2015-08-24 at 7:08 PM UTC
So as you all know, I have this retail gig that I've been at for about six months now. This allows me to look at people's driver's licenses, checks, credit cards, even hear customer's SSN occasionally.
A few months back the store changed out all of the card readers so that they can read the new chip cards. Basically, if someone tries to swipe a card, it may ask for them to insert their card so the chip can be read. Apparently, this seems to be based on the issuer, and according to customers, is random(but they could be full of shit).
I had a customer attempt to pay for about $15 worth of items using his chip card. The register read "CARD ERROR". So the customer said, "I'll try to swipe it instead." After swiping it, it said "PLEASE INSERT CARD". I asked a manager what I should do, and he said to just type in the card info. So I went through the process, which had me type in the card number, expiration date, and the 3 digit security code on the back of the card, and it went through.
So basically, if you have the card's number, expiration date, and three digit security code, you could just print out a card with a damaged chip, and spend away.
The following users say it would be alright if the author of this
post didn't die in a fire!
2015-08-24 at 8:51 PM UTC
I have thought about it here in the UK too, the cards rip quite easily where the chip is and sometimes don't slide in ok, but I have never paid for something swiping like ever, so I don't want to try it and fuck it up and look a right cunt.
But OP some places won't allow that, I have seen in some shops the chip was dirty and they refused purchase ('go to the bank, get cash and come back')
2015-08-24 at 8:52 PM UTC
I wanna get some track data and give it a go
2015-08-24 at 9:10 PM UTC
Over here sometimes the full amount is not taken until a later day.
Example Petrol/gas stations - you put in your card type in the pin and top up.
When you check your online bank it says only £1 pending the full amount gets taken a few days later even if you have no cash in the account
2015-08-24 at 10:44 PM UTC
From what I've read, it that each time you use the chip, a number is generated based on an algorithm that the banks hold, and this number is held for the next transaction. So if someone skims your card data when you use the card and then later sells it, if you used your card since it was skimmed, that number will have changed and the buyer of the data won't be able to successfully purchase goods.
I'm not 100% clear on how it all works though. Is this number put back onto the card itself each time a transaction is made?
is sbtlaurient still around?
i would like to have this thread revisited.
2022-07-16 at 11:55 PM UTC
aldra
JIDF Controlled Opposition
I think he's misterigh or whatever now
this is from when paypass/paywave etc first rolled out and stores had confusing processes to accommodate
2022-07-17 at 1:32 AM UTC
Limit is $100 on no-PIN transactions.
The following users say it would be alright if the author of this
post didn't die in a fire!
2022-07-17 at 3:23 AM UTC
The real SBTlauien is much smarter than OP
2022-07-17 at 4:02 AM UTC
Also, I believe that after so many consecutive no-PIN transactions within a certain time frame, the PIN is then required to continue, until the time frame renews.
2022-07-24 at 9:53 PM UTC
So I made this thread back in the day. Now that I work at a bank, I know that banks will authorize smaller amounts via mag but will eventually block it. The transaction also has to be in the cardholders state.
Right now it's Instant Credit with new apps that I see as an issue. You can use a digital wallet and use a certain percentage of your credit line before receiving the card. There are some requirements but a phishing campaign would likely net a worthwhile yield.
The following users say it would be alright if the author of this
post didn't die in a fire!
2022-07-24 at 9:57 PM UTC
In addition, if you can set up a digital wallet on an existing cardholders account, when a fraud claim is filed and the card is closed out, most customers answer yes when you ask them if they have possession of their device, which usually transfers the new card to the digital wallet, thus allowing more fraud on the new card.
2022-07-24 at 10:08 PM UTC
The real SBTlauien was much smarter
