Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [credit-card]

Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).

4
votes
3answers
135 views

Drivers license required for online purchases

Problem I tried to buy a few things from a particular industry, and the sellers are independently all asking for a copy of my drivers license to verify that it matches the details on the card because ...
0
votes
1answer
33 views

Is PCI - DSS required to store only card number

We need to save the credit card number in our database , but not the cvv. Should we be PCI - DSS compliant for this or some security measures is enough. After the save we will use that to call stripe ...
226
votes
7answers
32k views

All 0s (zeros) in a bank card's CVC code

My bank card recently expired. I got a new one and this one turned out to be "lucky": its CVC code was 000. For a few months I used it extensively, both online and offline, without any difficulties - ...
1
vote
2answers
91 views

Is taking CC info in plain HTML elements, but using a library like Stripe to tokenize PCI compliant?

I am building a site which will accept payments. I will be processing payments with either Stripe or Square. Stripe now has Stripe Elements, and Square has Square Payment Form. I have tried Square ...
1
vote
0answers
70 views

Possible phishing victim. How to proceed? [closed]

I was trying to buy tickets for a show on an official web page. This will be the last show of this band so the server went down pretty quickly. The band tweeted about difficulties and then someone ...
0
votes
2answers
114 views

How secure is it to send credit card information partially over email and text?

I need to pass credit card information for a travel reservation, and I am thinking of splitting it over email and text. The credit card number itself would be send over text, while expiration date and ...
2
votes
1answer
56 views

Storing credit card token [closed]

I am working on a membership site which is based on monthly and annual subscription. My payment processor supports recurring payments via "credit card tokens". What's the best way to store these ...
4
votes
2answers
166 views

Online Retailer asks for a copy of Credit Card and Drivers License

This weekend I placed an order for a part from an online retailer ($300-400). Shortly thereafter I received an email from their sales team saying something similar to the following: Hi, we have ...
3
votes
2answers
160 views

When paying by card on a website, will fake payment information make the order fail?

When ordering online websites often redirect to a payment service like 2Checkout (see image below). On their page I must specify my personal information (like name, address, city, sometimes birth date)...
1
vote
1answer
192 views

Can someone clone emv chip card by knowing the magnetic stripe info? [duplicate]

Lets consider that someone skimmed the magnetic stripe of a credit/debit card which also has an emv chip. Can this info be translated and stored into an emv chip? And if this is possible, it is ...
2
votes
0answers
81 views

Disable Google API key without access to google account

I was trying the new google api - I created anonymous account - added there my debit card, set up the API key for google maps. Tried API and pushed my API key to shared repository (yes I know - my ...
0
votes
1answer
67 views

Odd characters — including a backslash — in magstripe track 1 name field?

I've been in the Point of Sale industry for decades. Parsing card magnetic stripe track 1 data has never been difficult, but lately we've started to see some odd data in the name field of cards that ...
1
vote
2answers
87 views

Audio Recording of my Credit Card Info?

If I call into a call center to order a product or service, and they take my credit card - do I have any assurance they are not recording the phone call "for quality purposes" which includes my credit ...
3
votes
1answer
86 views

CVV credit card change [closed]

Is there a certain formula that the bank uses when changing the CVV (Card Verification Value), on a credit card. If I am trying to keep credit cards on file and they expire I know there is a form that ...
1
vote
2answers
99 views

credit card safety

location: india While talking to a customer support executive of British airways (number: 1860 180 3592) for payment of extra baggage, he asked for my credit card number, expiry date and cvv number. ...
-1
votes
1answer
208 views

People using my email address (and only that) for booking hotels. What kind of scam is this?

I have faced the same issue twice: 2 people, whose names are definitely not the same as mine, used my email address to book hotels through a well-known hotel company and a lesser-known hotel booking ...
-1
votes
1answer
64 views

Question about saving credit card info on PW reset [PCI]

I work for a retail organization with a large ecommerce presence. We allow our customers to store CC information for easy check-out, like many retailers. Currently we remove all stored CC ...
0
votes
1answer
77 views

PCI Compliance and Card Data Transmit

I have read that PCI enforces the merchants to store first six and last four digits are the maximum number of digits that may be displayed/stored. I am trying to find what is required in regards to ...
2
votes
5answers
1k views

I have to write down credit card information on paper and send it. How can I minimize my risk?

I am filling out a form to set up a recurring payment with a local government building. The form requests that I put my credit card number, expiration date, and CVV number, which I'm a little hesitant ...
1
vote
2answers
391 views

Store credit card numbers in password manager?

I pay various things online with my credit card. In order to save the time of taking out my wallet and typing the number to the field, I have two options: Store the credit card number with the ...
0
votes
0answers
66 views

Cloning Contactless Credit Cards [duplicate]

I have the idea to inject an RFID/NFC chip in my hand and use it for payments and some other stuff. As far as I understand, Visa Paywave is just an RFID chip with a specific ID in it, I've tried ...
2
votes
2answers
172 views

Frequent flyer number security risk or not?

Many booking websites or tickets "re-sellers" expose in plain view for the current authenticated user the commonly used "Frequent flyer number". Should this be considered a security risk? Can this ...
4
votes
1answer
107 views

Debit Card was used fraduentely, Should I report an incident to the websites that stored my card?

Here is my situation. I had a debit card where I could transfer funds to it for limited use. I usually kept a low amount on this card just for little purchases. It was recently used in a fraudulent ...
5
votes
2answers
192 views

iTunes Account Joined Family Group Without Permission

A few weeks ago now I received an email that someone (not me) had made some in-game purchases on an iTunes account. I logged into my iTunes account and saw the transactions and that my account was ...
0
votes
0answers
64 views

Ossec With AlienVault Looking For Credit Card Information PCI

I am trying to use OSSEC with Alienvault to have some sort of file integrity monitoring. I have installed the ossec agent and I want to look for files containing credit card information. I found this ...
28
votes
1answer
6k views

Are credit-card security codes theoretically insecure (if not entirely broken) already?

I was reading the Wikipedia article on Card security codes (CSC, CVD, CVV, CVC, V-code, SPC, CID, CV2, CVN2, CAcronym2, etc) and a certain assertion caught my eye (emphasis mine): The CSC for each ...
0
votes
1answer
191 views

How to secure CC details and CCV for a small hotel?

I got a weird case here, where there is a small hotel using booking.com to receive reservations. All of the reservations are coming in, through booking.com, but most of them are not book now - pay ...
2
votes
0answers
108 views

What are the risks of providing all your credit card information except for security code to a stranger?

I've recently been approached by a person asking me for a donation to Save The Children. while I was inclined to donate, I didn't because they were asking my full name, 16 digits of credit card and ...
1
vote
1answer
392 views

PCI compliance for bank card system

There is a bank who has internal system working with card data preparation, generating PANs, and finally preparing personalization files that are sent to third party card manufacturer. The bank can ...
-3
votes
1answer
276 views

secure public facing wallet API accessed by mobile devices

I am implementing a public mobile wallet application where user can add his own card, like Android Pay, or Samsung Pay on Android device. The standard way how these applications are initially working ...
3
votes
4answers
315 views

Is debit (credit) card payment inherently broken from security point of view?

TL;DR I've been a user of debit cards for many years, and don't know much about the security issues. However, just thinking logically, I find the practice of paying by providing card data (i.e. card ...
39
votes
6answers
9k views

Which parts of a credit card can I obfuscate and still have it be valid

I was recently the victim of credit card fraud and I suspect it is from a merchant somewhere keeping track of my credit card details. I cancelled the card and received a new one, but I would like to ...
0
votes
1answer
503 views

Why does my Cordova app contain an SQLite file with credit card tables?

We have created a mobile app that includes a view for payment with credit cards. We have used Cordova so we can pusblish our app for Android and iOS. During some tests an SQLite file was found on /...
0
votes
0answers
89 views

Debit Card Cloning

Is having just a bank account number and sort code sufficient information to produce a cloned debit card, or is an ATM skimming or contactless card info snatch the only way (based in UK)?
30
votes
4answers
6k views

How can a website verify that my phone number belongs to me?

I was signing into a Capital One credit card website that I hadn't used in a long time, and once I entered my user name and password, it requested my mobile phone number for additional verification. ...
6
votes
2answers
221 views

Is it possible to transfer one-time credit card info to a physical mag stripe card?

Several banks allow you to generate a one-time credit card number via an app or web page, with restrictions such as maximum amount and/or short expiry date. These are fine for online transactions but ...
0
votes
2answers
1k views

Is it security if an alternative of the full credit card number is stored in database

Short Description I am wondering if there is a way to store an alternative of the full credit card number securely, which the card number is not required to be retrieved from the alternative. Long ...
1
vote
2answers
211 views

For chip credit cards, what's preventing me from breaking the chip to trigger the magstripe failsafe?

In a few cases, the chip in my chip card (or maybe the chip reader) has malfunctioned. After inserting the card and failing 3 times, it said to swipe the card instead. What's preventing me from ...
0
votes
1answer
55 views

Is it safe to use an auto pay feature on my smart watch that stores card info?

(So guess what I got for Christmas...) While I do appreciate the tech and some of the features in the smart watch, I am skeptical of it's biggest feature -- the Pay feature which essentially ...
0
votes
1answer
71 views

Do 2 Chip based cards effect each other's data if they are in the same wallet all the time?

So I got 2 new ATM cards from two different banks, both cards are Chip and NFC enabled. Card A arrived one week earlier than Card B. Both of them remain in my wallet in close proximity to each other, ...
1
vote
3answers
209 views

PCI - store card details offline

I work for a company that sends out mail/telephone order goods. Some customers have orders they receive every day, with different amounts. We have been asked a few times by various customers if we ...
2
votes
1answer
177 views

PCI DSS compliant method to receive card data for a merchant with no electronic storage

The merchant in question has no electronic cardholder data storage. Currently they receive CHD (no CVV) in non-secure ways and store it on paper in order to execute payments via card-not-present POS ...
0
votes
2answers
111 views

Would one e breaking PCI compliance in this scenario?

First and foremost - I am not planning on going down the road of trying to adhere to PCI compliance myself, It's simply not worth the headache. I am however interested in how some companies manage to ...
4
votes
2answers
334 views

PIN delivery: do PCI DSS requirements prevent sending the PIN to an end-user's mobile phone?

Do PCI DSS requirements prevent processors from sending to endusers' mobile phones the PIN? I went through many PCI documents, such as the PCI security requirements 2.0 and this isn't mentioned. I'm ...
0
votes
1answer
169 views

Is identification with NFC bank cards feasible?

Imagine I want to identify users more securely than using username/password, e.g. a hardware token. However, I can't issue smartcards to them. Is it a good idea to try to use NFC-enabled bank cards ...
0
votes
0answers
32 views

Verify that any online service is secure [duplicate]

I personally don't trust cloud storage, I understand the convenience, but it's not enough for me. Is there any way other than the company saying so, to verify that the storage of my files is indeed ...
4
votes
1answer
297 views

Storing customer credit card information for manual processing later

For a solution that we are developing for the hospitality industry, we need to save customer credit card information, and show this to the hotel for them to manually process the payment later. I have ...
5
votes
1answer
280 views

Is transaction history stored on credit card a security risk?

I installed an NFC reader on my android and scanned each of my bank cards to see what they would reveal through their contactless feature (NFC). Unsurprisingly they reveal the card number and the ...
0
votes
1answer
46 views

Amex cc questions [closed]

If I am issued a new card due to a lost or stolen card with American Express Platinum Card will the first 10 numbers of the account number stay the same and only the last five change or do they still ...
-3
votes
1answer
135 views

How do the Chinese keep information secure? [closed]

I ask this question in light of the recent Equifax hacking. I'm sure people in China get hacked all the time, but I was recently talking to someone from there and they told me they never walk around ...