New answers tagged

5

Ask your credit card provider for a one-time card number. Or get a new account with a low limit. Put the credit card number (and maybe a short random string) in a plain text file. 7zip this file with AES encryption. Email the hotel with this file as an attachment. Phone them and tell them the password to decrypt the file. (You might have to do a bit of ...


2

It's quite common for hotels to pre authorise payment using your card details. This is to prove you are who you say you are and check you have sufficient funds for your stay. Although emailing may not be the safest way of sending your credit card details. Perhaps a phone call would be better but still not "secure" What I would suggest is that you opt to ...


0

This entire situation sounds wrong. The typical flow of a user purchase or transaction in this kind of environment would be as follows: Vendor site calls a payment provider API, passing details of the transaction: vendor ID, product name and identifier, cost breakdown, customer name and address if known, and sometimes other technical information such as ...


4

With a weak kitchen magnet this can take many passes and a fair amount of time. In fact if all you have is a fridge magnet you may be better off scraping the strip off. However a more powerful magnet can erase the card fairly quickly. See http://www.creditcards.com/credit-card-news/video-magnets-make-credit-card-mag-stripe-not-work-1457.php for details. ...


0

From my understanding there are 3 tracks on a card. Forget track 3 as it is not/hardly used. Swipe and sign cards (without EMV) have just track 1: %B1234567890123445^PADILLA/L.^99011200XXXX00000000?* EMV cards have track 2, which is just a copy of track 1, but without the first and second name in the middle: ...


2

TL;DR: Report that your card has been compromised to your bank and ask for a new one. You are the victim of a credit card fraud. Your bank (Bank A) noticed a suspicious activity with your debit card and froze it. As techraf said, report that this activity was indeed fraudulent to your bank. If some unauthorized transactions were approved, you can reclaim ...


2

An RFID reader system consists of an antenna connected to the proper "reader", i.e. hardware and software to process the signal received from the antenna, and then to the computer. A simple way to test RFID blocking would be to find the frequency used by your RFID tag, buy an appropriate RFID reader and antenna, put one card at a time into your wallet, ...


3

In addition to the other (correct answer), I'd like to add that (at least in Europe) with most banks credit card number and CVV are by default not sufficient to authorize a transaction. For example UBS forces you to choose a password that will be requested for any internet payment (and clearly it's not written on the credit card). Other banks in Italy do ...


20

An excerpt from another answer: You don't actually need the CVV to perform transactions, they're just required by most retailers as a means of verifying that you have the physical card in your possession. From Wikipedia (unsourced): It is not mandatory for a merchant to require the security code for making a transaction, hence the card ...


5

The most-authoritative reference on EMV replay (i.e., transaction cloning) is Peter Fillmore's latest talk from Syscan 2015 https://github.com/peterfillmore/Talk-Stuff/blob/master/Syscan2015/PeterFillmore_Syscan2015.pdf Another great resource is Ricardo Rodriguez's talk from Rooted 2015 ...



Top 50 recent answers are included