CRT license renewal ... issues ?

[CV32]

Just had an email from CRT regarding my upcoming auto renewal of my leisure license. The email is giving blurb about an 'enhancement' of the payment processing system. 

I have had to login, delete the current card detail and re enter it - very suspect, perhaps covering an issue or potential 'external influences' ie hack.

Has anyone else had similar in the last few weeks ?

 

We are writing to let you know about an important update to our card payment system. We have recently enhanced our payment processing to ensure continued compliance with industry security standards and to better protect your information.

Your licence renewal payment is scheduled to be processed on 22 January 2026. If you originally entered your card details on or before 15 December 2025, you will need to take a moment to update them to avoid any disruption.

What you need to do:

• Log in to your account
• Remove your existing card details
• Re-enter your current card information

[Ray T]

I would suggest you contact CRT to verifiey the validity of the request.

Looks dodgy to me.

Edited January 15 by Ray T

[IanD]

6 minutes ago, Ray T said:

I would suggest you contact CRT to verifiey the validity of the request.

Looks dodgy to me.

Assuming you do this via the genuine CRT website -- not an included link in the email which could be spoofed! -- why is it any dodgier than setting up card payment to CRT in the first place?

 

If the email does include a link, either don't follow it or check *very* carefully that it redirects to CART not a spoofed website. Much safer to go directly to CART as usual and log in there...

Edited January 15 by IanD

[Gybe Ho]

2 hours ago, IanD said:

Assuming you do this via the genuine CRT website -- not an included link in the email which could be spoofed! -- why is it any dodgier than setting up card payment to CRT in the first place?

 

 

Because as you warned...

 

2 hours ago, IanD said:

 

If the email does include a link, either don't follow it or check *very* carefully that it redirects to CART not a spoofed website. Much safer to go directly to CART as usual and log in there...

 

 

[CV32]

There were no links in the email, i went to my usual CRT login from my browser, logged in and deleted / re added the card details.

I have replied to license.support asking them why this is needed as a normal 'upgrade' or enhancement should not require customers re entering details they already have, unless there are reasons we are not party to.

[MtB]

6 hours ago, IanD said:

Assuming you do this via the genuine CRT website -- not an included link in the email which could be spoofed! -- why is it any dodgier than setting up card payment to CRT in the first place?

 

Because it needs doing at all?

[Gybe Ho]

3 hours ago, CV32 said:

asking them why this is needed as a normal 'upgrade' or enhancement should not require customers re entering details they already have, unless there are reasons we are not party to.

 

 

My guess is they have changed their card processing bankers for a lower transaction fee and there is a new software integration that mandates freshly provided card details. The CRT's CFO is a wheeler-dealer who would chase a small fractional gain in transaction fees, he has also made some serious money for the CRT through a more proactive investment fund. 

[LadyG]

I never leave my card details on any gadget.  I think its madness. I prefer to speak to someone, I am assuming their accounting software is robust.

Edited January 16 by LadyG

[Momac]

2 hours ago, LadyG said:

I never leave my card details on any gadget.  I think its madness. I prefer to speak to someone, I am assuming their accounting software is robust.

Only madness if the gadget is not secured by a pin or fingerprint or face recognition. Unfirtunately the speaking to someone option is becoming increasingly difficult.

[CV32]

Answer from the licensing team

 

The Trust's card payment transaction provider is moving all of it's clients from a previous European setup onto a dedicated UK payment platform as a result of the changes required following Brexit, and therefore has meant that we have in effect had to set everything up from new. While your card details may appear to show on your web licensing account, we don't actually hold them, as they are actually held in as a 'token'.  Given that we have now moved to essentially a new platform the old 'token' would not be recognised by the new platform, hence the need to remove and update to produce a fresh 'token' that will work on the new platform.