The tag has no wiki summary.

learn more… | top users | synonyms

53
votes
10answers
15k views

Can I scratch off the magnetic strip off a debit card to only allow chip and PIN?

I have been robbed in the past by thieves using my HSBC Debit Card (issued by UAE branch) to purchase mobile phones and accessories by signing for the purchases. While the card has chip & PIN ...
41
votes
4answers
9k views

Detecting skimmers and other ATM traps

This question has been bothering me ever since I first heard of ATM skimmers: Instances of skimming have been reported where the perpetrator has put a device over the card slot* of an ATM ...
37
votes
5answers
10k views

What's the impact of disclosing the front-face of a credit or debit card?

There are quite a few cases where people are called out for disclosing the front-face of a credit or debit card (e.g. this tweet from Brian Krebs or this twitter account). So I was wondering what the ...
30
votes
7answers
2k views

Dealing with excessive “Carding” attempts

We are currently setup using Magento on a LAMP stack for our e-commerce platform. As of a month or two ago we began noticing a lot of carding attempts against our website. All attempted transactions ...
23
votes
7answers
5k views

How to prevent cheating (extra votes) in online contests?

Mitigating Cheating & Voter Fraud in Online Contests… We run online contests of various sorts that involve users voting on entries (usually one vote per user per day). The prizes range from ...
22
votes
4answers
31k views

What is the use of stolen credit card details?

What can a person with stolen credit card details do? Buy porn? Buy tons of server resources to perform an attack? What else? I'm sure that if he buys books, shoes and bicycles or transfer funds ...
13
votes
5answers
435 views

I need ideas for blocking a single malevolent user

Let me throw out this problem I'm having to some of my technical peeps and see if you guys have any new suggestions: We have a website that sends text messages and voice mails for our clients. ...
12
votes
2answers
1k views

Should I change phone number and e-mail address after PayPal fraud?

I have been the victim of PayPal fraud. I hadn't used PayPal in a year and then within 9 days there were three unauthorized transactions on my account for a total of 150 Canadian dollars and 290 ...
9
votes
4answers
5k views

How do location-based apps avoid getting cheated by emulated GPS?

Some apps like Foursquare require the user to "check in" at physical places, in order to gain money benefits. Given that emulated GPS are available for customized versions of Android, it sounds easy ...
8
votes
5answers
13k views

How is Chase Mobile Deposit Secure?

Chase has this app that allows you to snap a picture of a check with your phone and deposit that check into your account. How do they prevent: Someone from depositing a check that's not written to ...
8
votes
1answer
720 views

Why is it hard to prevent scalpers from using bots to buy up lots of concert tickets?

The New York Times recently has an article that talks about how scalpers are using bots to programmatically buy up lots of concert tickets, making it harder for ordinary fans to buy up tickets. For ...
8
votes
2answers
311 views

Are social security numbers useless by themselves?

If 453.7 million social security numbers have been issued to date. And there are only 1 billion = 1000 million distinct 9 digit integer pairs. Then that means if I were to make up any 9 digits, that ...
7
votes
4answers
360 views

Candidate authentication in large scale assessment

First of all, I'd like to apologize beforehand if the questions I am about to ask are not really suitable for this site. I could not think of any other category to post under. Right, here goes. We're ...
7
votes
5answers
1k views

Preventing online voter fraud

As part of a promotional campaign, my company wants to launch a site where users (and potential users) of our product will be required to register and vote for certain choices. Depending on how ...
7
votes
3answers
695 views

Credit card fraud prevention

The project that I am working on requires processing of credit cards. Is there any way to detect cloned/counterfeit cards? Are there any proven workarounds to prevent credit card fraud or misuse? We ...
7
votes
5answers
575 views

How to prevent pay per show/click abuse?

We have a webapp. 3rd party websites put our banners on their pages (banner is a snippet of HTML). They are paid for it using "Pay per click" or "Pay per show" methods. So 3rd party website's owners ...
6
votes
3answers
454 views

Fraud prevention on online transactions

We operate an e-commerce website, and we're facing some big problems with payments. Very often, some customers get credit card data and use those in our store. So when the real credit card owner gets ...
5
votes
4answers
798 views

Signature instead of PIN, Visa card

Most of the credit cards require PIN to authorize transaction. Recently upon a transaction the merchant required my signature and not my PIN. I understand this is another sort of authorizing the ...
5
votes
4answers
618 views

Source code auditing and fake builds

I am wondering about source code auditing and how hard it would be to fake a build to be audited? Let me explain. Say I would be a dishonest programmer that would wish to put in some backdoor into ...
5
votes
1answer
629 views

Trying to prevent Cisco toll fraud

A little back story on the setup first; We have a Cisco VoIP setup at our remote office(where I'm at) and the main CCM/CCX/Unity setup is at the parent company across the US in Connecticut. We have ...
4
votes
2answers
1k views

How can I prevent my E-mail address from being used as the sender for fraudulent/scam messages?

Recently, me and at least one other person I know received an obvious scam E-mail that starts off something like this: We considered your resume to be very attractive and we thought the vacant ...
4
votes
2answers
449 views

What is the severity of a fake certificate?

I'm not a security specialist, thus reading this Google Blog post about a fake *.google.com certificate, raises a lot of concerns, if anyone can impersonate a website, especially a google website, my ...
4
votes
1answer
120 views

Giving merchant account information to web programmer

Our web programmer needs our merchant account information to set up our ecommerce site. He is asking for the "processor name", "processor ID" and "merchant ID". If I provide him with the information ...
4
votes
3answers
201 views

Best way to handle identity theft incident?

A user's email is hacked, contacts copied, and similar emails (look alike emails with minor spelling differences) are created by the attacker with the same name and avatar, sending relatively well ...
4
votes
1answer
50 views

Countermeasures for a family-member attack on a password reset procedure

Given an account reset procedures, there are usually some recovery questions, and in better implementations a link will be sent to confirm the password change via email or SMS. Therefore, the attacker ...
4
votes
1answer
122 views

What prevents “money card” (offline smartcard system) from getting duplicated for payment fraud?

I don't know how well known this system is or maybe there are equal systems better known international. So I'll introduce the related points of the system: It is a paymentsystem where your wallet is ...
3
votes
1answer
220 views

Fraud Mitigation - Card Present Transactions

When it comes to fraud screening for card not present transactions (credit card / debit card) there are a number of techniques / services that can be utilized to mitigate risks from fraudulent ...
3
votes
1answer
163 views

how can my bank have a wrong phone number entered with my personal account information?

the other day at our bank, while my wife and i were transferring some funds between accounts, we found that on one of the accounts, a phone number that has no relationship to either of us was listed ...
2
votes
4answers
1k views

How to detect bots clicking a link?

I own a url shortening service. I want to deliver only legitimate statistics to my clients. There are possible scenarios that a particular user writes a script to automatically open the shortened URL, ...
2
votes
1answer
66 views

How to protect myself from future fraud? [closed]

Recently, I had my credit/debit card from my bank "stolen." The thieves somehow got my card number and information and took quite a bit of money from my account. Fortunately, I was able to recover it ...
1
vote
1answer
173 views

“Inverted” asymmetric encryption

I am developing a system to prevent frauds in tickets. What do I need? An algorithm to generate a QR Code that will be shown to my clients in a ticket. An algorithm to validate (offline) the ...
1
vote
1answer
430 views

How long does it take for Google to detect click fraud and suspend an AdSense account? [closed]

Click farms can be hired to boost ad revenue. http://www.security-faqs.com/what-is-a-click-farm.html The click farm is made up of armies of low paid workers who’s job is to click on links, surf ...
1
vote
0answers
57 views

Telling the difference between a prepaid card and credit/debit card

In order to stop people abusing free trials, we can make sure new users are not reusing data from existing users and therefore not just signing up with a new account every month. It is reasonably ...
1
vote
0answers
18 views

Transaction without 3DS in some online websites is Fraud prone? [duplicate]

I use my MasterCard credit card for online transactions which uses SecureCode for preventing online frauds even though hackers knows our credit card details. I have come across many sites which is ...
1
vote
0answers
50 views

Properly secure an API [closed]

I'm working on an application that basically match (IRL) two kind of persons. On the client side, the frontend is a single page application with a flow that looks like this: Details -> Login -> ...
1
vote
2answers
94 views

I may have given a check to a scam organization is my account at risk

Can someone take money from my account with a check that has my routing number and my account number on it? I STUPIDLY gave a check to a "charity" organization that I cannot find on line and when I ...
0
votes
2answers
42 views

Library or service for rate limiting credit card transactions by IP [closed]

I have a simple product ordering form. A hacker is attempting to validate stolen credit card numbers by making two orders per minute with a bot. 99% of the orders are declined but some are ...
0
votes
1answer
77 views

How prevent online payment fraud? [closed]

What is the solution of independent payment authorization from hackers between bank and merchant? Some banks used SOAP protocol. I need another solution.
0
votes
1answer
61 views

How to maintain validity of user credentials?

In an example scenario consider that; I am a customer of organisation and I have two separate accounts with two different departments X and Y. I can login in to each department's website by using ...
0
votes
2answers
223 views

How do gift card resellers prevent sellers from re-using pin and card numbers

There are multiple gift card reseller sites that buy your gift cards and resell them at discounted price. I was wondering how these sites prevent sellers from reusing the pin and card number after it ...
-1
votes
3answers
112 views

Overwriting only Free Space with rubbish data to prevent data recovery?

I am aware of tools which write zeros or other useless data to fill up your harddrive, however so far all of the tools I have come across must fill up the entire harddrrive. My understanding of the ...
-2
votes
1answer
216 views

How much can you trust a (banking) site after it spams you? [closed]

How much can you trust a company that send you spam ? Many people, after registering with Moneybookers(Skrill) started to receive spam that included their real name (as inputted in Moneybookers ...