Bug at payments processor WorldPay swipes £2k+ per ride ticket from Brighton Pier revellers
- Reference: 1624633213
- News link: https://www.theregister.co.uk/2021/06/25/brighton_pier_payments_snafu_makes/
- Source link:
Frolickers at the famous pier looking for some traditional bucket-and-spade seaside fun were charged more than £2,000 a pop for ride tickets after vendor WorldPay systems mistakenly used the transaction date to debit payments.
The issue came to light when visitors on 18 April 2021 began complaining they had been charged £2,104.18. Usually tickets are £25 for adults and £13 for kids for unlimited rides for the day.
[1]
First opened to the British public in 1899, the pier on England's southeast coast is a Grade II listed building with over 4 million visitors a year.
[2]
[3]
In a statement, Anne Ackord, chief executive of The Brighton Pier Group PLC “apologised profusely” for those who had been “overcharged by considerable sums for ride tickets.”
[4]
Click to enlarge
“We understand from Worldpay that the error meant that one batch of payments used the figures of the date of the transaction as the amount spent, resulting in serious over-charging.”
To make matters worse, it appears that when punters tried to contact WorldPay they were given the brush off “on the grounds of data protection”.
“As soon as we discovered that this serious error had occurred we entered into discussions with WorldPay - who have accepted full responsibility - to ensure that refunds are processed without delay.
[5]
Although WorldPay has given assurances that the money will be refunded as soon as possible, some punters are not happy.
One of those hit has [6]tweeted : “Another day passes and I’m still over £4,000 out of pocket. Shameful passing of the buck with no assistance whatsoever and no offer of compensation. The stress this is causing is unbelievable. The amount of people [this has affected] is enormous. This is not a little bit of money!”
[7]TITAN crypto-token does the opposite of zero to $60: Value plummets in hours
[8]Time to pay, Paypal pal Venmo! Oh no, haha, put away that wallet – just promise to be nice
[9]Report picks holes in the Linux kernel release signing process
[10]It's 2021 and a printf format string in a wireless network's name can break iPhone Wi-Fi
No one from WorldPay was available for comment at the time of writing, but it told Brighton Pier in a letter: "We'd like to offer our personal apologies for this issue... Worldpay will correct these errors by processing a credit on the affected customers' accounts today to remove the debited amounts that were applied in error and any bank charges that may have been incurred... We can offer no excuse for the fact that your customers were debited incorrectly."
Reg sources in the fintech game have speculated the bug could have been caused by several things, ranging from a misplaced field to a processing fee cock-up. We note that ISO 8583, the international standard for financial transaction card-originated interchange messaging, specifies "Action date" as [11]YYMMDD . And you thought you had a bad week.
If you know more, The Register is all ears: here is how to [12]contact us . ®
Get our [13]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/bootnotes&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YNX9msK9jQIIGUdA1U@4wQAAAEc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/bootnotes&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YNX9msK9jQIIGUdA1U@4wQAAAEc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/bootnotes&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YNX9msK9jQIIGUdA1U@4wQAAAEc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://regmedia.co.uk/2021/06/25/shutterstock_brighton_pier.jpg
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/bootnotes&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YNX9msK9jQIIGUdA1U@4wQAAAEc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://twitter.com/BTNPalacePier/status/1408151982192353280?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Etweet
[7] https://www.theregister.com/2021/06/17/iron_cryptocoin_titan/
[8] https://www.theregister.com/2018/02/27/paypal_settles_venmo_gripe_with_ftc/
[9] https://www.theregister.com/2021/06/24/report_picks_holes_in_the/
[10] https://www.theregister.com/2021/06/21/wifi_ssid_flaw/
[11] https://www.iso.org/obp/ui/#iso:std:iso:8583:-1:en
[12] https://www.theregister.com/Profile/contact/
[13] https://whitepapers.theregister.com/
Re: I May Be Cheap...
I don't log into my bank app after every $1.75 soda purchase but mayhaps I should start to do so, eh?
Re: I May Be Cheap...
Worldpay say they charged cards these £2104.18 amounts on 22 June, more than two months after the visits. I've not seen anyone mention whether Worldpay also charged cards correctly on 18 April 2021.
Cash please
I think I'll be using cash more in future.
Re: Cash please
Make sure to bring multiples of £2021. Cash uses a four digit year.
The question is...
I used WorldPay's payment gateway from 2004 until about 4 years ago and the only question I have is "how?"
Way back when, they were pretty good that as an authorised integrator I got a small % of all transactions through all the sites I built that used them. Maybe this is their way of clawing some of that back?
The thing that always ticks me off when financial companies make a cock up, debits are instant yet credits take ages. This may have been a genuine mistake, but mealy mouthed apologies will not be good enough. World Pay personnel need to seek out these people and apologise to them in person, while handing them their cash back including a payment for interest and bank charges. Now wouldn't that be a thing, also it'd stop it happening again.
Should card companies provide cardholder contact details to Worldpay so "World Pay personnel [can] seek out these people and apologise to them in person"?
> The amount of people [this has affected] is enormous
Really? How many Typhoid Marys are visiting Brighton beach in the middle of a pandemic?!?
The return of the Y2K bug
If the standard specified YYYYMMDD most payments would not have been processed... Probably...
We had a good one (not via WorldPay) where the credit card number went through as the amount.
Most people's credit limit wasn't the GDP of Belgium, so the transactions didn't happen - (actually the payment provider realised something was up and it didn't get as far as anything which upset the customer).
Mistake? Riiight!
Given the gangsters that own the Pier previously known as Palace.
I May Be Cheap...
But it wouldn't take me an hour to see that I had paid £2000 for a ride.