PSA: Check your statements—Uber is being used for CC “carding” and dark web testing

I’m posting this because it just happened to me, and after talking to a friend in cybersecurity, I realized how deep this goes. If you see a random $1.00, $5.00, or $20.00 charge from Uber or UberEats that you didn’t authorize, kill that card immediately.

The Scam: "Carding" and Validation

Basically, Uber has become a massive testing ground for "carders" (people who buy/steal bulk credit card data). Because Uber is a high-volume merchant with millions of "micro-transactions," a $10 ride or a $2 charge doesn't always trigger a bank's fraud alert.

Here is the lifecycle of your stolen data:

1. The Hit: Your card info is skimmed or leaked in a breach (doesn't even have to be an Uber breach).

2. The Test: Fraudsters use automated bots to link your card to a burner Uber account. They run a small charge—sometimes just a $1 authorization hold or a small "ghost ride"—to see if the card is active and has a balance.

3. The Resale: Once the card is "verified" as working on Uber, it’s flagged as "Live" or "Hits" and sold on dark web marketplaces (like Genesis or various Telegram shops).

4. The Drain: The person who buys your "verified" card info then goes for the big stuff—electronics, high-end gift cards, or luxury travel—knowing the card is 100% active.

My Experience

I haven't used Uber in months. Last night, I got a notification for a $0.24, $3.22 and $3.65 charge from "Uber Trip." Ten minutes later, a $227.00 charge. I checked my Uber app—nothing in my history.

The scary part? I called my bank, and they told me the charge originated from Netherlands. The scammers aren't even using your account; they’re using your card on their burner accounts to validate the data before selling it off.

What you need to do:

• Don't just dispute the charge: If they've verified your card on Uber, your info is already being packaged for sale. Cancel the card.

• Check for "Penny" charges: Scammers often do a $0.00 or $1.00 "auth" check. If you see one you don't recognize, it’s over.

• Turn on Transaction Notifications: Most banking apps let you get a push notification for every single cent spent. This is the only way I caught it before they sold my "live" info to someone who would’ve cleaned me out.

Uber’s glacially slow support is useless for this because, technically, the fraud isn't happening on your Uber account—it's happening on theirs. Your bank is your only line of defense here.

Stay safe out there. Has anyone else seen these random small Uber charges lately?