Here’s why I have trouble buying things quickly online

Like many of you, I’ve been doing a fair amount of online shopping. But I’ve probably been much slower at it than most of you.

Not “slower” in the sense of taking forever to pick one product over another (although my indecision-making there is considerable), but in the sense of deciding how I’ll pay for it and which third-party site I should click through before making the purchase.

Picking a credit card is the easier part even if I’m not buying stuff for my job (work expenses go on a separate card to ease my accounting). Most of the time, the 2% cash-back rebate on the Citi Double Cash Mastercard makes it the obvious choice. It’s been an even easier call when Citi’s offered extra cash back in promotions with various merchants.

But other card issuers have their own extra incentives. American Express and Chase offer extra cash back and do so much more often, but you have to sign up for each such offer on their sites or in their mobile apps. So I need to consult both before any purchase–and then hope the merchant in question doesn’t drop one of these deals the week after my purchase.

(Note that Amex and Chase also have tiered cash and points rewards for categories outside of online retail; a proper discussion of them would require a separate post.)

Not too many years ago, my shopping decisions would have ended there. But then I had to start considering shopping portals, the points-for-purchases sites most frequent-travel programs provide for members. By itself, a mile or a point for a dollar spent somewhere is barely worth thinking about. But that incremental addition does deserve your time if you’re nearing an award-redemption threshold or have miles or points that will expire without new activity in your account.

These portals don’t all offer the same rate or each offer the same rate over time. To verify which one offers the most return, I use a site called Cashback Monitor that tracks these deals and lets you set up a custom page with your favorites. (For more details, see this concise how-to by One Mile At A Time’s Tiffany Funk.) JetBlue consistently offers some of the best earn rates; fortunately, TrueBlue points have not seem the same deflation as other frequent-flyer currencies in recent years.

You may find no future-travel benefit for a potential purchase. Best Buy, Target and Walmart recently seem to have dropped out, while I can’t remember seeing any travel incentives for Amazon. In those cases, I’ll go to one last site before starting a purchase: my client Wirecutter, which often tells me what to buy and makes a decent chunk of its money off affiliate payments from Amazon and other retailers. If I can’t treat myself to a little kickback on a purchase, helping one of my favorite clients seems like a decent fallback.

Ugh, Washington Gas is the worst at customer experience

We got a message on our home phone yesterday from Washington Gas, and even by voicemail standards of annoyingness it was unhelpful: “We value you as a customer. Please contact us for an important message.”

Right, I’m going to listen to a voicemail and call a company back in 2019 to get a message that it could just put in my account online. Unfortunately, that is not at all out of character for how the D.C. area’s gas utility operates. Even when its customer site hasn’t been in the grip of a relaunch meltdown that left me unable to login for weeks, it’s mainly functioned as an exhibit of how not to run a payment portal.

The single biggest failing here comes if you choose to pay your bill via credit card–as you absolutely should, since there’s no surcharge compared to a bank deposit and you can make 2 percent cash back on each payment via a Citi Double Cash card. (I will set aside for now the fact that we’ve just had to get this card replaced for the third time in four years after some joker tried to make yet another fraudulent purchase on our number.) But clicking the button to pay via credit yields a dialog from the previous century: “A popup blocker is currently enabled. Please switch this to disable for Credit Card payment to function.”

Fortunately, you can disable pop-up blocking for a specific site in Chrome and Safari. Doing so will allow the Washington Gas page to launch a full-screen page from a service called Kubra EZ-Pay. EZ, this experience is not so much: It breaks the entry of your credit-card across two screens, which seems to stop Google Pay from auto-filling the second one, then asks for a phone number and e-mail when neither should be necessary in this transaction.

It’s all a pain, yet I keep taking this payment option because I don’t want to give Washington Gas the satisfaction of knowing that I gave up a 2 percent return because of its janky user interface. The only problem is that because I can’t automate a credit-card payment, I sometimes forget about this bill… which is what I suspect that call was about, not that the Washington Gas payment portal had any message of its own following up on the call.

Credit-card fraud doesn’t care how much you obsess about security

Once again, I have a credit card cut into pieces and dumped in a trash can, thanks to somebody trying to treat themselves to a spending spree on our account.

This time, the card was a Citi Double Cash MasterCard, and the transaction that got my attention was a $969.90 Lenovo purchase. Neither my wife nor I had any recollection of making that–and neither Citi nor Intuit’s Mint personal-finance app had flagged it as suspicious.

After spotting that in our account, I saw two other, sub-$10 transactions with “OTC Brands” that also didn’t match up with anybody’s memory. A 14-minute call later, Citi had canceled our cards and ordered up replacements–I can already shop online with the new number–and pledged to investigate these three sketchy purchases.

So overall, we got off easy. But the experience has been a useful reminder that sometimes security is entirely out of your hands. There’s nothing we could have done to stop this from happening; at best, Citi’s security would have flagged the Lenovo purchase and asked me to approve or deny it, as it did when an unknown party tried using our card in March of 2016 at a Ukrainian site.

And no, having an EMV chip on this card did not enhance its security for card-not-present transactions. Even if this card had required me to key in a PIN instead of sign for in-person purchases, that also would have likely made no difference online.

Sometimes you just have to hope that the system works–and when it doesn’t, hope that you don’t wait too long for the system to get your money back. Having gotten Equifaxed last year, I can confirm that things could be worse.