Questions tagged [credit-card]

Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).

Filter by
Sorted by
Tagged with
2 votes
3 answers
155 views

How do companies like Uber and Paypal store card details? Is it possible to offer PCI compliance whilst saving credit card details locally?

I know there's a question that's been already asked but it's a decade old so wanted to get an up to date answer... It's mentioned quite often that the CVV number should never be stored, but this must ...
user avatar
  • 123
0 votes
0 answers
89 views

Clone a credit card [duplicate]

I wanted to ask if it's possible to clone your own credit card (clone the emv chip) and copy it onto another emv chip with an emv reader/writer. Shouldn't this be easily possible without extracting ...
user avatar
1 vote
2 answers
81 views

"encrypting" a physical copy of a number by remembering a series of mathemtical operations rather than a key. Is this safe?

For example I want to have a hard copy of my backup 2FA codes so that if I lose/destroy/don't have my phone or laptop on me. I, of course, do not want them in plain text. I don't want to encrypt them ...
user avatar
0 votes
2 answers
84 views

PCI : scope debate : API consumers

The Problem I have two systems. System A - E-commerce application that handles (does not store cc) customer credit data during purchase. System B - Invoicing system for these transactions (does store ...
user avatar
  • 103
1 vote
1 answer
113 views

Which information is disclosed to a merchant when paying online with a credit card?

Several sites require me to input far too many personal details in order to register. This now includes phone numbers, which they have zero legitimate uses for - they are never used after the initial ...
user avatar
0 votes
1 answer
191 views

Credit card reader writer

If someone has all the information from my credit card name, exp date, card number, cvv and pin but no card, would they still be able to use a reader-writer or would they have to have the card to copy?...
user avatar
0 votes
0 answers
22 views

Are thieves with wireless payment terminals really a threat? [duplicate]

I've heard it time and time again being repeated: "You should get one of those RFID-shielding wallets to protect your tap-enabled cards from thieves." I know that thanks to the security ...
user avatar
0 votes
1 answer
148 views

If the terminal is malicious, is paying with NFC still safe?

Paying with credit card's NFC. I know about tokenization and all that, but does that actually protect my card against theft when the terminal is malicious?
user avatar
1 vote
1 answer
667 views

Are virtual credit cards in scope for PCI Compliance?

My company is using virtual credit cards and since we are PCI compliant (and want to be in the future) I was wondering about the requirements of storing/processing and transmitting PAN numbers of ...
user avatar
  • 329
0 votes
2 answers
183 views

Is credit card cloning possible BEFORE activation?

I recently acquired this novel credit card which brags about being super secure for not having printed the security numbers on the physical card. Then, when my physical card package arrive I notice it ...
user avatar
  • 101
4 votes
1 answer
238 views

How does Firefox protect Logins and Credit Card Data?

I have a question about how Firefox protects Login information (Website passwords) on the one hand and Credit Card data on the other. I noticed that there are two different approaches to how Login ...
user avatar
  • 153
1 vote
3 answers
215 views

Is it safe to write an "encrypted" PIN on a card?

I have a number of bank cards and I keep forgetting the PIN-codes, in particular because most of them I use rarely. I came up with an idea - for each card: add a secret PIN that I remember to the PIN ...
user avatar
  • 135
0 votes
1 answer
433 views

Why some payment methods allow being embedded in an iframe and some don't?

Let's take some examples: Pay Pal, Apple Pay (examples via Saferpay) - will not load in an iFrame Visa Checkout, Stripe (example), Saferpay (link above) - credit card data can be input in an iFrame ...
user avatar
2 votes
1 answer
221 views

Website showing entered credit card number as valid or invalid [duplicate]

I noticed on a website that when I entered my credit card number, the entry box was highlighted blue: I then tried a dummy credit card number, which made the box highlight red, indicating that credit ...
user avatar
0 votes
0 answers
109 views

Can a stolen chip & pin card be used to withdraw cash from an ATM without knowing the actual pin?

My chip and pin Visa debit card was stolen from a gym locker and successfully used to withdraw money from an ATM in 2017 in London, England. The PIN was not recorded anywhere and yet the card was used ...
user avatar
2 votes
1 answer
163 views

Is it normal for a company to request this information after stolen card details were used?

My friend's credit card details were randomly used to make a two small purchases on a food delivery app, by someone other than my friend. They have already contacted the bank and cancelled the card. ...
user avatar
2 votes
3 answers
188 views

School Request: What can be done protect people's financial information?

This is a bit of an odd question, and if it doesn't belong on this forum feel free to retract. I was asked by a group of 7th graders to share my thoughts on the problem of credit card data breaches. ...
user avatar
2 votes
0 answers
95 views

Should i login to my ebanking account through frames in another website?

During a credit card payment to site X , it asks me to login to my ebanking account through a frame in a site that handles that transaction in order to implement a more secure authentication (3d ...
user avatar
146 votes
1 answer
18k views

How does Shutterstock keep getting my latest debit card number?

I've made a single photo purchase from Shutterstock back in 2012. I created an account and gave them my debit card #. I haven't made a single purchase from them since. Silently in 2018, they activated ...
user avatar
  • 1,907
2 votes
1 answer
141 views

Over-the-top (?) security practices for CVV inputs

On some internet banking websites, I've seen some CVV input fields that seem strange to me. Here is an example: The field works as such: You can not input a CVV code using a keyboard. The numbers ...
user avatar
  • 23
1 vote
0 answers
94 views

How to determine if a webshop is scam? [closed]

Nowadays people prefer to do their shopping online rather than using the real shop, especially because of the COVID-19 restrictions. But in the same context, attackers (scammers) are trying to gain ...
user avatar
  • 9,953
3 votes
1 answer
188 views

Credit card form : Is it neccessary to obscure error messages?

I'm working on designing a credit card payment form whose core functionality is provided by a payment processing company ("upstream"). Upon some transaction errors the upstream returns the ...
user avatar
0 votes
1 answer
158 views

How does a fraudulent credit card charge to a Department of State work?

I looked at my Credit card statement, and noticed a fraudulent charge to what turned out to be the NY Department of State. This was especially odd to me, since I don't live in NY (and so was obvious ...
user avatar
  • 21.5k
0 votes
0 answers
150 views

Pay online with a card and then block it - any threats?

Sometimes I order stuff from less-known online stores that ask me to pay directly by providing a card number. Either they don't support PayPal or similar services or they might charge a fee for using ...
user avatar
  • 101
3 votes
1 answer
2k views

Chance of guessing any valid credit card data

What's the chance of guessing valid credit card data that could be used to make a payment online? To me, it looks like it's not extremely hard to guess, but I'm not able to calculate the probability. ...
user avatar
  • 15.3k
0 votes
1 answer
145 views

How can hackers steal from a savings account that has no client card? [closed]

Someone I know was stolen a few hundreds dollars from a savings account. Looking at the history, she saw transactions like Uber rides and video games purchases she did not do. This account is used ...
user avatar
  • 103
-1 votes
2 answers
118 views

How can you secure credit card security when purchasing from any online retailer? [closed]

When on any retailer website at the very end we are asked to make a payment. However it is not uncommon to not be taken to an external portal, usually, for example, aliexpress and Amazon will ask to ...
user avatar
0 votes
1 answer
2k views

ATM CVV1 + Service Code, POS Security Flaw?

I'm new to this topic and I found it very interesting how all the payment system is currently working. To be honest it look like they are not doing enough to stop fraudulent activity with Credit Cards....
user avatar
2 votes
2 answers
288 views

Storing credit card information - encrypted at rest

A client is asking for a way so his app can receive credit card information and store them. He needs this to process scheduled payments from his clients. I told him that I can build a asymmetrical (...
user avatar
  • 53
0 votes
1 answer
462 views

Store credit card data in google sheets - Asymetric Encryption

Yes! this sounds crazy, and it is, please let me give you some background about this... I'm doing a self-checkin app for a hotel, this app will store this checkin data in google sheets, where the ...
user avatar
1 vote
1 answer
4k views

Is it possible to guess cvv code from payment number and expiration dates?

If I am not wrong, visa is easy to guess cvv right? Let's say if I have 100,000 credit card numbers and expiration dates, it is possible to make daily 5 guesses. All cards with 5 the same gateway/...
user avatar
1 vote
2 answers
154 views

Call center recording my credit card info

I just made a new contract over the phone with my mobile phone provider and I needed to pay the activation fee. The lady told me that they could accept only credit cards and asked me for the full ...
user avatar
3 votes
2 answers
269 views

How can I stop fraudulent credit card submissions on a donation site?

We are a small nonprofit that accepts donations online. Our site is being hammered by hundreds of fraudulent credit card submissions per day, coming from multiple IP's all over the world (a ...
user avatar
  • 234
0 votes
1 answer
105 views

PCI DSS: Is there a way to pass encrypted billing data through a server without compliance?

Hope all is well. I am developing a primarily cloud-based tool that allows the end-user to enter in billing data and task data via a desktop application, and the billing data is stored locally (their ...
user avatar
5 votes
4 answers
482 views

Are payment card PINs safe to send via SMS?

I have signed up with a new current account in the UK for day-to-day transactions. The account comes with a payment (debit) card. The banking institution's security handling of PINs for payment cards ...
user avatar
  • 801
0 votes
1 answer
92 views

Is it legal to post card data from an ecommerce checkout to a PCI compliant 'store'

Let's say I want to charge a user's credit card with their permission after a sale takes place. But, I don't want to have to ask them their credit card a second time. Is it legal to store the credit ...
user avatar
  • 105
0 votes
2 answers
218 views

Is it possible a scammer stole my credit card details and made a new card from it?

So I'm abroad at the moment, yet I've just had a cash withdrawal made on my credit card from my country of origin, even though I'm not there and the card IS with me abroad. I called the card issuer ...
user avatar
  • 103
0 votes
1 answer
254 views

Sending credit history report to potential landlord

I have a credit report from TransUnion that contains: My real name, current and past addresses Current and past credit card accounts, last 12 monthly balances and payments My past mortgage Past ...
user avatar
  • 103
1 vote
1 answer
122 views

Cardholder info transmission between issuing and acquiring banks

Which data is actually transmitted between issuing and acquiring banks during various phases of a card payment transaction? Specifically, does the Issuer tell the Acquirer any info (and which if any?)...
user avatar
0 votes
0 answers
118 views

Understanding scam involving mobile transaction number

Today I have received an SMS from the number that my credit card provider uses to send MTANs that have to be entered for e-commerce. So at first the obvious scam seemed to be someone trying to use my ...
user avatar
1 vote
0 answers
138 views

Credit card fraud - record your face movement to unlock your account

Recently I accessed my credit card account (with a well-known credit card company) and right on the web page received a message that my account is locked to "prevent some sort of fraud". I called ...
user avatar
1 vote
1 answer
129 views

Business located in USA does it need to be PCI and SCA compliant?

The business is located in the US. But: Has European customers who put a transaction via a custom-built shopping cart Sells via tradeshow in Europe or Asia in person Could Customers send credit cards ...
user avatar
0 votes
1 answer
2k views

Is it possible to bypass 2FA and access bank account in this system?

Nowadays, any credit/debit card transaction made online (at least for mine) requires one to enter the card details (Account No., Expiry Date, CVV etc). In the end, a OTP (One Time Pass) is sent to the ...
user avatar
10 votes
2 answers
6k views

I can pay by my credit card under fake name: who's responsible to check?

I am customer of a large European bank, but I have found the following happening consistently with multiple past banks. Basically, I have always been able to pay using my legitimate card(s), credit ...
user avatar
1 vote
0 answers
20 views

Is credit/debit card's chip programming clone to another empty chip card [duplicate]

Card's magnetic strip and chip should programmed by banking system. Is there any chance to clone same programming to another chip and magnetic strip empty card? By doing this, our cards may be ...
user avatar
0 votes
1 answer
693 views

Is there a secure way to disable NFC and RFID on credit cards and personal IDs?

If you're wondering why would I want that - it's for my own security: against identity and data theft.
user avatar
3 votes
2 answers
266 views

Why CVV on the credit card at all?

CVV is a security feature. Why isn't it handled as a PIN and kept secret? I see that's convenient to have the number on the back (or front, in some rare cases), but so would be to write your PIN on ...
user avatar
  • 1,853
42 votes
3 answers
7k views

Why are my plastic credit card and activation code sent separately?

Capital One recently sent my plastic credit card by post mail and its activation code by a separate post mail. What security problem does this mitigate? If a rogue element has access to my mail box ...
user avatar
  • 559
1 vote
2 answers
193 views

EMV Transactions vs Magnetic Stripe [closed]

In Mag stripe transactions, I've worked on solutions by which you get an initial small value Authorization and then can capture a full amount later using the transaction_id. E.g. The payment gateways ...
user avatar
  • 113
1 vote
0 answers
89 views

What information about me do online stores get via my credit card? [duplicate]

I found the exact same question about physical stores: What information about me do stores get via my credit card? Though I am interested in online stores! Are there big difference between PHYSICAL ...
user avatar
  • 11

1
2 3 4 5
9