People who code: we want your input. Take the Survey

Questions tagged [credit-card]

Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).

Filter by
Sorted by
Tagged with
-1
votes
0answers
39 views

I need your help to help me by bypass with wrong cvv of debit card [closed]

bypass with wrong cvv of Visa card bus I lost my card and I need to place an emergency order on my Walmart account which is not letting me finish up my order process without my cvv
1
vote
1answer
99 views

Website showing entered credit card number as valid or invalid [duplicate]

I noticed on a website that when I entered my credit card number, the entry box was highlighted blue: I then tried a dummy credit card number, which made the box highlight red, indicating that credit ...
0
votes
0answers
54 views

Can a stolen chip & pin card be used to withdraw cash from an ATM without knowing the actual pin?

My chip and pin Visa debit card was stolen from a gym locker and successfully used to withdraw money from an ATM in 2017 in London, England. The PIN was not recorded anywhere and yet the card was used ...
1
vote
1answer
78 views

Is it normal for a company to request this information after stolen card details were used?

My friend's credit card details were randomly used to make a two small purchases on a food delivery app, by someone other than my friend. They have already contacted the bank and cancelled the card. ...
0
votes
0answers
28 views

Fraudsters cloning magstripe from chip cards and using them [duplicate]

Since i was a victim of this myself i have really wondered how could the fraudsters cloned my card and used it on an ATM. I live in Europe and all of the credit cards here come with a chip but they ...
2
votes
3answers
141 views

School Request: What can be done protect people's financial information?

This is a bit of an odd question, and if it doesn't belong on this forum feel free to retract. I was asked by a group of 7th graders to share my thoughts on the problem of credit card data breaches. ...
2
votes
0answers
57 views

Should i login to my ebanking account through frames in another website?

During a credit card payment to site X , it asks me to login to my ebanking account through a frame in a site that handles that transaction in order to implement a more secure authentication (3d ...
145
votes
1answer
17k views

How does Shutterstock keep getting my latest debit card number?

I've made a single photo purchase from Shutterstock back in 2012. I created an account and gave them my debit card #. I haven't made a single purchase from them since. Silently in 2018, they activated ...
2
votes
1answer
80 views

Over-the-top (?) security practices for CVV inputs

On some internet banking websites, I've seen some CVV input fields that seem strange to me. Here is an example: The field works as such: You can not input a CVV code using a keyboard. The numbers ...
1
vote
0answers
54 views

How to determine if a webshop is scam? [closed]

Nowadays people prefer to do their shopping online rather than using the real shop, especially because of the COVID-19 restrictions. But in the same context, attackers (scammers) are trying to gain ...
3
votes
1answer
127 views

Credit card form : Is it neccessary to obscure error messages?

I'm working on designing a credit card payment form whose core functionality is provided by a payment processing company ("upstream"). Upon some transaction errors the upstream returns the ...
0
votes
1answer
93 views

How does a fraudulent credit card charge to a Department of State work?

I looked at my Credit card statement, and noticed a fraudulent charge to what turned out to be the NY Department of State. This was especially odd to me, since I don't live in NY (and so was obvious ...
0
votes
0answers
105 views

Pay online with a card and then block it - any threats?

Sometimes I order stuff from less-known online stores that ask me to pay directly by providing a card number. Either they don't support PayPal or similar services or they might charge a fee for using ...
3
votes
1answer
734 views

Chance of guessing any valid credit card data

What's the chance of guessing valid credit card data that could be used to make a payment online? To me, it looks like it's not extremely hard to guess, but I'm not able to calculate the probability. ...
0
votes
1answer
99 views

How can hackers steal from a savings account that has no client card? [closed]

Someone I know was stolen a few hundreds dollars from a savings account. Looking at the history, she saw transactions like Uber rides and video games purchases she did not do. This account is used ...
-1
votes
2answers
80 views

How can you secure credit card security when purchasing from any online retailer? [closed]

When on any retailer website at the very end we are asked to make a payment. However it is not uncommon to not be taken to an external portal, usually, for example, aliexpress and Amazon will ask to ...
0
votes
1answer
1k views

ATM CVV1 + Service Code, POS Security Flaw?

I'm new to this topic and I found it very interesting how all the payment system is currently working. To be honest it look like they are not doing enough to stop fraudulent activity with Credit Cards....
2
votes
2answers
169 views

Storing credit card information - encrypted at rest

A client is asking for a way so his app can receive credit card information and store them. He needs this to process scheduled payments from his clients. I told him that I can build a asymmetrical (...
0
votes
1answer
244 views

Store credit card data in google sheets - Asymetric Encryption

Yes! this sounds crazy, and it is, please let me give you some background about this... I'm doing a self-checkin app for a hotel, this app will store this checkin data in google sheets, where the ...
0
votes
1answer
2k views

Is it possible to guess cvv code from payment number and expiration dates?

If I am not wrong, visa is easy to guess cvv right? Let's say if I have 100,000 credit card numbers and expiration dates, it is possible to make daily 5 guesses. All cards with 5 the same gateway/...
1
vote
2answers
110 views

Call center recording my credit card info

I just made a new contract over the phone with my mobile phone provider and I needed to pay the activation fee. The lady told me that they could accept only credit cards and asked me for the full ...
4
votes
2answers
182 views

How can I stop fraudulent credit card submissions on a donation site?

We are a small nonprofit that accepts donations online. Our site is being hammered by hundreds of fraudulent credit card submissions per day, coming from multiple IP's all over the world (a ...
0
votes
1answer
58 views

PCI DSS: Is there a way to pass encrypted billing data through a server without compliance?

Hope all is well. I am developing a primarily cloud-based tool that allows the end-user to enter in billing data and task data via a desktop application, and the billing data is stored locally (their ...
5
votes
4answers
274 views

Are payment card PINs safe to send via SMS?

I have signed up with a new current account in the UK for day-to-day transactions. The account comes with a payment (debit) card. The banking institution's security handling of PINs for payment cards ...
0
votes
1answer
48 views

Is it legal to post card data from an ecommerce checkout to a PCI compliant 'store'

Let's say I want to charge a user's credit card with their permission after a sale takes place. But, I don't want to have to ask them their credit card a second time. Is it legal to store the credit ...
0
votes
2answers
171 views

Is it possible a scammer stole my credit card details and made a new card from it?

So I'm abroad at the moment, yet I've just had a cash withdrawal made on my credit card from my country of origin, even though I'm not there and the card IS with me abroad. I called the card issuer ...
0
votes
1answer
118 views

Sending credit history report to potential landlord

I have a credit report from TransUnion that contains: My real name, current and past addresses Current and past credit card accounts, last 12 monthly balances and payments My past mortgage Past ...
1
vote
1answer
81 views

Cardholder info transmission between issuing and acquiring banks

Which data is actually transmitted between issuing and acquiring banks during various phases of a card payment transaction? Specifically, does the Issuer tell the Acquirer any info (and which if any?)...
0
votes
0answers
85 views

Understanding scam involving mobile transaction number

Today I have received an SMS from the number that my credit card provider uses to send MTANs that have to be entered for e-commerce. So at first the obvious scam seemed to be someone trying to use my ...
1
vote
0answers
99 views

Credit card fraud - record your face movement to unlock your account

Recently I accessed my credit card account (with a well-known credit card company) and right on the web page received a message that my account is locked to "prevent some sort of fraud". I called ...
1
vote
1answer
88 views

Business located in USA does it need to be PCI and SCA compliant?

The business is located in the US. But: Has European customers who put a transaction via a custom-built shopping cart Sells via tradeshow in Europe or Asia in person Could Customers send credit cards ...
0
votes
1answer
2k views

Is it possible to bypass 2FA and access bank account in this system?

Nowadays, any credit/debit card transaction made online (at least for mine) requires one to enter the card details (Account No., Expiry Date, CVV etc). In the end, a OTP (One Time Pass) is sent to the ...
9
votes
2answers
4k views

I can pay by my credit card under fake name: who's responsible to check?

I am customer of a large European bank, but I have found the following happening consistently with multiple past banks. Basically, I have always been able to pay using my legitimate card(s), credit ...
1
vote
0answers
20 views

Is credit/debit card's chip programming clone to another empty chip card [duplicate]

Card's magnetic strip and chip should programmed by banking system. Is there any chance to clone same programming to another chip and magnetic strip empty card? By doing this, our cards may be ...
0
votes
1answer
455 views

Is there a secure way to disable NFC and RFID on credit cards and personal IDs?

If you're wondering why would I want that - it's for my own security: against identity and data theft.
3
votes
2answers
216 views

Why CVV on the credit card at all?

CVV is a security feature. Why isn't it handled as a PIN and kept secret? I see that's convenient to have the number on the back (or front, in some rare cases), but so would be to write your PIN on ...
42
votes
3answers
7k views

Why are my plastic credit card and activation code sent separately?

Capital One recently sent my plastic credit card by post mail and its activation code by a separate post mail. What security problem does this mitigate? If a rogue element has access to my mail box ...
1
vote
2answers
144 views

EMV Transactions vs Magnetic Stripe [closed]

In Mag stripe transactions, I've worked on solutions by which you get an initial small value Authorization and then can capture a full amount later using the transaction_id. E.g. The payment gateways ...
1
vote
0answers
85 views

What information about me do online stores get via my credit card? [duplicate]

I found the exact same question about physical stores: What information about me do stores get via my credit card? Though I am interested in online stores! Are there big difference between PHYSICAL ...
1
vote
0answers
42 views

Does 3D Secure provide a significant security benefit that justifies a worse UX?

We have a website that uses Stripe for charging customers. We are selling a physical product that has zero resale value and a service that is completed 30 days after the customer receives the physical ...
0
votes
1answer
78 views

Credit Card Creation for Member ID [closed]

I have a bit of a unique application. I'm trying to create fancy ID cards for local membership. It's a cocktail club, and they're doing some cool things with the front of house and service ...
0
votes
2answers
92 views

Telling donors we will no longer accept card information in writing [closed]

What is positive wording for telling donors we no longer accept card information in writing, for their security?
0
votes
1answer
253 views

How to communicate Credit Card details to customers when instantly approved in PCI-DSS compliant way?

Would displaying the full Credit Card details (PAN, Expiry date and CVV/CVC) in Online Banking and / Mobile Banking be considered both PCI-DSS and secure? Or what would be Best practice to display the ...
1
vote
1answer
90 views

Is it safe to give multiple virtual credit card numbers to the same vendor?

There are situations when I have to give several virtual credit card numbers linked to my real credit card to the same vendor. Can a vendor guess the real credit card number by having multiple virtual ...
1
vote
4answers
330 views

Collecting banking, credit-card statements from users

I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following ...
1
vote
0answers
98 views

Safely Display Card PIN

We are currently sending the card PIN via SMS. We do not store them in any way, neither do we have the possibility to change it. The only way to change it is for the customer to go to an ATM and ...
0
votes
1answer
408 views

Cloning Credit/debit card chip [closed]

I have a nice, expensive, metal credit card with a chip but it's from an older card. I’m wanting to rewrite the magnetic stripe and the chip to my new card. I know how to rewrite the magnetic stripe ...
33
votes
5answers
14k views

How can Paypal know my card is being used in another account?

I have a credit card saved to my primary Paypal account. To make a long story short, I needed to make another Paypal account that would not be connected to my original one. I used a different ...
4
votes
2answers
610 views

Can a criminal fake the use of a PIN in a chip and pin credit card transaction?

Within minutes of my credit card being stolen by pickpockets, two large transactions were made by the thieves, apparently in a bar or cafe. My bank tells me that they were chip and pin transactions. I ...
2
votes
1answer
94 views

Using browser XMLHttpRequest to initiate credit card transaction with processor?

I have a website where people can make purchases. The entire website is served with https. On the first page, I accept user profile data and generate a random ID for my client and store that in my ...

1
2 3 4 5
9