A charge from EOFT.XYZ on your bank or credit card statement is an unauthorized billing tied to a fraudulent operation, not a purchase you forgot about. The pattern is consistent across consumer reports: a small test charge of about $1.85 or $1.95, followed within a day or two by a larger hit of $36 or more, sometimes recurring at $49.95 and billed as “digital goods.”1Zoom Community. Scam Credit Card Fraud via Zoom Link2ScamPulse. Fraudulent Charges Reviews The small opener is a known tactic: fraudsters use low-dollar authorizations to confirm an account is active before pushing bigger amounts through.3Office of the Comptroller of the Currency. Credit Card and Debit Card Fraud If you see this descriptor, treat the card itself as compromised and move on both the charge and the card.
How Your Card Details Were Captured
The most documented path to an EOFT.XYZ charge is a fake Zoom meeting link. A user on the Zoom Community forums described joining what looked like a normal meeting, hitting a long delay, and then being redirected to a page requesting a credit card as if payment were needed to enter. Legitimate Zoom meetings never charge attendees to join. After entering the card, the user was billed $1.85, then roughly $36 the next day, both under the vendor name EOFT-XYZ.1Zoom Community. Scam Credit Card Fraud via Zoom Link If you entered card details on any screen tied to a Zoom link recently, that is almost certainly where the number was taken.
Dispute the Charge With Your Card Issuer
What you do next, and how quickly, depends on whether the charge hit a credit card or a debit card. The protections are not the same.
If It Hit a Credit Card
Credit card fraud is covered by the Fair Credit Billing Act. Your liability for unauthorized charges is capped at $50, and most issuers go further with zero-liability policies.4FTC. Using Credit Cards and Disputing Charges To preserve your full rights, send a written dispute to your issuer’s billing inquiry address within 60 days of the statement date showing the charge. Include your account number, the specific charge, and a statement that it was unauthorized. The issuer must acknowledge the dispute within 30 days and resolve it within 90 days.5Consumer Financial Protection Bureau. How Do I Dispute a Charge on My Credit Card Bill While the dispute is open, the issuer cannot try to collect the amount, charge interest on it, or report you as delinquent on it.
If It Hit a Debit Card
Debit card fraud is governed by the Electronic Fund Transfer Act, and the timing matters more. Report the unauthorized transfer within two business days of discovering it and your liability is limited to $50. Between two business days and 60 days after the statement date, it can rise to $500. Past 60 days, you can face unlimited liability for transfers that occur after that window.6Consumer Financial Protection Bureau. Regulation E – Section 1005.6 The burden is on the bank to show a transfer was authorized or that the conditions for higher liability were met.7Cornell Law Institute. 15 U.S. Code Section 1693g Call the bank the same day you spot the charge.
Replace the Card, Not Just the Charge
Disputing the single transaction will not stop the next one, because the card number itself is in a scammer’s hands. The user in the Zoom Community report ultimately had to close the credit card account entirely to stop further billing after the bank confirmed the charges as fraudulent.1Zoom Community. Scam Credit Card Fraud via Zoom Link The FTC gives the same guidance for persistent unauthorized charges: canceling the card may be the only way to stop the cycle.8FTC. How To Stop Subscriptions You Never Ordered Ask your issuer to cancel the compromised number and reissue a new card.
Who Is Behind EOFT.XYZ
WHOIS records for the eoft.xyz domain identify the registrant as Broodish International, Inc., a Florida entity, with the domain registered through UK registrar Safenames Ltd.9ScamAdviser. Check Website: eoft.xyz The Better Business Bureau has rated Broodish International “F” and lists several related domains on its profile, including e-oft.com, runawayplaytime.net, and rnyply.net. Consumer complaints on the BBB page describe unauthorized charges, some as small as $1.95, with multiple filers calling the business a scam.10Better Business Bureau. Broodish International, Inc. ScamAdviser rates the domain 48 out of 100 and labels it “Caution Recommended.” None of this gets your money back on its own, but it tells you the descriptor is not a mistyped legitimate vendor you can call for a refund.
Where to Report It
After the bank, file reports with the agencies that track this kind of fraud. These filings feed law enforcement databases rather than issuing refunds, but they build the paper trail that cases are made from.
- Federal Trade Commission at ReportFraud.ftc.gov or 877-382-4357. Reports go into the Consumer Sentinel database shared with more than 2,000 law enforcement partners.11FTC. ReportFraud.ftc.gov FAQ
- FBI Internet Crime Complaint Center at ic3.gov, which handles internet-based financial fraud including credit card fraud under 18 U.S.C. § 1029.12FBI IC3. Internet Crime Complaint Center
- Consumer Financial Protection Bureau, online or at 855-411-2372. The CFPB forwards complaints to the company and shares data with state and federal enforcement.13Consumer Financial Protection Bureau. Submit a Complaint
- The domain registrar, Safenames Ltd, through its abuse reporting form at safenames.net/abusereport.14Safenames. Abuse Policy Guidelines