Should I be concerned about CC companies storing my debit card details?

cheesetoast

Why not get a Mondo card? It's prepaid, so you can load money on and then make the payment straight away, can't go overdrawn, and presents as a MasterCard Debit.

harryfrombarry_2

Don't forget to put your tinfoil hat on!

pb3

harryfrombarry wrote: »

Don't forget to put your tinfoil hat on!

LOL! I'll stick to my RFID blocking wallet thank you.

PB

GingerBob_3

harryfrombarry wrote: »

Don't forget to put your tinfoil hat on!

Maybe you could lend him yours, or maybe your clown outfit.

orionmoo

PCI compliance applies to all entities who store, process or transmit cardholder data. This includes issuing banks as well as merchants. They can store your card number provided they use strong cryptography, and have security policies and data retention policies. They cannot store your security code (post authorisation) however (issuers are kind of except from this restriction provided they have business justification such as in order to produce the cards they issue).

They could very well use tokenisation for storage which is much less useful to an attacker. At end of the day, if your card is used fraudulently you'll get a chargeback, but the merchants who were breached will lose out, as will the merchant were the fraudulent purchase was made. Those who are breach will encounter a minimum of £3000 charge for investigations and/or fines. If they can't pay or refuse to pay, their acquiring bank will simply shut them down or charge them much more per transaction in processing fees!