Security of contactless payment cards

molerat

Not used one for cards but I can't get into my car with the key in an RFID wallet

born_again

SnowTiger said:

Contactless fraud is pretty small.  It may reduce now that most contactless payments are 'online' and punters are asked to enter their PIN more often.

There has always been a limit on the number of contactless transactions made before a PIN has to be entered. Just most people never get there as they either take cash out or spend more than £30 which resets the limit.
Never seen a cloned contactless fraud case ever since we launched them. All contactless fraud is due to lost/stolen cards.

colin79666

Just bank with Starling and turn card off when not being used. They are also quite security focused with aggressive PIN requirements for multiple contactless payments and you can turn on location based security in the app which presumably then makes it less likely to accept payments if you phone isn’t present (although contactless payments are often offline). 

Nebulous2

I’ve so many contactless cards in my wallet that I set off the theft detection machines in supermarkets - on the way in as well as the way out. 

born_again

colin79666 said:

 (although contactless payments are often offline). 

All contactless go for authorisation at time of purchase.

molerat

Nebulous2 said:

I’ve so many contactless cards in my wallet that I set off the theft detection machines in supermarkets - on the way in as well as the way out. 

Likewise, I try to go exactly through the middle !

Uxb1

Nebulous2 said:

I’ve so many contactless cards in my wallet that I set off the theft detection machines in supermarkets - on the way in as well as the way out. 

Yup me too every time.
The real fun is when I walk in and set it off just as someone else is walking out at the same instant.
The hapless security guard then runs after them to accuse them of something quite oblivious to the fact that it was me triggering it.

treeroy

just put multiple contactless cards together, then they are un-readable.

Ergates

I wonder what the total annual cost of the RFID proof wallet scam is, vs the total amount of contactless fraud.
It'll have to be total contactless fraud (i.e. lost and stolen cards) as if you only counted fraud from cloned cards you'd get a divide by zero error.

Chino

born_again said:

There has always been a limit on the number of contactless transactions made before a PIN has to be entered.

Whilst that may have been the case with some issuers' contactless cards, it was not the case for all cards.