Verified by VISA - Warning!

Paul_Varjak

I did a debit card transaction today but decided to abort the transaction when I was prompted for the VERIFIED BY VISA password (my card is registered for VERIFIED BY VISA) Imagaine my horror when the transaction went through anyway!

I contacted the merchant who said that I should take up the issue with my bank. My bank said I should take up the issue with VISA. VISA said I should take up the issue with my bank.

My bank now says it is possible to abort from the VERIFIED BY VISA process THREE TIMES in the lifetime of the card and the transaction will still go through!

Does that mean each time I get a new card, I should make three transactions and abort those transactions, so that all subsequent transactions will be refused if I fail to enter the VERIFIED BY VISA password?

meer53

Why did you abort the transaction ?

If a retailer is signed up to VBV, you will be prompted for your VBV password. You are allowed to make 3 transactions without using VBV (to any retailer) before receiving a warning that any further transactions may be declined. There are some retailers who don't use it so you might not get asked every time you use your card.

Paul_Varjak

meer53...

I thought I may have made a mistake during the transaction; luckily I did not.

My concern is that VERIFED BY VISA is not all that it is cracked up to be. Not all merchants use it, so my card could be used fraudulently by anyone with my card details (eg another merchant).

The worry now is that my card could still be used fraudulently via a merchant who has signed up to VERIFIED BY VISA, up to 3 times!

I always delete the CVV 3 digit code from the back of the card, just in case I lose my card, as some payment processors do not even verify the name/address in on-line transactions - I learned that when my VISA credit card was used processed via a fraudulent website avbout 21 months ago.

Thank goodness that my card issuer quickly refunds fraudulent transactions!

s_b

the reason i like vbv is because only merchants i deem suitable to deal with seem to use it so i see it as an extra precaution
i like your idea of removing the 3 digit number though
thats inspired:)

Paul_Varjak

s_b wrote: »

the reason i like vbv is because only merchants i deem suitable to deal with seem to use it so i see it as an extra precaution

Is there anyway of determining if a particular merchant does use VERIFIED BY VISA? I don't always believe claims made on merchants' websites! Chances are, if a merchant pays to to use Verified by Visa, then they are going to be genuine. I wonder what the chances are of making 3D secure codes compulsory for internet transactions?

s_b wrote: »

i like your idea of removing the 3 digit number though
thats inspired:)

Every little extra precaution can only help. But I understand that a fraudster with the right knowledge can derive the CVV from the card number and expiry date if they happen to know the algorithm and, unlike a PIN, the CVV cannot be changed.

Dr_Cuckoo3

Paul_Varjak wrote: »

I did a debit card transaction today but decided to abort the transaction when I was prompted for the VERIFIED BY VISA password (my card is registered for VERIFIED BY VISA) Imagaine my horror when the transaction went through anyway!

My bank now says it is possible to abort from the VERIFIED BY VISA process THREE TIMES in the lifetime of the card and the transaction will still go through!

Does that mean each time I get a new card, I should make three transactions and abort those transactions, so that all subsequent transactions will be refused if I fail to enter the VERIFIED BY VISA password?

You say that your card is already registered with Verified by VISA

It is my understanding that you can only decline to register for Verified by VISA three times before they prevent use of the card online

The actual onscreen message is "*Please note that by selecting not to register this may prevent you from making future on-line purchases with your HSBC card. "

Once you have registered you cannot bypass using your password three times



Turning to the issue of aborting the transaction when prompted for your password , presumably you used this button ; "javascript:ConfirmCancel(document.receipt);" and you say the transaction still went through

Although I don't know what happened in your case , it is possible for the Verified by VISA password screen to appear and then authorise the transaction without the password being entered - in this case the screen appears briefly and then disappears followed by the transaction being approved

Paul_Varjak wrote: »

Is there anyway of determining if a particular merchant does use VERIFIED BY VISA? I don't always believe claims made on merchants' websites! Chances are, if a merchant pays to to use Verified by Visa, then they are going to be genuine.

Yes - enter an incorrect CVV (or expiry date ?)and you will still be presented with the Verified by VISA password screen - the transaction will be declined after entering the correct password (I do this when using a website when I doubt that the transaction in processed in real time and merely "emailed" to the website operator)

Paul_Varjak

@Dr_Cuckoo3

Yes, my card is definitely registered with VERIFIED by VISA, I use it a lot on Companies House website which uses VERIFIED by VISA even on transactions of just £1.

It is worrying that I could abort a transaction at the VERIFIED by VISA stage and for the transaction still to go through, particularly if I told you who the merchant was; it could open the floodgates for international fraud!

The VERIFIED by VISA screen did not 'flash' and then disappear, it was on the screen for about 15 seconds before I aborted using the CANCEL button.

I simply do not know if the merchant is at fault or if it is VISA that is to blame; the response I got from both was very poor; I cancelled my account with the merchant.

Nice trick you employ to check if a merchant uses VERIFIED by VISA!

Laz123

I also use the VBV and didn't know about the three strikes and you're out rule. It does seem incredibly stupid. But that's banks for you.

moonrakerz

Paul_Varjak wrote: »

Thank goodness that my card issuer quickly refunds fraudulent transactions!

I really don't understand comments like this. If it is on a credit card, there is nothing to refund. If it is a fraudulent transaction, you tell the card issuer that and you don't pay for it. It is HIS problem, not yours.
If you say that it is fraudulent and the issuers disagrees, he has to PROVE that you actually did make the transaction or were negligent with your card/PIN. You don't have to do anything.

That is the beauty of using a credit card - no worries ! (Plus Sect 75)

mrkunle4real

Hi, please can anyone help me with the name of any merchant that does not use the verified by visa upon checkout. I want to shop online but haven't enrolled for the program because my institution does not support it.

Thanks.
Expecting a reply from you people.

vuvuzela

Which 'institution' are you using, out of interest ? And why not change 'institution' to one that supports VBV for security purposes ?