Hackers are using the Starbucks smartphone app to take money from customer credit cards, bank accounts and PayPal accounts.
The app lets people pay for drinks and food using their mobile phone, if their account is linked to an online payment service.But hackers have found a way to get into the app and take advantage of the cash auto-reload function and online gift cards that many customers use.
The hackers can then transfer customer funds to themselves.
Starbucks has acknowledged the problem but said there is no flaw in the app, and weak passwords could be to blame.
However, it says customers will not be held responsible for any charges they did not make.
Starbucks said in a statement: "If a customer believes their account has been subject to fraudulent activity, they are encouraged to contact both Starbucks and their financial institution immediately.
"Customers are not responsible for charges or transfers they did not make. If a customer's Starbucks Card is registered, their account balance is protected."
Consumer rights experts recommend changing the password for the app, and disabling the auto-reload feature.
By Ruchi Singh
reporter
Park Sae-jin
swatchsjp@ajunews.com
