Questions tagged [fraud]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
70
votes
10answers
37k views

Can I scratch off the magnetic strip off a debit card to only allow chip and PIN?

I have been robbed in the past by thieves using my HSBC Debit Card (issued by UAE branch) to purchase mobile phones and accessories by signing for the purchases. While the card has chip & PIN ...
59
votes
5answers
68k views

What's the impact of disclosing the front-face of a credit or debit card?

There are quite a few cases where people are called out for disclosing the front-face of a credit or debit card (e.g. this tweet from Brian Krebs or this twitter account). So I was wondering what the ...
51
votes
4answers
15k views

Detecting skimmers and other ATM traps

This question has been bothering me ever since I first heard of ATM skimmers: Instances of skimming have been reported where the perpetrator has put a device over the card slot* of an ATM (...
38
votes
6answers
10k views

Which parts of a credit card can I obfuscate and still have it be valid

I was recently the victim of credit card fraud and I suspect it is from a merchant somewhere keeping track of my credit card details. I cancelled the card and received a new one, but I would like to ...
35
votes
8answers
6k views

Dealing with excessive “Carding” attempts

We are currently setup using Magento on a LAMP stack for our e-commerce platform. As of a month or two ago we began noticing a lot of carding attempts against our website. All attempted transactions ...
34
votes
5answers
181k views

Getting spam calls from numbers similar to my own

My phone number is 456-123-XXXX (American phone number + area code). Over the past few months I get fairly regular spam calls from other numbers also beginning with 456-123-XXXX, where the last four ...
29
votes
5answers
66k views

How do location-based apps avoid getting cheated by emulated GPS?

Some apps like Foursquare require the user to "check in" at physical places, in order to gain money benefits. Given that emulated GPS are available for customized versions of Android, it sounds easy ...
25
votes
7answers
11k views

How to prevent cheating (extra votes) in online contests?

Mitigating Cheating & Voter Fraud in Online Contests… We run online contests of various sorts that involve users voting on entries (usually one vote per user per day). The prizes range from ...
24
votes
4answers
53k views

What is the use of stolen credit card details?

What can a person with stolen credit card details do? Buy porn? Buy tons of server resources to perform an attack? What else? I'm sure that if he buys books, shoes and bicycles or transfer funds to ...
22
votes
3answers
6k views

Is accepting an invalid credit card number a security issue?

I am testing a website which accepts invalid credit card numbers for reservations. The interesting thing is they do CC validation if the currency is USD, but not for any other currencies. Should I ...
18
votes
1answer
1k views

Intricate fraud attempt on eBay

I would like the community's input on an event that took place recently, that I honestly don't know what do make of: When trying to watch an item on eBay, a warning notice said my account had been ...
16
votes
2answers
380 views

Is adding a supplementary credit transaction something that could improve online payment security?

An online company from which I regularly buy goods apparently recently upgraded their security policy. Let's say I bought something for 73,31€. As usual this company uses 3D-Secure for the checkout ...
15
votes
5answers
518 views

I need ideas for blocking a single malevolent user

Let me throw out this problem I'm having to some of my technical peeps and see if you guys have any new suggestions: We have a website that sends text messages and voice mails for our clients. ...
14
votes
2answers
3k views

Should I change phone number and e-mail address after PayPal fraud?

I have been the victim of PayPal fraud. I hadn't used PayPal in a year and then within 9 days there were three unauthorized transactions on my account for a total of 150 Canadian dollars and 290 ...
14
votes
1answer
2k views

How safe is my contactless bank card?

In the past few years Contactless Payment cards have been introduced and I have been reading some articles surrounding security of these cards. The following article "Stealing data from contactless ...
11
votes
2answers
1k views

Are social security numbers useless by themselves?

453.7 million social security numbers have been issued to date. There are only 1 billion = 1000 million distinct 9 digit integers. This means that if I were to make up any 9 digits, I would have ...
10
votes
2answers
2k views

How can a domain be impersonated with a fraudulent SSL certificate?

I was reading this article about the fraudulent certificates from Comodo back in 2011. It talks about domain impersonation. I understand that a fake website could be secured with the fraudulent ...
8
votes
5answers
23k views

How is Chase Mobile Deposit Secure?

Chase has this app that allows you to snap a picture of a check with your phone and deposit that check into your account. How do they prevent: Someone from depositing a check that's not written to ...
8
votes
1answer
2k views

Why is it hard to prevent scalpers from using bots to buy up lots of concert tickets?

The New York Times recently has an article that talks about how scalpers are using bots to programmatically buy up lots of concert tickets, making it harder for ordinary fans to buy up tickets. For ...
7
votes
4answers
733 views

Candidate authentication in large scale assessment

First of all, I'd like to apologize beforehand if the questions I am about to ask are not really suitable for this site. I could not think of any other category to post under. Right, here goes. We're ...
7
votes
5answers
3k views

Preventing online voter fraud

As part of a promotional campaign, my company wants to launch a site where users (and potential users) of our product will be required to register and vote for certain choices. Depending on how ...
7
votes
5answers
965 views

How to prevent pay per show/click abuse?

We have a webapp. 3rd party websites put our banners on their pages (banner is a snippet of HTML). They are paid for it using "Pay per click" or "Pay per show" methods. So 3rd party website's owners ...
7
votes
4answers
345 views

Bank website forwards to false site - formatted hard drive - still forwards

Summary: When I visit my bank's website, I get forwarded to a phishing mirror site. This has persisted through a re-format of my MacBook. Even on different browsers! Other computers on the same ...
7
votes
1answer
32k views

Clone debit or credit card

I would like to make some workshop about Debit or Credit card fraud (Skimming). So I need as much as possible information about it. Is it possible to clone debit or credit card with MagStripe reader ...
7
votes
3answers
1k views

Credit card fraud prevention

The project that I am working on requires processing of credit cards. Is there any way to detect cloned/counterfeit cards? Are there any proven workarounds to prevent credit card fraud or misuse? We ...
6
votes
4answers
1k views

Source code auditing and fake builds

I am wondering about source code auditing and how hard it would be to fake a build to be audited? Let me explain. Say I would be a dishonest programmer that would wish to put in some backdoor into ...
6
votes
2answers
6k views

Is it possible to clone my contactless debit card while it's in my pocket?

I have a bank account that I never use, someone cloned my debit card and used it to buy something in Brazil in order to make sure the cloning was successful then they started making transactions of £...
6
votes
3answers
668 views

Fraud prevention on online transactions

We operate an e-commerce website, and we're facing some big problems with payments. Very often, some customers get credit card data and use those in our store. So when the real credit card owner gets ...
6
votes
3answers
327 views

Best way to handle identity theft incident?

A user's email is hacked, contacts copied, and similar emails (look alike emails with minor spelling differences) are created by the attacker with the same name and avatar, sending relatively well ...
6
votes
2answers
800 views

PayPal payment reversal; scammer at work?

For the past several days, I have received several monetary donations through PayPal for exactly 1 US dollar. Several hours after the donation is received, I also receive a notification from PayPal ...
6
votes
1answer
333 views

Countermeasures for a family-member attack on a password reset procedure

Given an account reset procedures, there are usually some recovery questions, and in better implementations a link will be sent to confirm the password change via email or SMS. Therefore, the attacker ...
5
votes
4answers
5k views

Signature instead of PIN, Visa card

Most of the credit cards require PIN to authorize transaction. Recently upon a transaction the merchant required my signature and not my PIN. I understand this is another sort of authorizing the ...
5
votes
1answer
7k views

I emailed someone a picture of a check I wrote for them. What now?

On a whim, I emailed the intended recipient of a check I wrote a picture of that filled-in check to indicate I was about to mail it out. The full front of the check, with amount, my signature, account ...
5
votes
3answers
2k views

Online Retailer asks for a copy of Credit Card and Drivers License

This weekend I placed an order for a part from an online retailer ($300-400). Shortly thereafter I received an email from their sales team saying something similar to the following: Hi, we have ...
5
votes
1answer
927 views

Trying to prevent Cisco toll fraud

A little back story on the setup first; We have a Cisco VoIP setup at our remote office(where I'm at) and the main CCM/CCX/Unity setup is at the parent company across the US in Connecticut. We have ...
4
votes
3answers
12k views

How can I prevent my E-mail address from being used as the sender for fraudulent/scam messages?

Recently, me and at least one other person I know received an obvious scam E-mail that starts off something like this: We considered your resume to be very attractive and we thought the vacant ...
4
votes
2answers
5k views

Wiping magnetic stripe on card with magnet?

I asked a question a while back on using magnets (for example powerful Neodymium ones) to wipe a HDD, and got shown a good article proving it is not possible to wipe data. Pretend I am about to ...
4
votes
2answers
900 views

What is the severity of a fake certificate?

I'm not a security specialist, thus reading this Google Blog post about a fake *.google.com certificate, raises a lot of concerns, if anyone can impersonate a website, especially a google website, my ...
4
votes
2answers
2k views

Why do scammers use victims' computers to remote-control their own computers?

I've seen videos showing how tech support scammers operate. In nearly all of these videos, the scammer instructs their intended victim to install and run remote-control software, which allows the ...
4
votes
1answer
132 views

Giving merchant account information to web programmer

Our web programmer needs our merchant account information to set up our ecommerce site. He is asking for the "processor name", "processor ID" and "merchant ID". If I provide him with the information ...
4
votes
3answers
296 views

How could a scammer get my card details if I've never used it

Today I had about $600US spread across 20 transactions taken from my debit card over the past three days (I notified my bank said they will give me a new card and will refund me) This particular ...
4
votes
1answer
116 views

Debit Card was used fraduentely, Should I report an incident to the websites that stored my card?

Here is my situation. I had a debit card where I could transfer funds to it for limited use. I usually kept a low amount on this card just for little purchases. It was recently used in a fraudulent ...
4
votes
1answer
44k views

What can be done with the last 4 digits of one's SSN [closed]

If a hacker were to get the last 4 digits of your SSN (and maybe some other info like name, etc), what could they do? To avoid the possibility that they could guess the other digits from date/...
4
votes
1answer
239 views

Best practice for Users to avoid fraud for Direct Debit enabled bank accounts?

Direct Debit or automatic debit transfer system or Bankeinzug (German), seems a common/convenient way to pay in (online shops in) many countries available for many banks. https://en.wikipedia.org/...
3
votes
1answer
323 views

Fraud Mitigation - Card Present Transactions

When it comes to fraud screening for card not present transactions (credit card / debit card) there are a number of techniques / services that can be utilized to mitigate risks from fraudulent ...
3
votes
2answers
6k views

Can expired credit card information be used for fraud?

I have encountered a situation where payment card (debit/credit) information, including name, number, expiration date, and cvc, is being saved by an organization unencrypted in excel spreadsheets on ...
3
votes
1answer
1k views

how can my bank have a wrong phone number entered with my personal account information?

the other day at our bank, while my wife and i were transferring some funds between accounts, we found that on one of the accounts, a phone number that has no relationship to either of us was listed ...
3
votes
3answers
22k views

Can someone take money out of my account with just my Account & Routing number?

I had recently given someone my account number and routing number to deposit money into my checking account. They owed me money I had lent and said this would be the easiest way for them to do it. I ...
3
votes
2answers
145 views

Mail interception fraud

My company has been the target of a mail fraud attempt for the second time this year. The fraud goes as followed: My company sends an invoice to a customer from the email address alice@mycompany.com ...
3
votes
1answer
329 views

Can multiple transactions of the same amount in a short time be considered fraud/corruption?

Back story In South Africa there is a website where I can buy prepaid electricity online for my apartment. When buying I did not get the token to use on my metered box. I had a chat with them today ...