JMich already quoted my comment from back in the day, and this hasn't changed. It's virtually impossible (as in: no one will attempt it, ever, because it's pointless to even try) to hijack a card's information while it's sent via an encrypted connection. Also, we do not store vital payment information, for security reasons.

I can't imagine a situation where credit card theft originated somewhere on our end. In such situations, card information theft is likely to happen on the customer's end - be it through some spyware (keyloggers, for instance), or having the card physically stolen, or its infomation looked up somehow.

Just to clarify - do you know if this card has been fraudulently used to buy stuff on GOG, or was it used somewhere else?


Also, guys, please don't downrep posts like these. I can understand downrepping if someone's talking smack about GOG, but Jared1138 only seems to have been concerned, while not knowing the ins and outs of our payment system. If you ask me, that's not a punisable offense. :)