|
|
03-23-2016, 07:55 AM
|
#1
|
Gone but not forgotten
Join Date: Jul 2012
Location: Peru
Posts: 6,335
|
Credit Card Security
This may have been discussed before, but yesterday hit home with me. Old person's rant.
With the change from swipe to insert (chip), about 1/3 of our local busiesses have made the credit card conversion. The more security , the better, or so I thought.
Two days ago, I made a CC purchase with my "insert chip" card. The item I bought didn't work, so I returned it. "I have to put the credit back on your card" from the cashier. So I took out the card, and as I was going to insert it in the scanner, she said,"Oh, that's ok... you can take back your card. The machine brought up your account". And she gave me the "credit receipt." the card never got closer than 2 feet from the scanner.
Hmmm.. how handy, and how easy. Yeah... but what if the guy behind me had a scanner and could pick up my account by just being close to me.
Aha!... So that's why they're selling those "secure" wallets on TV. $19.95 for one and you get the second one free, (just pay postage and handling).
I don't like this. First, I've got enough to keep in my pockets... wallet, glasses, phone, car keys etc. Trouble enough keeping all of these items corralled, but now one more. Plus the open/close nuisance, and then putting it all away, for the next time.
It's already taking longer to go through the checkout lanes, as customers "insert card", "wait", and "remove card" process unfolds. Now, it appears that the scanner can read the card (probably just the magnetic strip) anyway... as, presumably, can the thief, just from being near the scanner.
As I get older, multitasking gets more difficult. One of the great fears is losing my wallet. Multiple credit cards, Social Security Id, Drivers license, Voter ID, Medical Emergency info, Medicare, Medicare D, Medicare Supplement, Auto Ins. card, and pics of the grand kids. The $100 cash is the least of the worries about replacement. Now the lead lined CC holder.
Progress?
So... did you know that the scanner can pick up your account info without either inserting or swiping the card?
|
|
|
|
Join the #1 Early Retirement and Financial Independence Forum Today - It's Totally Free!
Are you planning to be financially independent as early as possible so you can live life on your own terms? Discuss successful investing strategies, asset allocation models, tax strategies and other related topics in our online forum community. Our members range from young folks just starting their journey to financial independence, military retirees and even multimillionaires. No matter where you fit in you'll find that Early-Retirement.org is a great community to join. Best of all it's totally FREE!
You are currently viewing our boards as a guest so you have limited access to our community. Please take the time to register and you will gain a lot of great new features including; the ability to participate in discussions, network with our members, see fewer ads, upload photographs, create a retirement blog, send private messages and so much, much more!
|
03-23-2016, 07:58 AM
|
#2
|
Administrator
Join Date: Jan 2008
Location: Chicagoland
Posts: 40,580
|
Quote:
Originally Posted by imoldernu
So... did you know that the scanner can pick up your account info without either inserting or swiping the card?
|
Are you certain they didn't bring up the transaction record, which has all the detail for that sale, including your CC info? That is common.
|
|
|
03-23-2016, 08:18 AM
|
#3
|
Gone but not forgotten
Join Date: Jul 2012
Location: Peru
Posts: 6,335
|
Quote:
Originally Posted by MichaelB
Are you certain they didn't bring up the transaction record, which has all the detail for that sale, including your CC info? That is common.
|
Yeah... I suppose, but I don't know how that happened, since she didn't do any manual input, or scan the return receipt. Possible by scanning the item bar code, but how did that match up to my account? It happened quickly. I did ask how it happened, and she brushed it off with "Oh, it just works that way."
I found this, but don't think it answered the question.
How Do Thieves Scan Credit Cards in Your Purse? | The Classroom | Synonym
|
|
|
03-23-2016, 08:19 AM
|
#4
|
Give me a museum and I'll fill it. (Picasso) Give me a forum ...
Join Date: Jun 2008
Posts: 13,130
|
I know when returning stuff at Wally World I've in the past brought out my cc thinking I need to put the return on my cc but the customer service person said they don't need it. They just scan the return receipt. Menards is the same way.
__________________
Have you ever seen a headstone with these words
"If only I had spent more time at work" ... from "Busy Man" sung by Billy Ray Cyrus
|
|
|
03-23-2016, 08:23 AM
|
#5
|
Give me a museum and I'll fill it. (Picasso) Give me a forum ...
Join Date: Sep 2005
Posts: 5,381
|
I wouldn't worry much. Most of the rest of the world has been using Chip & Pin cards for a couple of decades now. It's not like this is new and unproven technology we're experimenting with.
I'd wager one of the innocent explanations already listed above pretty well explains things.
__________________
Retired early, traveling perpetually.
|
|
|
03-23-2016, 08:46 AM
|
#6
|
Give me a museum and I'll fill it. (Picasso) Give me a forum ...
Join Date: Nov 2010
Location: Sarasota, FL & Vermont
Posts: 36,263
|
^^^^^ What they said...the store had your credit card details on file from when you did the purchase.
__________________
If something cannot endure laughter.... it cannot endure.
Patience is the art of concealing your impatience.
Slow and steady wins the race.
Retired Jan 2012 at age 56
|
|
|
03-23-2016, 09:13 AM
|
#7
|
Give me a museum and I'll fill it. (Picasso) Give me a forum ...
Join Date: Jan 2006
Location: Rio Grande Valley
Posts: 38,001
|
Quote:
Originally Posted by imoldernu
So... did you know that the scanner can pick up your account info without either inserting or swiping the card?
|
No - it didn't pick up your card stuff over the air. That's not how chip cards work.
__________________
Retired since summer 1999.
|
|
|
03-23-2016, 09:38 AM
|
#8
|
Gone but not forgotten
Join Date: Jul 2012
Location: Peru
Posts: 6,335
|
Am thinking this isn't as simple as it first seemed. The link below explains in some more detail.
As I read it, the chief benefit of the chip, is that it works on a single transaction, then changes the approval code for the next. This would mean that once the purchase is made, using the inserted chip card, that the chip changes so that if the card is scammed, it could not be duplicated to use somewhere else for purchase purposes, because the chip code would be changed.
As to the reading the info on the magnetic strip... (not including the chip code) it sounds as if the card info could be read on the basis of "proximity", thus it would not have to be inserted into the scanner. This would account for the match up to my account, but without the ability to copy the card's chip variable code in order to make a purchase.
See if that's what it looks like to you.
8 FAQs about EMV credit cards
In any case, still a work in progress, so what is today, may not be tomorrow.
|
|
|
03-23-2016, 09:45 AM
|
#9
|
Thinks s/he gets paid by the post
Join Date: Aug 2011
Posts: 3,594
|
What I think that you may wish to avoid is "contactless" technologies (NFC, RFID etc) with brand names such as Visa PayWave or MasterCard PayPass where your card information is indeed transferred over the air.
An EMV card is not required to have this feature.
Note the identifying icon on the cards at this link.
-gauss
|
|
|
03-23-2016, 01:49 PM
|
#10
|
Give me a museum and I'll fill it. (Picasso) Give me a forum ...
Join Date: Aug 2011
Location: West of the Mississippi
Posts: 17,169
|
Quote:
Originally Posted by Gone4Good
I wouldn't worry much. Most of the rest of the world has been using Chip & Pin cards for a couple of decades now. It's not like this is new and unproven technology we're experimenting with.
.
|
One problem is that for most of us in the USA it is not Chip&Pin, but Chip&Signature instead. When was the last time anybody really checked the signature on the back of your card? In fact, two of my chipped cards do not even offer me the option of having a Pin. The banks that issue these cards brag in their literature about the convenience of not having to memorize a pin.
Without the requirement that the card user enter the proper pin, a lot of security is missing. Still, it's better than the old fashioned swipe cards. At least intercepting one transaction does not give away the entire CC farm.
__________________
Comparison is the thief of joy
The worst decisions are usually made in times of anger and impatience.
|
|
|
03-23-2016, 03:11 PM
|
#11
|
Moderator
Join Date: Feb 2010
Location: Flyover country
Posts: 25,197
|
Quote:
Originally Posted by Chuckanut
When was the last time anybody really checked the signature on the back of your card?
|
Case in point:
DW has never signed her name on the signature line of a credit card. Instead, she has always printed ASK FOR ID in that space. She has done this for over a quarter of a century, and in all that time she has never actually been asked for ID.
|
|
|
03-23-2016, 09:30 PM
|
#12
|
Recycles dryer sheets
Join Date: Mar 2016
Posts: 178
|
Quote:
Originally Posted by braumeister
Case in point:
DW has never signed her name on the signature line of a credit card. Instead, she has always printed ASK FOR ID in that space. She has done this for over a quarter of a century, and in all that time she has never actually been asked for ID.
|
My DW is a smart woman but the one thing I never understood is she refuses to sign the back of the card and leaves it blank. It's so they can't get her signature, she tells me - then I say well, they wouldn't need it if they can just put their own signature on it if she loses the card. I don't press the point since no one ever looks anyway. We all have our quirks.
|
|
|
03-23-2016, 10:22 PM
|
#13
|
Recycles dryer sheets
Join Date: Jan 2016
Location: near Phoenix
Posts: 189
|
I have 'ask for ID' on the back of my credit card. I am asked about half the time to show my drivers license, so it does work - on occasion
|
|
|
03-23-2016, 11:10 PM
|
#14
|
Recycles dryer sheets
Join Date: Mar 2016
Posts: 178
|
Quote:
Originally Posted by calico1597
I have 'ask for ID' on the back of my credit card. I am asked about half the time to show my drivers license, so it does work - on occasion
|
Possibly - it's also possible that it's normal procedure depending on where you live and how often fraud occurs. I've been on trips where they ask for ID frequently, even though I've signed the back of my card. Where I live, I don't think I've ever been asked.
|
|
|
03-24-2016, 06:21 AM
|
#15
|
Thinks s/he gets paid by the post
Join Date: Apr 2008
Posts: 1,246
|
A restaurant mixed up the credit cards for two couples that we know (both cards from the same bank). Both cards were signed, but it didn't matter. Neither couple noticed the exchange until they received their bills and didn't recognize the purchases (including a set of four tires). Since they live in different states they were able to pretty quickly figure out what happened once they had the bills in hand.
__________________
"Don't you draw the queen of diamonds, boy, she'll beat you if she's able.
You know the queen of hearts is always your best bet" -- The Eagles, Desperado
|
|
|
03-24-2016, 12:22 PM
|
#16
|
Moderator Emeritus
Join Date: Oct 2007
Location: Portland
Posts: 4,946
|
The store clerk likely scanned (or keyed in in a few places) a transaction code from your receipt. Scanning this just takes a fraction of a second. With a 'chipped' card, the store does not have all your credit card information. They do have the 'one shot' virtual credit card number that the chip generated while in the reader, and then can roll back part or all of that transaction. A thief in possession of the one shot virtual card number can't really do anything with it.
|
|
|
03-24-2016, 02:16 PM
|
#17
|
Administrator
Join Date: Jul 2005
Location: N. Yorkshire
Posts: 34,050
|
We were in Australia in 2013 and visiting a small historic site on the Great Ocean Road with only one cashier selling entrance tickets. At the front of the queue was an American lady who tried to pay with her unsigned credit card. The attendant refused to take it and also refused to allow her to sign the back of it. It took several minutes of digging in her purse before she was able to produce a picture id with signature that was deemed acceptable.
When we had arrived in July we saw many posters and TV ads advertising that from August 1st CHIP & PIN was the only type of acceptable card and that signatures would not be legally acceptable. In reality we only came across one issue with our CHIP and Signature card and that was in a gas station in "Nowhere", Queensland where the poor lady got pretty stressed and had me write a note to her boss explaining why I didn't have a CHIP & PIN card. (There wasn't even an ATM in the place for me to get enough cash to pay)
__________________
Retired in Jan, 2010 at 55, moved to England in May 2016
Enough private pension and SS income to cover all needs
|
|
|
03-24-2016, 02:40 PM
|
#18
|
Give me a museum and I'll fill it. (Picasso) Give me a forum ...
Join Date: Jul 2014
Location: Spending the Kids Inheritance and living in Chicago
Posts: 17,008
|
Quote:
Originally Posted by Chuckanut
One problem is that for most of us in the USA it is not Chip&Pin, but Chip&Signature instead. When was the last time anybody really checked the signature on the back of your card? In fact, two of my chipped cards do not even offer me the option of having a Pin. The banks that issue these cards brag in their literature about the convenience of not having to memorize a pin.
Without the requirement that the card user enter the proper pin, a lot of security is missing. Still, it's better than the old fashioned swipe cards. At least intercepting one transaction does not give away the entire CC farm.
|
A Pin would stop stolen CC from being used in nearly all places. As it stands if someone steals your cc , they can insert and spend to their hearts content.
I bet there will be more "stolen" CC as folks will forget them in the machine, vs the swipe where you never let go of it.
|
|
|
03-24-2016, 02:42 PM
|
#19
|
Give me a museum and I'll fill it. (Picasso) Give me a forum ...
Join Date: Jul 2014
Location: Spending the Kids Inheritance and living in Chicago
Posts: 17,008
|
Quote:
Originally Posted by Alan
We were in Australia in 2013 and visiting a small historic site on the Great Ocean Road with only one cashier selling entrance tickets. At the front of the queue was an American lady who tried to pay with her unsigned credit card. The attendant refused to take it and also refused to allow her to sign the back of it. It took several minutes of digging in her purse before she was able to produce a picture id with signature that was deemed acceptable...
|
I had that happen to me, I had forgotten to sign the back, and the clerk said "I can't take this card because it's not signed".
So I took the card back, signed it right there and handed it back, where she processed the purchase
|
|
|
03-24-2016, 03:18 PM
|
#20
|
Give me a museum and I'll fill it. (Picasso) Give me a forum ...
Join Date: May 2008
Posts: 7,422
|
I used Apple Pay a lot in New Zealand last month.
Far more than I've been able to use it here in Silicon Valley.
NFC is the technology used for wireless communications between a smart phone and a POS reader. It stands for Near Field Communications so it can't be picked up from the other side of the store or outside of it.
Plus, Apple Pay isn't sending your actual credit card number or even your name. So even if they intercepted the communications between the iPhone and the POS, that info. wouldn't be of any use to them. Also pretty sure the credit card, when it's authorized for use in Apple Pay, is tied to the device ID, which is unique to each device.
|
|
|
|
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
|
|
Thread Tools |
|
Display Modes |
Linear Mode
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
|
» Recent Threads
|
|
|
|
|
|
|
|
|
|
|
|
|
» Quick Links
|
|
|