Fraudulent use of credit cards

kevanbarrett

Having recently had my CC fraudulently used, I have given more thought to its use. I now have covered up the 3 digit security code with a small piece of sticky label, which prevents it being seen in any establishment when the card is used( Providing it does not go out of sight.)

However,I had just given my CC details ( including 3 number Security code ) to booking clerk of a perfectly respectable hotel group running pampering days.

Actually paying for a birthday present voucher.

I have now realised that the person has complete knowledge of my details for whatever use.

They can even be used to have goods delivered to an address different to my own, as I recently arranged when having an item sent to my son at Uni.

How can cardholder not present payments ever be secure?

Kevan

Bernard_Coleslaw

There is at least one other security measure, called AVS (Address Verification System). Basically, whenever you make a cardholder not present transaction, the vendor takes your address details and passes certain bits of this to the cc issuer, together with your card number, expiry date and CVV2 (the three-digit security code).

If the AVS, along with everything else, checks out, then the transaction is authorised. That's one reason why more and more websites and phone transactions will insist on having your card billing address.

It's not perfect, but it's another layer of security.

BC

Wirenth

Mum and I recently booked a holiday online with Titan tours, paying the deposit by credit card.

They sent us an invoice asking for the balance to be paid by a certain date. You could do this by returning a form in the post containing card details - card number, expiry date, start date, issue....AND the 3 digit security code. :mad:

How many people do you think unwittingly return these forms with all that info on them?

Companies don't help their customers by behaving like this.

abwsco

Bernard_Coleslaw wrote:

There is at least one other security measure, called AVS (Address Verification System). Basically, whenever you make a cardholder not present transaction, the vendor takes your address details and passes certain bits of this to the cc issuer, together with your card number, expiry date and CVV2 (the three-digit security code).

If the AVS, along with everything else, checks out, then the transaction is authorised. That's one reason why more and more websites and phone transactions will insist on having your card billing address.

It's not perfect, but it's another layer of security.

BC

At the moment though it is possible to still overide some of these checks and accept the transaction.

Bernard_Coleslaw

abwsco wrote:

At the moment though it is possible to still overide some of these checks and accept the transaction.

Absolutely, if the vendor wants to accept the full fraud liability with no comeback.

BC

kevanbarrett

Thank you everyone for your prompt advice and experiences.

Having read my own thread again, I suppose the real point is that the clerk( who I make no allegations against whatsoever)is now one of many persons who have my full card details after card holder not present transactions. All of these, or their associates, can now use those details, and having given my correct adddress can then proceed to order goods for delivery to elsewhere. If neither the vendor nor the card company then make a check, as with me and the delivery to Uni, then bang goes the security. Or am I over reacting.

Thanks everyone.

AQUA-IAN

Personally, I think you may be over-reacting on this issue. The vendor who processed the transaction would have to take full responsibility after the merchants carried out their investigations. The consumer would not be held liable if fraud had taken place. Section 75 of the Consumer Credit Act is also in force for all transactions over £100 processed on a credit card.

Rafter

If you are really concerned you could have an account you only ever use one card for internet/home shopping and one for normal purchases.

You can then spot possible fraudulent use and have more idea about where your card may have been compromised.

You could even scribble out the 3 digit code and write "Do not accept Signature" in the signature strip so your card can only ever be used in chip and pin establishments. This won't work if you ever go abroad though or use retailers that haven't made the switch.

Remember though, you are not liable for the fraudulent use of your card unless you do not report it lost or stolen or unless you write your pin down somewhere or otherwise compromise it.

R.