FNB still hasn't fixed its toll booth security vulnerability - seven years after it got reported on this site

A few months ago my wallet got ******. I cancelled all the cards in the wallet, and got replacements.

In October I got the pleasure of seeing a whole bunch of toll transactions going through. First there were four on the ****** credit card. Then there were a whole lot more on my ****** debit card. These cards had been cancelled. The card the ******* have been using doesn't even show up as one of my cards on the website.

I do not drive.

The first one, for the credit card - the transactions have been reversed.

The second ***** case was opened later, because I hadn't initially been told there needed to be two separate cases, despite having informed the investigator that both cards had been ******. I had also informed the bank when the initial transactions went through on the debit card.

Consequently the second case was opened later than the first. Those transactions have not only not been reversed but more are still coming through, draining my cheque account.

There has been no reversal on these transactions so far.

This is on a card that has been cancelled for months, and suddenly these transactions are coming through. This is clearly a vulnerability in the way the bank interacts with the toll gate system, as there are no other suspicious transactions.

If the vulnerability wasn't simply the toll system, I'd expect to see other businesses being paid from my account.

I Googled this issue and came across an eerily similar case on Hello Peter from 2018.

https://www.hellopeter.com/first-national-bank/reviews/fnb-*****-toll-gate-fees-on-cancelled-card-***

So there has been seven years of this issue not being patched.

I much prefer using my computer for chat based apps. I prefer using a keyboard to typing in an app. The website directs me to use the app for reporting *****. I do so, I go to the dispute transactions tab, and I'm told it is down and the bank is investigating.

Now in the wallet that got ******, I also a Woolworths card. That is effectively an Absa account. There have been no suspicious transactions on that account.

In real terms, what should be happening here is the system should automatically be picking up that these transactions are on cancelled cards. They shouldn't be going through in the first place, that the merchant isn't using a live system should not mean that the bank doesn't reject the cards when they get the transactions.

I have blocked my current cards to ensure I do not spend on these accounts until the issue is resolved, so the only people spending money on my accounts right now are ******* who have been enabled by the outright negligence of my bank.

It is the start of the Christmas season, I am planning to go on vacation in two weeks, keeping my accounts blocked isn't something I can do forever, yet I am **** scared that if I start spending on my accounts I'm going to end up in overdraft because my bank is too *********** to reject transactions from cancelled cards, and hasn't fixed a security vulnerability that has been known for at least seven years.