-the… (this helps to understand their approach)

    There's a lot to research out there. If companies do security right, you don't need to be too worried. In my opinion, Groupon aren't doing it quite right - they don't explain it well enough. Maybe use some of the above (and more) to complain at them like everyone else.

    • +1

      The first set of comments on that second page you linked shows exactly why this is a bad idea.

      They've spent lots of time investing in the technical security of your credit card details, but they've tied them to your minimum security Groupon account.

      Sure, someone may not be able to get your credit card number, but if they get into your Groupon account they can run up a heap of charges on your card in no time at all thanks to Groupon saving and linking your credit card details.

      There's really no excuse for not offering once-off CC purchases.

      • At least tell the customer that you will be saving their card details, be open about it and then leave it on them if they still wanna go ahead.

        Whats the use of signing up with data security standards. don't they have something in the standard that tells groupon about the need to inform the customer that their details will be saved.

Login or Join to leave a comment