Barclaycard is bullying me!

knowledgeman

James wrote: »

Verified by Visa (VBV) and Master Card Secure Code (MCSC) are similar to the PIN part of Chip & PIN it will reduce fraud, but IMHO there's a liability shift for fraud that does occur - onto the card holder. As Spark points out it seems we (cardhodlers) aren't getting the choice whether to sign up or not.

Until consumers are presented with the facts and given the choice (as they were previously) then Spark is right, this is a form of bullying.

VBV and MCSC are not embraced by ALL card issuers and even less retailers.

Neither system works with Mail, Internet or Fax transactions.

And it would appear there could be a liability shift - onto the consumer when things go wrong.

In addition goods will still go amiss at point of deliver, and this is where the real crime occurs.

After saying all that, there is a niche place for VBV and MCSC.

IMHO it should be mandatory for Internet retailers wo sell services i.e. Music and Movie Downloads, on-line gambling etc etc to be signed-up for VBV or MCSC. Either that or a means of card issuers veryfiying with the genuine cardhodler that they have indeed carried out a transaction with one of these providers. Maybe by phone or on the Internet via secure mail. (Retailer verifies card with card issuers - card issuer verifies transaction with cardholder - card issuer verifies card user with retailer - transcaction complete).

Retailers who sell physical goods via the Internet, Mail or Order, or by Phone or Fax then something is needed to deter the theft goods at point of delivery. (This is where the actual crime takes place. It's not until crooks acqurie goods by deception that there is any loss).

IMHO - We the cardhodlers need to become more involved.

We need a deterrent (Prevention is better than cure)

We need something to remove any liability from us if fraud does occur

And

We need something to force theives to show their hand(Help Identify them)., and provide a forensic auditable trail (without the need for databases).

Here is a solution - That's for you, not the thieves, not the banks but you.

Card Fraud - How to Beat Most of It.

At the end of the day if someone gets a hold of your password other than in the case of physical violence or burglary its your own fault and serves you right

Dylanwing

BTW Folks - Knowledgeman works in a Banks fraud office! I hope he has a better attitude at work.

Alfie_E

knowledgeman wrote: »

At the end of the day if someone gets a hold of your password other than in the case of physical violence or burglary its your own fault and serves you right

How’s burglary relevant? You’re not supposed to record your password.

A zero-day exploit is used to place malware on your computer. The malware is either so new or has been used so few times that your anti-malware software fails to notice it. Your VBV or MCSC password is spirited away. According to knowledgeman’s criteria, this is your fault.

You use a computer that you don’t own, but whose owner you trust. There’s malware on this computer that spirits your password away. According to knowledgeman’s criteria, this is your fault.

Various man-in-the-middle attacks are possible. From the shop itself being involved to a criminal gang using pharming. This scenario is similar to doctored card readers or ATMs that have been used to exploit Chip and PIN. If you’re very techincally knowledgeable, it might be possible to spot, but most people won’t notice. Once again, according to knowledgeman’s criteria, this is your fault.

Dylanwing wrote: »

BTW Folks - Knowledgeman works in a Banks fraud office! I hope he has a better attitude at work.

If knowledgeman works in a bank’s fraud office, his attitude is likely to be the same as it is here. A bank’s fraud investigator may well be right in the majority of cases. Unfortunately, that leads to the conclusion that they’re right in all cases. The first people to complain when they’d been victims of doctored card readers in garages were told that the card system’s security was invulnerable and therefore it was their problem. Unless you’re the victim of a widespread fraud, where the banks have to concede there’s a problem, you could well find it extremely difficult to get any redress.

Alfie_E

As if on cue, we have Bank of America being targeted in Scammer Claims To Be 'Verified By Visa'. Let’s give it a month before we start seeing criminals going after UK banks. And, you don’t have to be stupid to fall for a phishing scam. If the email turns up at a time when you’re expecting a genuine communication, you’re much more likely to fall for it.