Card Fraud at Petrol Station

N9eav

Firstly the credit card provider will usually refund the fraudulent transactions.


Report the matter to http://www.actionfraud.police.uk/


Generally speaking, once the card provider has refunded you, they become the loser. The often do not pursue the complaint themselves and the Police numbers have been cut so much that it is unlikely to be investigated anyway. The card provider can claw back the money from the trader if they have accepted card details over the phone without the relevant security checks


A lot depends on whether Action Fraud pass on the complaint to the local Force or just screen it out...

eskbanker

manami_mnm wrote: »

It is possible to an extent to reconstruct the full card number from the first and last 4 digits.

To what extent?

grumbler

roddydogs wrote: »

Why pick out petrol stations, could happen (and does) anywhere.

Because:

1. there were proven cases recently where petrol station(s) was involved,
2. ...

rosherville wrote: »

Hadn't used my Visa card for a couple of weeks when I bought fuel, within 12 hours over £1600 had been spent online.

SnowTiger

eskbanker wrote: »

To what extent?

The first six digits generally identify the issuer. For example, my Halifax Clarity card number begins 5253 03. There's a list here. It doesn't appear to be very up-to-date, but there are probably other lists.

So, armed with the first four digits, it's probably fairly easy for someone who's seen the card to guess digits five and six.

So, that's ten of the sixteen digits.

Credit card numbers use the Luhn algorithm for validation. I'd guess that if someone who saw the card could memorise a few of the remaining digits, the number could be guessed fairly accurately.

N&P debit card numbers are particularly easy to guess. Although not on the list I mentioned earlier, I suspect all of the debit cards they issue begin with the same first six digits. The last eight digits are the number of the bank account the card is attached to.

If I posted my N&P bank account number here, it would be trivial for someone to guess my card number. Bank account numbers are not sensitive pieces of information and don't need to be kept secret.

bris

N9eav wrote: »

Generally speaking, once the card provider has refunded you, they become the loser. ...

Not always, in fact less often than you think. Without the cardholders address the retailer would be breaking the T&C's by accepting the order so it would be charged back from them.


In order for an online transaction to be fraud proof for the retailer they need to get certain info from the cardholder, the CSV and registered address are the most important.


The fraudster can change delivery address but billing address must always be the cardholders, without it the retailer is taking the risk.


If the card was skimmed at the petrol station (probably not) then they would have no way of knowing the address so I would be surprised that any transaction could get round the retailers, or merchants security. For me it has to be someone who knows the card holders address too. Some kind of phishing scam usually gets all these details, clicking links is the usual suspect.

sleepymans

mrbutterjone wrote: »

Must declare all that is abnormal to society of petrol then the police to find the source of the problem.

What....?????

thebritishbloke

20aday wrote: »

The petrol station in which I work only shows the first and last four digits of the 16 digit number along with the card's expiry date on BOTH copies; I don't know what it's like for others who work in Retail?

I was using a PDQ machine at work yesterday which printed out their full card number, I thought this was pretty standard.

20aday

thebritishbloke wrote: »

I was using a PDQ machine at work yesterday which printed out their full card number, I thought this was pretty standard.

We've a PDQ terminal for whenever someone needs to pay for fuel over the phone because they've left their wallet at home; it's provided by BarclayCard and displays the full card number on the merchant copy.

However the main tills in the shop only display the first and last four digits of the card and expiry date on both copies (theirs and ours.)

Money-Saving-King

rosherville wrote: »

customers gives little info but traders receipt has your full card number as well as expiry date.

I don't know who told you that but it's wrong. The trader never knows the full number from the receipt. Also since chip & pin most retailers don't have their own receipt (it's all electronic) only the customer get one. The only exception will be the odd foreign card from tourists that still uses a signature for payment.

manami_mnm

Money-Saving-King wrote: »

I don't know who told you that but it's wrong. The trader never knows the full number from the receipt. Also since chip & pin most retailers don't have their own receipt (it's all electronic) only the customer get one. The only exception will be the odd foreign card from tourists that still uses a signature for payment.

In the merchant's statement the full credit card number is shown. Maybe this differs from one merchant to another.