Names in Your cell

[guppy]

thats creepy.....the thiefs were smart

Clever thieving shites, i will have a word with wifey and kids about this one, thank-you for the warning.

That reminds me, somebody stole my credit card a few weeks ago, i'm not going to report it cos the thief spends less than my wife did.

[911]

OK, here's my pin number rant for the day.

We went to a local department store over the weekend and used Discover card. Swipped it through the machine, then the machine said to hand the card to the cashier. She turned the card over and typed in the PIN number on the back. I called the store and asked them why. The girl said to be sure that it was our card. ?????What???? She said she should have asked us for ID and I said she didn't.

I was then turned over to a supervisor with an attitude. She said that Discover, Master Card and American Express insist that they type that number into the system. I told them that thousands of employees now have access to my credit card PIN number. She said it's not their fault, it's the credit card companies. I have not called them yet, I spent all day calling my other credit card people who told me I was worrying for nothing! Duh, What?

So, long story short, don't use those cards in a swipe machine. I was always told not to give out that number and now those very people are telling me to give it out! Is it me? Am I confused about something?

[Bryn Mawr]

Originally Posted by 911

OK, here's my pin number rant for the day.

We went to a local department store over the weekend and used Discover card. Swipped it through the machine, then the machine said to hand the card to the cashier. She turned the card over and typed in the PIN number on the back. I called the store and asked them why. The girl said to be sure that it was our card. ?????What???? She said she should have asked us for ID and I said she didn't.

I was then turned over to a supervisor with an attitude. She said that Discover, Master Card and American Express insist that they type that number into the system. I told them that thousands of employees now have access to my credit card PIN number. She said it's not their fault, it's the credit card companies. I have not called them yet, I spent all day calling my other credit card people who told me I was worrying for nothing! Duh, What?

So, long story short, don't use those cards in a swipe machine. I was always told not to give out that number and now those very people are telling me to give it out! Is it me? Am I confused about something?

I think you'll find that the number she typed in was the CVV (Card Verificarion Value) and not the PIN. Normally it's only needed for Cardholder Not Present transactions but they can also use it for CP.

[911]

Originally Posted by Bryn Mawr

I think you'll find that the number she typed in was the CVV (Card Verificarion Value) and not the PIN. Normally it's only needed for Cardholder Not Present transactions but they can also use it for CP.

CP?

Yes, I understand that much. But if it's in their system, then anyone from the cashier to the president of the company will be able to use my card since they have access to that number, right? They can take my CC number and then use the other number to buy things off the internet and phone, correct?

[Bryn Mawr]

Originally Posted by 911

CP?

Yes, I understand that much. But if it's in their system, then anyone from the cashier to the president of the company will be able to use my card since they have access to that number, right? They can take my CC number and then use the other number to buy things off the internet and phone, correct?

CP is Cardholder Present as opposed to CNP.

On the Internet they use a protocol called 3 Domain Security where you have a conversation with your issuer independently of the merchants service provider to authenticate you before the merchant authorizes the transaction. This works well and is pretty safe. (I wouldn't know if Discover use it as that's a domestic US card that we don't get involved with).

MOTO, however, is the largest source of fraud in the business. They have CVV and AVS (Address Verification Service) as a check and many MOTO merchants will not deliver anywhere other than the card's registered address but it is not tight by any means. (All CVV does is to make sure that the person on the end of the 'phone has seen the card - not just picked up a zip zap receipt). In the UK we're introducing a system called 2FA which is similar to 3D Sec and will make life *much* safer but it will take time to become the norm.

BTW, the merchant system is not allowed to retain the CVV - it just passes it through and then drops it, but, as the TKMax fiasco proved, some merchant play fast and loose with the rules (and their acquirer will get a roasting from the card schemes for type approving the system that did it).


Probably too much information but I never was much good at walking away from work.

[Bill Sikes]

Originally Posted by 911

OK, here's my pin number rant for the day.

Are you liable for losses that the bank suffer due to the misuse of their card?

[Bryn Mawr]

Originally Posted by Bill Sikes

Are you liable for losses that the bank suffer due to the misuse of their card?

Not if you can show that you were not responsible for the transaction.

Definitely not for any transaction after you've reported you card lost, stolen or subject to fraud.

[Bill Sikes]

Originally Posted by Bryn Mawr

Not if you can show that you were not responsible for the transaction.

Definitely not for any transaction after you've reported you card lost, stolen or subject to fraud.

How can I show that I was not "responsible for the transaction"?

Say that I somehow "lose" my card - by absent-mindedness, or theft, or
whatever - I do not use it very often - perhaps a couple of times a year.
Can it be mis-used, if the only places that the PIN exists are in my head,
and in the bank's machinery? If I do not notice that it has gone for a week
or two, or three - what then?

If my card is mis-used, and I am not responsible, then who bears the
cost? The bank? A retailer, for example?