Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [credit-card]

Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).

21
votes
3answers
6k views

Is accepting an invalid credit card number a security issue?

I am testing a website which accepts invalid credit card numbers for reservations. The interesting thing is they do CC validation if the currency is USD, but not for any other currencies. Should I ...
-3
votes
1answer
85 views

Clone debit card [duplicate]

Would you be able to clone someone debit card if you only have the picture of the card with the security code and the PIN?
-5
votes
0answers
39 views

Dark web dark net [closed]

Is anyone know the valid web that you can buy a valid credit card on the dark web that you will be able to clone them?
0
votes
1answer
66 views

Displaying complete credit card information to end user

I am using an ecommerce website that accepts and stores CC information. In the webpage, they show only the last 4 digits (which is perfectly fine). But when I intercept the request/response, I could ...
47
votes
8answers
9k views

What prevents web shop owners from misusing credit card data?

I don't own a credit card but read much about fraud with stolen credit cards. Since I don't own one, I don't know how you exactly buy online using your credit card, so please correct me, if I am wrong ...
82
votes
3answers
8k views

What information about me do stores get via my credit card?

Lets say I buy something at some (physical) store and pay using a credit card on one of these electronic terminals. What information do the owners of this store get about me (or my credit card) from ...
2
votes
2answers
214 views

RFID-Safe Wallet destroys credit card?

I'm getting a hang of paying with credit cards, and contactless payment especially, lately (which was quite uncommon where I live until like a few months ago). I'm now looking to buy one of these ...
1
vote
1answer
84 views

Can a magnetic credit card writer encode a blank card based off just a credit card number?

I was wondering what info is stored in the CC mag strip. For example: if someone got a hold of by CC number, just the numbers-no CCV, no exp date, etc... it is pretty hard to use my credit card for ...
7
votes
4answers
7k views

How can my bank debit card reader know that my pin is valid?

Why do ATMs accept any PIN? states that the ATM does not know my pin and the pin is not on the card as well. My bank has this system: It works in 5 stages: I enter my debit card number on the ...
1
vote
2answers
254 views

Router as MITM to steal data

I was reading a blog post about ATM skimming and the following quote (at the end of the article) caught my eye: Ivanov allegedly used two devices — a router to steal the bank data of customers ...
6
votes
2answers
7k views

Can I repair a cut-through credit card?

On many cards there's the instruction to, if found, cut it in two pieces and mail them to some address. I'm wondering a bit about the security of this and if I could recover some data. It's not ...
227
votes
7answers
34k views

All 0s (zeros) in a bank card's CVC code

My bank card recently expired. I got a new one and this one turned out to be "lucky": its CVC code was 000. For a few months I used it extensively, both online and offline, without any difficulties - ...
30
votes
4answers
24k views

Hotel reservation. How is this secure with only credit card number and expiry date?

Until today I managed to avoid paying online with my credit card (I'm weird, I know...) but somehow I managed to do it. Today though I had to book a hotel room (on booking.com) that required a ...
19
votes
2answers
2k views

Store Credit Card Information in Password Manager?

For convenience purposes I manage my passwords with the password manager Bitwarden on my personal computer and smartphone with autofill function (but with asking for the master password or fingerprint ...
2
votes
1answer
69 views

How many digits of my credit card number may be revealed on the merchant copy of the receipt (Europe)?

The other day I was in a bakery in France and by accident, I obtained the receipt that was intended for the merchant – I did not get the customer copy. I saw that my FULL credit card number was ...
43
votes
7answers
19k views

Amazon let me place an order without me ever being asked for 3-D secure password

I have set a "3-d secure password" for my debit card, on my bank's website. But when I purchased something in amazon.co.uk, I went through the whole process without ever being asked for that 3D ...
51
votes
2answers
12k views

Is this Paypal Github SDK reference really a dangerous site?

I'm working on integrating a payment system with paypal in C#, and I installed the official paypal nuget package. Then I went to the paypal github site. And linked to this below site (SDK Reference). ...
0
votes
1answer
85 views

PCI-DSS scope: Using P2PE Compliant devices

We use EMV card readers to automate the payments at the entry and exit to our services. These card readers and the unattended payment terminals are fully PTS complaint and use P2PE encryption. Also, ...
0
votes
0answers
89 views

CVV/CVC code algorithm [duplicate]

I'm looking for a definition of algorithm how to calculate CVV/CVC codes? I know that there are the following inputs: PAN Expiration Date Service Code CVK A/B But I'm not able to find the specific ...
1
vote
1answer
2k views

Is it possible for a NFC-enabled device to emulate a Visa card with PayWave?

If someone has access to the physical Visa card (and with that comes the number on the front, the expiry date, and three digits on the back) would it be possible for them to program a NFC-enabled ...
33
votes
3answers
9k views

Why don't popular web services mask the CVV?

Most popular web services like PayPal, Google Wallet, and others do not mask CVV numbers, eg: (<input type="password">). As I read, the CVV is a security feature and it seems logical to mask it ...
3
votes
1answer
65 views

Can one use a Credit Card as a Smart Card?

Okay, first question on any Stack Exchange site, and Information Security seems the most fitting for this question. Anyways, I realized that my laptop has a smart card reader. I understand that ...
136
votes
5answers
255k views

How does Amazon bill me without the CVC / CVV / CVV2?

The card in question is a VISA, if that's of any importance. I've noticed this only on Amazon. All other sites I've purchased something from, ever, have needed the CVC code for the card. However, I ...
2
votes
2answers
6k views

When paying online with a credit card, what is “3D authentication” and is it reliable?

I tried making a purchase from http://www.laptop-batteries.ca/ but on the very last step the page reloaded with an error. A representative contacted me asking why I didn't complete the order and I ...
0
votes
0answers
70 views

Store Credit Card data in memory for using with native payment SDKs (iOS, Android)

I am implementing a Credit Card processing in mobile apps for iOS (Swift) and Android (Kotlin) using native SDK (SAQ A EP compliance level) We thought about: disabling clipboard for CC field ...
0
votes
0answers
11 views

What data associated with my payment card does a merchant or a payment processor get when I purchase something with it? [duplicate]

If I use a debit or credit card to purchase something online, what data does the party that charges my card get? I understand that there are payment processors like Stripe or PayPal that act as a ...
0
votes
2answers
103 views

Could someone commit a social engineering “hack” on a credit card processor to get my credit card number?

Peripherally related to: Is it safe to recycle unshredded credit card receipts?. From some basic research, it seems as though the SEQ number is internal to the company running the POS software, the ...
1
vote
1answer
79 views

PCI compliance dilemma

I am looking for advice on PCI compliance. I am being told that I am not currently PCI compliant although I am not sure if this is accurate. We outsource the payment management and card storage to a ...
0
votes
0answers
41 views

Is there a security issue with fit4less requiring bank information and not simply card number?

When I set up timed payments I tend to prefer setting them up through my credit card. As this tends to be more reliable in case of over charges, etc. For example spotify goes through my credit card. ...
0
votes
2answers
98 views

PCI Compliance on scanned images of expired cards

What is the requirement on images of expired card numbers? The images are over ten years old. If the data is old do I still need to encrypt the data?
0
votes
2answers
162 views

How secure is it to send credit card information partially over email and text?

I need to pass credit card information for a travel reservation, and I am thinking of splitting it over email and text. The credit card number itself would be send over text, while expiration date and ...
4
votes
3answers
161 views

Drivers license required for online purchases

Problem I tried to buy a few things from a particular industry, and the sellers are independently all asking for a copy of my drivers license to verify that it matches the details on the card because ...
1
vote
1answer
2k views

Cloning of EMV cards

I am trying to get information about cloning of EMV credit cards (chip cards). I have a good understanding of the cryptology behind it and know that it is impossible to clone it "from the outside" ...
0
votes
1answer
45 views

Is PCI - DSS required to store only card number

We need to save the credit card number in our database , but not the cvv. Should we be PCI - DSS compliant for this or some security measures is enough. After the save we will use that to call stripe ...
30
votes
1answer
27k views

Is CVV calculated or merely assigned?

Is the 3-digit (4-digit for those acolytes of standardization, American Express!) CVV/CSV/CVC calculated from card number and expiration date, or is it merely assigned? I know that once when I got a ...
8
votes
2answers
621 views

Secure transactions (on or off the internet) with a credit card

I have read about how hopelessly insecure credit cards are, and was wondering if there is, in the uk, a provider of either: One time use credit cards. Text me on transaction cards. Pre paid cards: ...
1
vote
2answers
131 views

Is taking CC info in plain HTML elements, but using a library like Stripe to tokenize PCI compliant?

I am building a site which will accept payments. I will be processing payments with either Stripe or Square. Stripe now has Stripe Elements, and Square has Square Payment Form. I have tried Square ...
1
vote
0answers
74 views

Possible phishing victim. How to proceed? [closed]

I was trying to buy tickets for a show on an official web page. This will be the last show of this band so the server went down pretty quickly. The band tweeted about difficulties and then someone ...
3
votes
2answers
175 views

When paying by card on a website, will fake payment information make the order fail?

When ordering online websites often redirect to a payment service like 2Checkout (see image below). On their page I must specify my personal information (like name, address, city, sometimes birth date)...
2
votes
1answer
63 views

Storing credit card token [closed]

I am working on a membership site which is based on monthly and annual subscription. My payment processor supports recurring payments via "credit card tokens". What's the best way to store these ...
3
votes
2answers
16k views

No HTTPS on credit card entry form - can it be safe?

I was going to make a purchase on a website, but the page containing the credit card entry form is served via HTTP and not HTTPS. Is it definitely unsafe? The website advertises the use of "RapidSSL"...
5
votes
2answers
587 views

Online Retailer asks for a copy of Credit Card and Drivers License

This weekend I placed an order for a part from an online retailer ($300-400). Shortly thereafter I received an email from their sales team saying something similar to the following: Hi, we have ...
1
vote
1answer
946 views

Can someone clone emv chip card by knowing the magnetic stripe info? [duplicate]

Lets consider that someone skimmed the magnetic stripe of a credit/debit card which also has an emv chip. Can this info be translated and stored into an emv chip? And if this is possible, it is ...
0
votes
1answer
96 views

Odd characters — including a backslash — in magstripe track 1 name field?

I've been in the Point of Sale industry for decades. Parsing card magnetic stripe track 1 data has never been difficult, but lately we've started to see some odd data in the name field of cards that ...
1
vote
2answers
3k views

Passing an invalid CVV creates a successful transaction

I built a shop and integrated a card payment system. On the checkout page, we have: The card number Expiration date CVV If I use an invalid expiration date, the payment fails, as expected. But if ...
4
votes
3answers
682 views

Is this RFID blocking wallet actually secure?

This question is based on a quick experiment that I ran when questioning the effectiveness of my RFID blocking wallet (this one). In my experiment, I walked out of my office, placed my RFID id card in ...
2
votes
0answers
88 views

Disable Google API key without access to google account

I was trying the new google api - I created anonymous account - added there my debit card, set up the API key for google maps. Tried API and pushed my API key to shared repository (yes I know - my ...
1
vote
2answers
109 views

Audio Recording of my Credit Card Info?

If I call into a call center to order a product or service, and they take my credit card - do I have any assurance they are not recording the phone call "for quality purposes" which includes my credit ...
3
votes
1answer
212 views

CVV credit card change [closed]

Is there a certain formula that the bank uses when changing the CVV (Card Verification Value), on a credit card. If I am trying to keep credit cards on file and they expire I know there is a form that ...
-3
votes
1answer
136 views

How do the Chinese keep information secure? [closed]

I ask this question in light of the recent Equifax hacking. I'm sure people in China get hacked all the time, but I was recently talking to someone from there and they told me they never walk around ...