66 votes
Accepted

Which parts of a credit card can I obfuscate and still have it be valid

If you deface a credit card, you are likely to find it will be rejected for all transactions. The merchant really needs all the info on the card to be valid - it's part of how they protect themselves ...
Rory Alsop's user avatar
  • 61.5k
53 votes

Which parts of a credit card can I obfuscate and still have it be valid

I put a small sticker over the CVV to avoid it being casually seen. The CVV is the three-digit code on the back of the card beside the signature, needed when you buy things on the Internet but not ...
Law29's user avatar
  • 731
36 votes
Accepted

Getting spam calls from numbers similar to my own

The telephone system has been designed so that a caller can replace their phone number with a fake, and some unscrupulous companies use this to change their number to appear to be local to the person ...
GdD's user avatar
  • 17.4k
32 votes
Accepted

Is accepting an invalid credit card number a security issue?

Should I report this as a security issue or will it come under fraud management? There may be a business risk issue, which you can document under security, but how significant it is depends on the ...
gowenfawr's user avatar
  • 72.9k
19 votes
Accepted

Why do scammers use victims' computers to remote-control their own computers?

TeamViewer has noticed that scammers often come from India (or other places where scams often originate), and so when you get an incoming connection from India TeamViewer will give you a warning ...
menney's user avatar
  • 306
18 votes

Getting spam calls from numbers similar to my own

As GdD said, it's CallerID spoofing with the hope of tricking you into answering a 'local' call. I've had this happen where they used my own number as the Caller ID number! I answered because I ...
John Deters's user avatar
  • 34.2k
10 votes
Accepted

Is it possible to clone my contactless debit card while it's in my pocket?

If your debit card has an NFC chip on it (the "tap to pay"), it's possible. This presentation discusses two methods. One is skimming an NFC card and using the recovered data for making Card Not ...
John Deters's user avatar
  • 34.2k
10 votes
Accepted

How safe is my contactless bank card?

Can an attacker get information off the card? Yes, at least some can, and the UK consumer group Which? mentioned in the question did it: Our researchers tested 10 cards (six debit and four credit, ...
Anders's user avatar
  • 65.6k
9 votes
Accepted

Emailing debit card details to a guesthouse

Ask your credit card provider for a one-time card number. Or get a new account with a low limit. Put the credit card number (and maybe a short random string) in a plain text file. 7zip this file with ...
Neil McGuigan's user avatar
9 votes

Clone debit or credit card

Q1: Yes. The link for MagStripe reader and encoder 1 does exactly that. Can read credit or debit and write it to a new blank card and can also erase data on an existing card. the MSR605 comes with ...
nd510's user avatar
  • 1,748
8 votes

Which parts of a credit card can I obfuscate and still have it be valid

The better answer is to use Virtual Credit Cards. You can create a throwaway number with a transaction limit and time limit for dealing with each unknown vendor/merchant, you can also set an amount ...
smci's user avatar
  • 203
7 votes

Can someone take money out of my account with just my Account & Routing number?

In theory they can, just like companies can directly take money (called Direct Debit here in the UK) from your account using those values. However to be able to do direct debits you'd need an ...
André Borie's user avatar
  • 12.8k
6 votes
Accepted

Is adding a supplementary credit transaction something that could improve online payment security?

Answering my own question to be able to flag it as answered and prevent it from popping up from time to time: this measure appears as a plain example of security theater. Here are the elements ...
WhiteWinterWolf's user avatar
6 votes

Wiping magnetic stripe on card with magnet?

With a weak kitchen magnet this can take many passes and a fair amount of time. In fact if all you have is a fridge magnet you may be better off scraping the strip off. However a more powerful magnet ...
AstroDan's user avatar
  • 2,238
6 votes

Full credit card photo (front and back) accidentally sent to a customer service, what to do now?

Immediately call your bank's Lost and Stolen credit card number, found on the back of your credit card. Tell them what happened, and they will take the appropriate action.
John Deters's user avatar
  • 34.2k
6 votes

Which parts of a credit card can I obfuscate and still have it be valid

The way you phrase your question seems to indicate that you think it's a bad apple at a merchant who is stealing your credit card, namely by using a manual method of writing down card details. Let me ...
Cayla's user avatar
  • 61
6 votes

Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?

First, expecting the user to provide full access to their mail to you sounds like a terrible idea for me, since this gives you also access to all private or otherwise sensitive mails of the user. Even ...
Steffen Ullrich's user avatar
5 votes
Accepted

PayPal payment reversal; scammer at work?

Is this someone testing out credit card numbers they've stolen? Yep. You're being used as a canary to test stolen credit cards. They found your website at random and see you're willing to accept ...
Ivan's user avatar
  • 6,328
4 votes

Bank website forwards to false site - formatted hard drive - still forwards

One common attack method consistent with your symptoms is DNS Hijacking, which is any means that an attacker uses to convince your computer that your bank's web site, "www.mybank.com" is actually at ...
Jeff Meden's user avatar
  • 3,976
4 votes

Wiping magnetic stripe on card with magnet?

You didn't say why you needed to wipe a magnetic stripe without otherwise damaging the credit card. Wiping it to prevent someone from using it to buy gas requires a different level of effort than ...
John Deters's user avatar
  • 34.2k
4 votes
Accepted

Single button click mobile direct carrier billing fraud

It's called HTTP header enrichment. The MSISDN (mobile phone number) is injected in the header once the user hits a whitelisted URL by the operator. Not visible through http://headers.cloxy.net. The ...
Nonick's user avatar
  • 56
4 votes

If I give my bank account and routing number to a stranger to receive a one-time payment, can they steal money from my account?

This depends on which juridicsion or country you live in. For example, here in sweden, its safe to give out bank account number and routing information, because to extract money, you will need a ...
sebastian nielsen's user avatar
4 votes
Accepted

Suspected fake torrent peers with "client_test" ID

I think it refers to iknowwhatyoudownload.com This site made by russians and collects information about what you downloading and publish it. They are most often connecting via DHT and PEX.
Purple_Pony's user avatar
4 votes

Which parts of a credit card can I obfuscate and still have it be valid

Yor credit card has the card number, expiration date, cardholder name, and possibly an additional short security code that you could conceivably remove from the physical card and store in a password ...
Out of Band's user avatar
  • 9,273
4 votes

Online Retailer asks for a copy of Credit Card and Drivers License

Those responding here, probably haven't sold anything online and have no idea of the amount of credit card fraud retailers have to deal with. It is very common to have some fraudster use someone ...
sera's user avatar
  • 49
4 votes
Accepted

Can a magnetic credit card writer encode a blank card based off just a credit card number?

Could someone write just your card number to a blank card? Yes. But would that let them masquerade as you and charge up your account by swiping that card at point of sale machines in brick and mortar ...
dwizum's user avatar
  • 554
4 votes
Accepted

How could a scammer get my card details if I've never used it

Thieves get card numbers and expiration dates from somewhere it is stored or processed. That could be a local with access to your home, access to the originating bank that issued the card, the post ...
Tim Brigham's user avatar
  • 3,772
4 votes

Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?

Your goal here is obviously to verify that the customer indeed purchased whatever merchant sells, and not merely sent a order, which was later cancelled. First of all, sending fake e-mails is a rather ...
vidarlo's user avatar
  • 16.1k
3 votes

I emailed someone a picture of a check I wrote for them. What now?

I disagree with @quietsigns answer. There are other people that could potentially see your email. For one - email can be sniffed while in transit. Probably not super likely but still possible. ...
Abe Miessler's user avatar
  • 8,195
3 votes

Getting spam calls from numbers similar to my own

Block it with CallControl by downloading it from the Android app store. Use the wild card option to block all numbers from that specific exchange.
user3763000's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible