On January 27, 2026, four consecutive transactions were made through iyzico/GODADDY.com on my regular İş Bank credit card without my knowledge or approval. The charges were $10 at 9:09 p.m., $15 at 9:11 p.m., $138 at 9:15 p.m., and $651 at 9:22 p.m., totaling a very large amount.
Because my credit card security settings are enabled, I received instant notifications through my bank’s mobile app for each transaction, which is how I became aware of the situation. Normally, for online purchases, I receive a one-time SMS verification code (OTP) to my mobile phone. However, during these transactions, I did not receive any verification code. I neither received an OTP nor approved these charges. These transactions absolutely do not belong to me.
As soon as I noticed the charges, I contacted İş Bank and immediately canceled my card online. In fact, two of the transactions occurred during the card cancellation process. While the bank has been assisting me, I have tried to contact iyzico but have not received any response so far.
I do not accept any responsibility for these unauthorized transactions. I cannot understand how these payments were processed without even sending a verification code, and I believe iyzico’s security measures are insufficient. I request that iyzico conduct a full investigation, cancel these transactions, issue a full refund of the amounts charged, and provide a clear explanation of how this security breach occurred.
Comments