How to stop 'Contactless' transactions

PurplePow

M_Thomson wrote: »

Where do you live? They're in loads of places in London. Boots take them and Tesco have started rolling them out in stores.

I'm in NE of England and never seen anywhere that accepts contactless payments until last week when my local McDonalds announce they take them. Wish the coffee shops like Costa/Starbucks etc would introduce them, would be much quicker on a morning!

DCFC79

I dont see what the fuss is about, i think the banks would have thought of any possible holes in security

madgagoo

My only concern is when I have more than one contactless card in my wallet, how does the machine know which one I want to pay with!!!!

chopper78

M_Thomson wrote: »

Where do you live? They're in loads of places in London.

Not in London...

In fairness, last time I was in Greggs I did see that they had installed card terminals with contactless bits, but the staff knew nothing about the contactless bit and indeed my card wouldn't work with it. Kind of pointless, since they have a minimum transaction of £3 for cards.

You have to buy a lot of pasties to spend £3 in Greggs.

chopper78

DCFC79 wrote: »

I dont see what the fuss is about, i think the banks would have thought of any possible holes in security

Most card security is there to fool the public into thinking the banks have thought about security.

1) Verified by Visa or Mastercard Securecode is rediculously insecure.
2) Banks phoning you up and asking you to provide your details. Encouraging social engineering...
3) Those card readers they give you for online banking? Well, muggers could just carry one of those around and when they mug you for your card, they can use these card readers to verify you have given them the correct card number. Excellent.
4) An easy way to make cards more secure would be if the number on the front of the card and magstripe were different to the card number on the PIN and different again to the number on the contactless bit. This alone would make capturing card details mostly useless.

But have the banks thought of any of this?

No.

malcolmffc

Seriously.... you don't think they've thought of this problem? You'll only be able to make max 1-2 transactions per day, and only for up to £15.

If you really want to get rid of the chip, put the card in the microwave for a few seconds.

charlotte289

malcolmffc wrote: »

Seriously.... you don't think they've thought of this problem? You'll only be able to make max 1-2 transactions per day, and only for up to £15.

If you really want to get rid of the chip, put the card in the microwave for a few seconds.

Wouldn't that mess up your microwave, though?

pjread

chopper78 wrote: »

Whilst losing out on the £15 to us sounds harsh, the reality is that it simply isn't worth it for the criminal gangs. They cannot withdraw money with it, they cannot buy expensive tangiable goods which can be sold and turned into cash. They cannot convert contactless payment information into cold hard green, only into a bite to eat, so it isn't worth it.

I have a contactless barclaycard and have been disappointed with the lack of places I can use it.

Ok but that's assuming they directly use the details, rather than say using it as a phase 1 to gather details. Wonder if there's a market for that info? lets assume your average two-bit yob could spend an average £45 per set of details, does that make it worth £20 a throw to the right/wrong person?

Ok that's only £20, but it's per hit potentially - ever been on the London Underground?

Not saying it's that simple and maybe it isn't worthwhile, but I'd not assume direct misuse is in the minds of those that might farm the details.

INT1

I tried to use my AMEX card (issued by MBNA) which has the contactless logo and came up with routine authorisation check.

I had never used it before so not sure if it's enabled or not?

Anyway, why would the criminal underworld spends lots of money & time on developing software to counterfeit contactless card payments when they can only spend £15 for the first 4/5 transactions?!

Also if your card was lost or stolen, I can't see how the bank will make you pay for contactless payments!

I think some people need to move with the times!

SteveStone

madgagoo wrote: »

My only concern is when I have more than one contactless card in my wallet, how does the machine know which one I want to pay with!!!!

The transaction wont go through if there is more than one signal.

Also, From when it was launched where i work:

The customer is NOT liable if they card is stolen and used fraudulently. (Also, the retailer is risk free) The bank will take the hit if the card is used.

The card will randomly ask for the pin to confirm the card holder still has the card.

Granted I can see where some peoples concerns are, but when Chip and Pin first came out the same concerns were raised.