Join Early Retirement Today
Reply
 
Thread Tools Display Modes
Credit Card Security
Old 03-23-2016, 07:55 AM   #1
Gone but not forgotten
imoldernu's Avatar
 
Join Date: Jul 2012
Location: Peru
Posts: 6,335
Credit Card Security

This may have been discussed before, but yesterday hit home with me. Old person's rant.

With the change from swipe to insert (chip), about 1/3 of our local busiesses have made the credit card conversion. The more security , the better, or so I thought.

Two days ago, I made a CC purchase with my "insert chip" card. The item I bought didn't work, so I returned it. "I have to put the credit back on your card" from the cashier. So I took out the card, and as I was going to insert it in the scanner, she said,"Oh, that's ok... you can take back your card. The machine brought up your account". And she gave me the "credit receipt." the card never got closer than 2 feet from the scanner.

Hmmm.. how handy, and how easy. Yeah... but what if the guy behind me had a scanner and could pick up my account by just being close to me.

Aha!... So that's why they're selling those "secure" wallets on TV. $19.95 for one and you get the second one free, (just pay postage and handling).

I don't like this. First, I've got enough to keep in my pockets... wallet, glasses, phone, car keys etc. Trouble enough keeping all of these items corralled, but now one more. Plus the open/close nuisance, and then putting it all away, for the next time.

It's already taking longer to go through the checkout lanes, as customers "insert card", "wait", and "remove card" process unfolds. Now, it appears that the scanner can read the card (probably just the magnetic strip) anyway... as, presumably, can the thief, just from being near the scanner.

As I get older, multitasking gets more difficult. One of the great fears is losing my wallet. Multiple credit cards, Social Security Id, Drivers license, Voter ID, Medical Emergency info, Medicare, Medicare D, Medicare Supplement, Auto Ins. card, and pics of the grand kids. The $100 cash is the least of the worries about replacement. Now the lead lined CC holder.

Progress?

So... did you know that the scanner can pick up your account info without either inserting or swiping the card?
imoldernu is offline   Reply With Quote
Join the #1 Early Retirement and Financial Independence Forum Today - It's Totally Free!

Are you planning to be financially independent as early as possible so you can live life on your own terms? Discuss successful investing strategies, asset allocation models, tax strategies and other related topics in our online forum community. Our members range from young folks just starting their journey to financial independence, military retirees and even multimillionaires. No matter where you fit in you'll find that Early-Retirement.org is a great community to join. Best of all it's totally FREE!

You are currently viewing our boards as a guest so you have limited access to our community. Please take the time to register and you will gain a lot of great new features including; the ability to participate in discussions, network with our members, see fewer ads, upload photographs, create a retirement blog, send private messages and so much, much more!

Old 03-23-2016, 07:58 AM   #2
Administrator
MichaelB's Avatar
 
Join Date: Jan 2008
Location: Chicagoland
Posts: 40,580
Quote:
Originally Posted by imoldernu View Post

So... did you know that the scanner can pick up your account info without either inserting or swiping the card?
Are you certain they didn't bring up the transaction record, which has all the detail for that sale, including your CC info? That is common.
MichaelB is offline   Reply With Quote
Old 03-23-2016, 08:18 AM   #3
Gone but not forgotten
imoldernu's Avatar
 
Join Date: Jul 2012
Location: Peru
Posts: 6,335
Quote:
Originally Posted by MichaelB View Post
Are you certain they didn't bring up the transaction record, which has all the detail for that sale, including your CC info? That is common.
Yeah... I suppose, but I don't know how that happened, since she didn't do any manual input, or scan the return receipt. Possible by scanning the item bar code, but how did that match up to my account? It happened quickly. I did ask how it happened, and she brushed it off with "Oh, it just works that way."

I found this, but don't think it answered the question.
How Do Thieves Scan Credit Cards in Your Purse? | The Classroom | Synonym
imoldernu is offline   Reply With Quote
Old 03-23-2016, 08:19 AM   #4
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
easysurfer's Avatar
 
Join Date: Jun 2008
Posts: 13,130
I know when returning stuff at Wally World I've in the past brought out my cc thinking I need to put the return on my cc but the customer service person said they don't need it. They just scan the return receipt. Menards is the same way.
__________________
Have you ever seen a headstone with these words
"If only I had spent more time at work" ... from "Busy Man" sung by Billy Ray Cyrus
easysurfer is offline   Reply With Quote
Old 03-23-2016, 08:23 AM   #5
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
Gone4Good's Avatar
 
Join Date: Sep 2005
Posts: 5,381
I wouldn't worry much. Most of the rest of the world has been using Chip & Pin cards for a couple of decades now. It's not like this is new and unproven technology we're experimenting with.

I'd wager one of the innocent explanations already listed above pretty well explains things.
__________________
Retired early, traveling perpetually.
Gone4Good is offline   Reply With Quote
Old 03-23-2016, 08:46 AM   #6
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
pb4uski's Avatar
 
Join Date: Nov 2010
Location: Sarasota, FL & Vermont
Posts: 36,263
^^^^^ What they said...the store had your credit card details on file from when you did the purchase.
__________________
If something cannot endure laughter.... it cannot endure.
Patience is the art of concealing your impatience.
Slow and steady wins the race.

Retired Jan 2012 at age 56
pb4uski is offline   Reply With Quote
Old 03-23-2016, 09:13 AM   #7
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
audreyh1's Avatar
 
Join Date: Jan 2006
Location: Rio Grande Valley
Posts: 38,001
Quote:
Originally Posted by imoldernu View Post
So... did you know that the scanner can pick up your account info without either inserting or swiping the card?
No - it didn't pick up your card stuff over the air. That's not how chip cards work.
__________________
Retired since summer 1999.
audreyh1 is offline   Reply With Quote
Old 03-23-2016, 09:38 AM   #8
Gone but not forgotten
imoldernu's Avatar
 
Join Date: Jul 2012
Location: Peru
Posts: 6,335
Am thinking this isn't as simple as it first seemed. The link below explains in some more detail.

As I read it, the chief benefit of the chip, is that it works on a single transaction, then changes the approval code for the next. This would mean that once the purchase is made, using the inserted chip card, that the chip changes so that if the card is scammed, it could not be duplicated to use somewhere else for purchase purposes, because the chip code would be changed.

As to the reading the info on the magnetic strip... (not including the chip code) it sounds as if the card info could be read on the basis of "proximity", thus it would not have to be inserted into the scanner. This would account for the match up to my account, but without the ability to copy the card's chip variable code in order to make a purchase.

See if that's what it looks like to you.
8 FAQs about EMV credit cards

In any case, still a work in progress, so what is today, may not be tomorrow.
imoldernu is offline   Reply With Quote
Old 03-23-2016, 09:45 AM   #9
Thinks s/he gets paid by the post
gauss's Avatar
 
Join Date: Aug 2011
Posts: 3,594
What I think that you may wish to avoid is "contactless" technologies (NFC, RFID etc) with brand names such as Visa PayWave or MasterCard PayPass where your card information is indeed transferred over the air.

An EMV card is not required to have this feature.

Note the identifying icon on the cards at this link.

-gauss
gauss is offline   Reply With Quote
Old 03-23-2016, 01:49 PM   #10
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
Chuckanut's Avatar
 
Join Date: Aug 2011
Location: West of the Mississippi
Posts: 17,169
Quote:
Originally Posted by Gone4Good View Post
I wouldn't worry much. Most of the rest of the world has been using Chip & Pin cards for a couple of decades now. It's not like this is new and unproven technology we're experimenting with.
.
One problem is that for most of us in the USA it is not Chip&Pin, but Chip&Signature instead. When was the last time anybody really checked the signature on the back of your card? In fact, two of my chipped cards do not even offer me the option of having a Pin. The banks that issue these cards brag in their literature about the convenience of not having to memorize a pin.

Without the requirement that the card user enter the proper pin, a lot of security is missing. Still, it's better than the old fashioned swipe cards. At least intercepting one transaction does not give away the entire CC farm.
__________________
Comparison is the thief of joy

The worst decisions are usually made in times of anger and impatience.
Chuckanut is offline   Reply With Quote
Old 03-23-2016, 03:11 PM   #11
Moderator
braumeister's Avatar
 
Join Date: Feb 2010
Location: Flyover country
Posts: 25,197
Quote:
Originally Posted by Chuckanut View Post
When was the last time anybody really checked the signature on the back of your card?
Case in point:
DW has never signed her name on the signature line of a credit card. Instead, she has always printed ASK FOR ID in that space. She has done this for over a quarter of a century, and in all that time she has never actually been asked for ID.
braumeister is offline   Reply With Quote
Old 03-23-2016, 09:30 PM   #12
Recycles dryer sheets
 
Join Date: Mar 2016
Posts: 178
Quote:
Originally Posted by braumeister View Post
Case in point:
DW has never signed her name on the signature line of a credit card. Instead, she has always printed ASK FOR ID in that space. She has done this for over a quarter of a century, and in all that time she has never actually been asked for ID.
My DW is a smart woman but the one thing I never understood is she refuses to sign the back of the card and leaves it blank. It's so they can't get her signature, she tells me - then I say well, they wouldn't need it if they can just put their own signature on it if she loses the card. I don't press the point since no one ever looks anyway. We all have our quirks.
niven is offline   Reply With Quote
Old 03-23-2016, 10:22 PM   #13
Recycles dryer sheets
 
Join Date: Jan 2016
Location: near Phoenix
Posts: 189
I have 'ask for ID' on the back of my credit card. I am asked about half the time to show my drivers license, so it does work - on occasion
calico1597 is offline   Reply With Quote
Old 03-23-2016, 11:10 PM   #14
Recycles dryer sheets
 
Join Date: Mar 2016
Posts: 178
Quote:
Originally Posted by calico1597 View Post
I have 'ask for ID' on the back of my credit card. I am asked about half the time to show my drivers license, so it does work - on occasion
Possibly - it's also possible that it's normal procedure depending on where you live and how often fraud occurs. I've been on trips where they ask for ID frequently, even though I've signed the back of my card. Where I live, I don't think I've ever been asked.
niven is offline   Reply With Quote
Old 03-24-2016, 06:21 AM   #15
Thinks s/he gets paid by the post
misanman's Avatar
 
Join Date: Apr 2008
Posts: 1,246
A restaurant mixed up the credit cards for two couples that we know (both cards from the same bank). Both cards were signed, but it didn't matter. Neither couple noticed the exchange until they received their bills and didn't recognize the purchases (including a set of four tires). Since they live in different states they were able to pretty quickly figure out what happened once they had the bills in hand.
__________________
"Don't you draw the queen of diamonds, boy, she'll beat you if she's able.
You know the queen of hearts is always your best bet" -- The Eagles, Desperado
misanman is offline   Reply With Quote
Old 03-24-2016, 12:22 PM   #16
Moderator Emeritus
M Paquette's Avatar
 
Join Date: Oct 2007
Location: Portland
Posts: 4,946
The store clerk likely scanned (or keyed in in a few places) a transaction code from your receipt. Scanning this just takes a fraction of a second. With a 'chipped' card, the store does not have all your credit card information. They do have the 'one shot' virtual credit card number that the chip generated while in the reader, and then can roll back part or all of that transaction. A thief in possession of the one shot virtual card number can't really do anything with it.
M Paquette is offline   Reply With Quote
Old 03-24-2016, 02:16 PM   #17
Administrator
Alan's Avatar
 
Join Date: Jul 2005
Location: N. Yorkshire
Posts: 34,050
Quote:
Originally Posted by niven View Post
My DW is a smart woman but the one thing I never understood is she refuses to sign the back of the card and leaves it blank. It's so they can't get her signature, she tells me - then I say well, they wouldn't need it if they can just put their own signature on it if she loses the card. I don't press the point since no one ever looks anyway. We all have our quirks.
We were in Australia in 2013 and visiting a small historic site on the Great Ocean Road with only one cashier selling entrance tickets. At the front of the queue was an American lady who tried to pay with her unsigned credit card. The attendant refused to take it and also refused to allow her to sign the back of it. It took several minutes of digging in her purse before she was able to produce a picture id with signature that was deemed acceptable.

When we had arrived in July we saw many posters and TV ads advertising that from August 1st CHIP & PIN was the only type of acceptable card and that signatures would not be legally acceptable. In reality we only came across one issue with our CHIP and Signature card and that was in a gas station in "Nowhere", Queensland where the poor lady got pretty stressed and had me write a note to her boss explaining why I didn't have a CHIP & PIN card. (There wasn't even an ATM in the place for me to get enough cash to pay)
__________________
Retired in Jan, 2010 at 55, moved to England in May 2016
Enough private pension and SS income to cover all needs
Alan is offline   Reply With Quote
Old 03-24-2016, 02:40 PM   #18
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
Sunset's Avatar
 
Join Date: Jul 2014
Location: Spending the Kids Inheritance and living in Chicago
Posts: 17,008
Quote:
Originally Posted by Chuckanut View Post
One problem is that for most of us in the USA it is not Chip&Pin, but Chip&Signature instead. When was the last time anybody really checked the signature on the back of your card? In fact, two of my chipped cards do not even offer me the option of having a Pin. The banks that issue these cards brag in their literature about the convenience of not having to memorize a pin.

Without the requirement that the card user enter the proper pin, a lot of security is missing. Still, it's better than the old fashioned swipe cards. At least intercepting one transaction does not give away the entire CC farm.

A Pin would stop stolen CC from being used in nearly all places. As it stands if someone steals your cc , they can insert and spend to their hearts content.

I bet there will be more "stolen" CC as folks will forget them in the machine, vs the swipe where you never let go of it.
Sunset is offline   Reply With Quote
Old 03-24-2016, 02:42 PM   #19
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
Sunset's Avatar
 
Join Date: Jul 2014
Location: Spending the Kids Inheritance and living in Chicago
Posts: 17,008
Quote:
Originally Posted by Alan View Post
We were in Australia in 2013 and visiting a small historic site on the Great Ocean Road with only one cashier selling entrance tickets. At the front of the queue was an American lady who tried to pay with her unsigned credit card. The attendant refused to take it and also refused to allow her to sign the back of it. It took several minutes of digging in her purse before she was able to produce a picture id with signature that was deemed acceptable...
I had that happen to me, I had forgotten to sign the back, and the clerk said "I can't take this card because it's not signed".
So I took the card back, signed it right there and handed it back, where she processed the purchase
Sunset is offline   Reply With Quote
Old 03-24-2016, 03:18 PM   #20
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
 
Join Date: May 2008
Posts: 7,422
I used Apple Pay a lot in New Zealand last month.

Far more than I've been able to use it here in Silicon Valley.

NFC is the technology used for wireless communications between a smart phone and a POS reader. It stands for Near Field Communications so it can't be picked up from the other side of the store or outside of it.

Plus, Apple Pay isn't sending your actual credit card number or even your name. So even if they intercepted the communications between the iPhone and the POS, that info. wouldn't be of any use to them. Also pretty sure the credit card, when it's authorized for use in Apple Pay, is tied to the device ID, which is unique to each device.
explanade is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Charge Card vs Credit Card mickeyd FIRE and Money 7 10-28-2010 11:12 AM
Will closing a credit card hurt my wife's credit score? bank5 Other topics 4 06-03-2009 06:01 AM
Pre Paid Credit Card/ Gas Card or Credit Card nphx Other topics 4 04-29-2008 01:04 PM
Best cash rewards credit card for someone with no credit history? summer2007 FIRE and Money 11 10-16-2007 02:23 AM
Best Bonus for Credit Card Expenitures -Frequent Flyer cards or Cash-back card? ScaredtoQuit FIRE and Money 19 04-21-2007 03:29 PM

» Quick Links

 
All times are GMT -6. The time now is 03:40 AM.
 
Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2024, vBulletin Solutions, Inc.