On December 28, 2025 at 11:29 PM, I received an SMS saying a charge for $508 was posted to my Ziraat Bank credit card. The transaction appears to have been made via PayPal through a perfumery called “Royal crown.” However, I do not have any PayPal account, and my card is always in my possession and not available for anyone else to use.
I consider it a serious security issue that such a high-value transaction could be charged to my card without any approval SMS, 3D Secure verification, or any additional security step. I also cannot reach PayPal through any channel, and I cannot find anyone responsible to address this issue.
I spoke with your bank and my card was canceled. I was told the transaction is currently pending authorization, so a dispute record can only be created tomorrow. I request (1) that this transaction be definitively canceled and the $508 refunded to me, and (2) that you provide a detailed, written explanation of how this transaction could be completed without my approval—especially when I do not even have a PayPal account.
I want Ziraat Bank to clearly and explicitly inform me what measures are in place for credit card security, how a vulnerability occurred in this case, and what will be done to prevent a similar situation from happening again.
Comments