The tag has no usage guidance.

learn more… | top users | synonyms

2
votes
0answers
48 views

How to reduce Adwords click fraud (botnet clicking ads)? [on hold]

I hope this is the right place to ask (here is a similar question but the answers aren't specific for AdWords). My Google AdWords campaign has been under attack for the past 3 days. Bots from ...
2
votes
1answer
52 views

Can multiple transactions of the same amount in a short time be considered fraud/corruption?

Back story In South Africa there is a website where I can buy prepaid electricity online for my apartment. When buying I did not get the token to use on my metered box. I had a chat with them today ...
3
votes
1answer
138 views

How safe is my contactless bank card?

In the past few years Contactless Payment cards have been introduced and I have been reading some articles surrounding security of these cards. The following article "Stealing data from contactless ...
0
votes
0answers
33 views

Best practice for Users to avoid fraud for Direct Debit enabled bank accounts?

Direct Debit or automatic debit transfer system or Bankeinzug (German), seems a common/convenient way to pay in (online shops in) many countries available for many banks. https://en.wikipedia.org/...
0
votes
1answer
60 views

Notice of Credit Card Fraud via text on my phone someone responded how did they do it? [closed]

I received a text alert from Capital One fraud alerting me of unusual activity someone replied to the text confirming the activity. I have an Iphone. How can they get access to my phone and what do I ...
2
votes
1answer
71 views

Router as MITM to steal data

I was reading a blog post about ATM skimming and the following quote (at the end of the article) caught my eye: Ivanov allegedly used two devices — a router to steal the bank data of customers ...
2
votes
3answers
142 views

Emailing debit card details to a guesthouse

I'm trying to arrange a holiday out to the Aran Islands, and the guesthouse emailed me back confirming that they do have a room available. But here is the catch: they want me to email my credit card ...
4
votes
1answer
76 views

Wiping magnetic stripe on card with magnet?

I asked a question a while back on using magnets (for example powerful Neodymium ones) to wipe a HDD, and got shown a good article proving it is not possible to wipe data. Pretend I am about to ...
7
votes
4answers
255 views

Bank website forwards to false site - formatted hard drive - still forwards

Summary: When I visit my bank's website, I get forwarded to a phishing mirror site. This has persisted through a re-format of my MacBook. Even on different browsers! Other computers on the same ...
0
votes
1answer
209 views

If I give my bank account and routing number to a stranger to receive a one-time payment, can they steal money from my account? [closed]

Aside from my SSN, card numbers and PIN numbers what information does someone need to spend money from my bank account without my consent? I want to list an item for sale on an auction website and if ...
1
vote
4answers
277 views

Fraud detection to avoid fake users

I know there is no 100% solution for fraud detection, but at least I want to set some level of confidence in this use case. Suppose that I have a system where: A user need to make a registration A ...
1
vote
2answers
652 views

Getting spam calls from numbers similar to my own

My phone number is 456-123-XXXX (American phone number + area code). Over the past few months I get fairly regular spam calls from other numbers also beginning with 456-123-XXXX, where the last four ...
1
vote
1answer
88 views

Is the following e-mail fraud technically possible?

Summary: Can email be intercepted and modified by a 3rd-party during transit from the sender to the receiver? If so, can this interception be detected? Details: My friend (A) (mailbox at popular ...
5
votes
1answer
187 views

I emailed someone a picture of a check I wrote for them. What now?

On a whim, I emailed the intended recipient of a check I wrote a picture of that filled-in check to indicate I was about to mail it out. The full front of the check, with amount, my signature, account ...
2
votes
1answer
231 views

Single button click mobile direct carrier billing fraud

A friend of mine had just had the following happen: He visited a website with the mobile phone using Chrome Mobile on Android An advertisment poped up that covered the whole page There was no close ...
3
votes
0answers
142 views

Clone debit or credit card

I would like to make some workshop about Debit or Credit card fraud (Skimming). So I need as much as possible information about it. Is it possible to clone debit or credit card with MagStripe reader ...
0
votes
2answers
181 views

If I browse a website over HTTPS using a VPN, can the data be sniffed somehow?

I bought yesterday a flight from an American website. In my country, tickets are too expensive. Therefore, I used a IPVanish VPN to browse the airline website. It appears as if I visited it from New ...
0
votes
0answers
34 views

Using Facebook to detect genuine referrals

I'm implementing a pre-registration system that provides incentives to users who invite friends to pre-register using a unique referral link. For each friend that pre-registers using a referral link, ...
3
votes
0answers
66 views

Add a supplementary credit transaction to improve online payment security?

An online company from which I regularly buy goods apparently recently upgraded their security policy. Let's say I bought something for 73,31€. As usual this company uses 3D-Secure for the checkout ...
-1
votes
1answer
69 views

Magnetic stripe credit card [duplicate]

Do ATM in London accept magnetic stripe? If yes can a thief still duplicate a credit card and use it in an ATM which accepts magnetic stripes?
2
votes
2answers
110 views

Can two users share the same Request.UserHostAddress?

I am working on an ASP.NET MVC-5 web application, which is available to public users (no login is required). And I need to prevent the same user from submitting more than 5 "contact us" requests ...
2
votes
2answers
138 views

ATM skimming with magnetic stripe

I have a question about ATM skimming. If ATMs in the UK still accept magnetic stripe can't a thief still use a cloned card at the ATM to withdraw money?
1
vote
1answer
143 views

How to know somebody's IP? (Fraud victim) [duplicate]

I was victim of fraud (fool me) in Mexico and my only hint is a GMail account, so I can contact him from an anonymous mail. From what I've read, GMail's headers don't contain the sender's IP. What ...
2
votes
2answers
127 views

Are there any ways to defraud a fundraising site?

I have developed a many e-commerce stores for clients over the years; almost all of them selling physical products. Recently, one client in particular was repeatedly getting hit with fraudulent ...
3
votes
2answers
920 views

Can expired credit card information be used for fraud?

I have encountered a situation where payment card (debit/credit) information, including name, number, expiration date, and cvc, is being saved by an organization unencrypted in excel spreadsheets on ...
5
votes
1answer
82 views

Countermeasures for a family-member attack on a password reset procedure

Given an account reset procedures, there are usually some recovery questions, and in better implementations a link will be sent to confirm the password change via email or SMS. Therefore, the attacker ...
0
votes
1answer
104 views

How prevent online payment fraud? [closed]

What is the solution of independent payment authorization from hackers between bank and merchant? Some banks used SOAP protocol. I need another solution.
0
votes
2answers
86 views

Library or service for rate limiting credit card transactions by IP [closed]

I have a simple product ordering form. A hacker is attempting to validate stolen credit card numbers by making two orders per minute with a bot. 99% of the orders are declined but some are completed....
-1
votes
3answers
235 views

Overwriting only Free Space with rubbish data to prevent data recovery?

I am aware of tools which write zeros or other useless data to fill up your harddrive, however so far all of the tools I have come across must fill up the entire harddrrive. My understanding of the ...
1
vote
0answers
88 views

Telling the difference between a prepaid card and credit/debit card

In order to stop people abusing free trials, we can make sure new users are not reusing data from existing users and therefore not just signing up with a new account every month. It is reasonably ...
1
vote
1answer
282 views

“Inverted” asymmetric encryption

I am developing a system to prevent frauds in tickets. What do I need? An algorithm to generate a QR Code that will be shown to my clients in a ticket. An algorithm to validate (offline) the ...
3
votes
1answer
178 views

What prevents “money card” (offline smartcard system) from getting duplicated for payment fraud?

I don't know how well known this system is or maybe there are equal systems better known international. So I'll introduce the related points of the system: It is a paymentsystem where your wallet is ...
13
votes
2answers
2k views

Should I change phone number and e-mail address after PayPal fraud?

I have been the victim of PayPal fraud. I hadn't used PayPal in a year and then within 9 days there were three unauthorized transactions on my account for a total of 150 Canadian dollars and 290 ...
8
votes
2answers
570 views

Are social security numbers useless by themselves?

If 453.7 million social security numbers have been issued to date. And there are only 1 billion = 1000 million distinct 9 digit integer pairs. Then that means if I were to make up any 9 digits, that ...
63
votes
10answers
24k views

Can I scratch off the magnetic strip off a debit card to only allow chip and PIN?

I have been robbed in the past by thieves using my HSBC Debit Card (issued by UAE branch) to purchase mobile phones and accessories by signing for the purchases. While the card has chip & PIN ...
4
votes
3answers
4k views

How can I prevent my E-mail address from being used as the sender for fraudulent/scam messages?

Recently, me and at least one other person I know received an obvious scam E-mail that starts off something like this: We considered your resume to be very attractive and we thought the vacant ...
1
vote
0answers
19 views

Transaction without 3DS in some online websites is Fraud prone? [duplicate]

I use my MasterCard credit card for online transactions which uses SecureCode for preventing online frauds even though hackers knows our credit card details. I have come across many sites which is ...
0
votes
1answer
103 views

How to maintain validity of user credentials?

In an example scenario consider that; I am a customer of organisation and I have two separate accounts with two different departments X and Y. I can login in to each department's website by using ...
11
votes
4answers
18k views

How do location-based apps avoid getting cheated by emulated GPS?

Some apps like Foursquare require the user to "check in" at physical places, in order to gain money benefits. Given that emulated GPS are available for customized versions of Android, it sounds easy ...
1
vote
1answer
839 views

How long does it take for Google to detect click fraud and suspend an AdSense account? [closed]

Click farms can be hired to boost ad revenue. http://www.security-faqs.com/what-is-a-click-farm.html The click farm is made up of armies of low paid workers who’s job is to click on links, surf ...
1
vote
0answers
56 views

Properly secure an API [closed]

I'm working on an application that basically match (IRL) two kind of persons. On the client side, the frontend is a single page application with a flow that looks like this: Details -> Login -> ...
0
votes
2answers
340 views

How do gift card resellers prevent sellers from re-using pin and card numbers

There are multiple gift card reseller sites that buy your gift cards and resell them at discounted price. I was wondering how these sites prevent sellers from reusing the pin and card number after it ...
2
votes
1answer
89 views

How to protect myself from future fraud? [closed]

Recently, I had my credit/debit card from my bank "stolen." The thieves somehow got my card number and information and took quite a bit of money from my account. Fortunately, I was able to recover it ...
2
votes
4answers
3k views

How to detect bots clicking a link?

I own a url shortening service. I want to deliver only legitimate statistics to my clients. There are possible scenarios that a particular user writes a script to automatically open the shortened URL, ...
5
votes
4answers
2k views

Signature instead of PIN, Visa card

Most of the credit cards require PIN to authorize transaction. Recently upon a transaction the merchant required my signature and not my PIN. I understand this is another sort of authorizing the ...
8
votes
1answer
1k views

Why is it hard to prevent scalpers from using bots to buy up lots of concert tickets?

The New York Times recently has an article that talks about how scalpers are using bots to programmatically buy up lots of concert tickets, making it harder for ordinary fans to buy up tickets. For ...
47
votes
4answers
12k views

Detecting skimmers and other ATM traps

This question has been bothering me ever since I first heard of ATM skimmers: Instances of skimming have been reported where the perpetrator has put a device over the card slot* of an ATM (...
7
votes
4answers
451 views

Candidate authentication in large scale assessment

First of all, I'd like to apologize beforehand if the questions I am about to ask are not really suitable for this site. I could not think of any other category to post under. Right, here goes. We're ...
3
votes
1answer
219 views

how can my bank have a wrong phone number entered with my personal account information?

the other day at our bank, while my wife and i were transferring some funds between accounts, we found that on one of the accounts, a phone number that has no relationship to either of us was listed ...
6
votes
4answers
845 views

Source code auditing and fake builds

I am wondering about source code auditing and how hard it would be to fake a build to be audited? Let me explain. Say I would be a dishonest programmer that would wish to put in some backdoor into ...