Questions tagged [credit-card]

Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).

22 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
1answer
119 views

How can I stop fraudulent credit card submissions on a donation site?

We are a small nonprofit that accepts donations online. Our site is being hammered by hundreds of fraudulent credit card submissions per day, coming from multiple IP's all over the world (a ...
3
votes
2answers
156 views

Are payment card PINs safe to send via SMS?

I have signed up with a new current account in the UK for day-to-day transactions. The account comes with a payment (debit) card. The banking institution's security handling of PINs for payment cards ...
2
votes
0answers
120 views

Disable Google API key without access to google account

I was trying the new google api - I created anonymous account - added there my debit card, set up the API key for google maps. Tried API and pushed my API key to shared repository (yes I know - my ...
2
votes
0answers
125 views

What are the risks of providing all your credit card information except for security code to a stranger?

I've recently been approached by a person asking me for a donation to Save The Children. while I was inclined to donate, I didn't because they were asking my full name, 16 digits of credit card and ...
2
votes
0answers
69 views

How can I create a verifiable signature for a digital transaction?

I am currently working on creating a digital signature pad that customers can sign instead of a traditional paper receipt for credit card transactions. Currently I have the ability for them to sign a ...
2
votes
0answers
344 views

Algorithm to generate (and verify) string of 4 quad alpha numeric code

I am writing a system, for which I need to generate unique transaction numbers (which can be verified by myself). I want to use something similar to that used by credit cards, where a string of the ...
2
votes
0answers
702 views

Which keys does a bank typically exchange with a card scheme?

I'm trying to understand the different EMV-related keys that are shared between a bank who issues EMV cards and a card scheme, such as Visa or MasterCard. I understand the bank would typically ...
1
vote
0answers
94 views

Credit card fraud - record your face movement to unlock your account

Recently I accessed my credit card account (with a well-known credit card company) and right on the web page received a message that my account is locked to "prevent some sort of fraud". I called ...
1
vote
0answers
40 views

Does 3D Secure provide a significant security benefit that justifies a worse UX?

We have a website that uses Stripe for charging customers. We are selling a physical product that has zero resale value and a service that is completed 30 days after the customer receives the physical ...
1
vote
4answers
279 views

Collecting banking, credit-card statements from users

I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following ...
1
vote
0answers
96 views

Safely Display Card PIN

We are currently sending the card PIN via SMS. We do not store them in any way, neither do we have the possibility to change it. The only way to change it is for the customer to go to an ATM and ...
1
vote
0answers
97 views

What solutions would you recommend for credit card processing for Virtual Assistants?

I'm developing the entire backend using for an Over-the-phone Virtual Assistant service. Their clients are busy professionals who delegate their online purchasing and booking to this service, which ...
1
vote
0answers
384 views

Credit card number in credit report. Acceptable or not?

I recently applied to obtain my credit report for the very first time and was taken by surprise when I saw all my credit card numbers mentioned in the report without any masking. I had seen other ...
1
vote
0answers
247 views

Android pay card registration, token generation, and verification

I was trying to find information about Android Pay and how it handles card information when adding it to Android Pay and how are token information verified. I was not able to find detailed information....
1
vote
0answers
181 views

ASP.NET WCF security, javascript and handling sensitive information

I've come upon what I would call some "nasty" javascript coding (I come from a KnockoutJS / Angular / Web API 'world') in which WCF services are exposed to javascript by production URL's, i.e. "...
1
vote
0answers
157 views

Collecting Pre-Authorized Debit (PAD) & Credit Card (PACC) Agreements Electronically

I am looking for best practices regarding the collection of Pre-Authorized Debit (PAD) agreements electronically. The Canadian Payment Association only seems to provide the following statement ...
1
vote
3answers
450 views

I have recovered my credit card PAN (6 chars masked) and expiration date on a merchant site, acceptable or not?

I have a credit card saved in X merchant. I only see the last 4 digits in the UI. I have launched a 3D secure payment transaction by using my saved card. Then I have noticed that even in the failed ...
0
votes
0answers
87 views

Pay online with a card and then block it - any threats?

Sometimes I order stuff from less-known online stores that ask me to pay directly by providing a card number. Either they don't support PayPal or similar services or they might charge a fee for using ...
0
votes
0answers
128 views

Safest alternative for hashing credit card numbers to use the hash as fingerprint?

Same question asked here in 2014 but since a lot has changed since then, I would like to get feedback from experts on the latest best practices. The problem We need to hash credit card numbers to ...
0
votes
0answers
83 views

Understanding scam involving mobile transaction number

Today I have received an SMS from the number that my credit card provider uses to send MTANs that have to be entered for e-commerce. So at first the obvious scam seemed to be someone trying to use my ...
0
votes
0answers
144 views

Is there a security issue with fit4less requiring bank information and not simply card number?

When I set up timed payments I tend to prefer setting them up through my credit card. As this tends to be more reliable in case of over charges, etc. For example spotify goes through my credit card. ...
-1
votes
1answer
538 views

People using my email address (and only that) for booking hotels. What kind of scam is this?

I have faced the same issue twice: 2 people, whose names are definitely not the same as mine, used my email address to book hotels through a well-known hotel company and a lesser-known hotel booking ...