keep being subject to card fraud

[Deleted User]

born_again said:

Deleted_User said:

I have now received a conditional refund. The company has passed the details to the bank of the order that was made on my card. All cards have been canceled now and I won't be using them at all apart from via Apple Pay or if required contactless. I am trying to find the source of the fraud. 

Just to make you aware, that while as a customer you do not get a receipt unless you ask. The merchant still has their copy which has your full card details on it.
So dishonest person with access to till roll = Bingo card numbers.

So if anyone makes a payment at a till the merchant can see the full details of the card?

dr_adidas01

[Deleted User] said:

born_again said:

Deleted_User said:

I have now received a conditional refund. The company has passed the details to the bank of the order that was made on my card. All cards have been canceled now and I won't be using them at all apart from via Apple Pay or if required contactless. I am trying to find the source of the fraud. 

Just to make you aware, that while as a customer you do not get a receipt unless you ask. The merchant still has their copy which has your full card details on it.
So dishonest person with access to till roll = Bingo card numbers.

So if anyone makes a payment at a till the merchant can see the full details of the card?

Yes they get your full Card number and expiry date. I’ve been given the merchant copy of a receipt quite a few times when paying at restaurants.  

General_Grant

dr_adidas01 said:

[Deleted User] said:

born_again said:

Deleted_User said:

I have now received a conditional refund. The company has passed the details to the bank of the order that was made on my card. All cards have been canceled now and I won't be using them at all apart from via Apple Pay or if required contactless. I am trying to find the source of the fraud. 

Just to make you aware, that while as a customer you do not get a receipt unless you ask. The merchant still has their copy which has your full card details on it.
So dishonest person with access to till roll = Bingo card numbers.

So if anyone makes a payment at a till the merchant can see the full details of the card?

Yes they get your full Card number and expiry date. I’ve been given the merchant copy of a receipt quite a few times when paying at restaurants.  

and the CVV?

[Deleted User]

General_Grant said:

dr_adidas01 said:

[Deleted User] said:

born_again said:

Deleted_User said:

I have now received a conditional refund. The company has passed the details to the bank of the order that was made on my card. All cards have been canceled now and I won't be using them at all apart from via Apple Pay or if required contactless. I am trying to find the source of the fraud. 

Just to make you aware, that while as a customer you do not get a receipt unless you ask. The merchant still has their copy which has your full card details on it.
So dishonest person with access to till roll = Bingo card numbers.

So if anyone makes a payment at a till the merchant can see the full details of the card?

Yes they get your full Card number and expiry date. I’ve been given the merchant copy of a receipt quite a few times when paying at restaurants.  

and the CVV?

To be used on a website, they'd generally need the card number, expiry date, cvv and know the correct billing address.

If they've got all these it would suggest they've got malware somewhere or have access to the physical card.

General_Grant

Deleted User said:

General_Grant said:

dr_adidas01 said:

Deleted_User said:

born_again said:

Deleted_User said:

I have now received a conditional refund. The company has passed the details to the bank of the order that was made on my card. All cards have been canceled now and I won't be using them at all apart from via Apple Pay or if required contactless. I am trying to find the source of the fraud. 

Just to make you aware, that while as a customer you do not get a receipt unless you ask. The merchant still has their copy which has your full card details on it.
So dishonest person with access to till roll = Bingo card numbers.

So if anyone makes a payment at a till the merchant can see the full details of the card?

Yes they get your full Card number and expiry date. I’ve been given the merchant copy of a receipt quite a few times when paying at restaurants.  

and the CVV?

To be used on a website, they'd generally need the card number, expiry date, cvv and know the correct billing address.

If they've got all these it would suggest they've got malware somewhere or have access to the physical card.

I was asking whether the CVV would be available by way of the merchant's till as it was said they had the card number and expiry date.

flo22

born_again said:

Deleted_User said:

I have now received a conditional refund. The company has passed the details to the bank of the order that was made on my card. All cards have been canceled now and I won't be using them at all apart from via Apple Pay or if required contactless. I am trying to find the source of the fraud. 

Just to make you aware, that while as a customer you do not get a receipt unless you ask. The merchant still has their copy which has your full card details on it.
So dishonest person with access to till roll = Bingo card numbers.

Card detail should never be shown in full on a till roll, if the retailer is doing this then they are not compliant with PCI DSS requirement 3.3 which states 'Mask PAN when displayed (the first six and last four digits are the maximum number of digits to be displayed), such that only personnel with a legitimate business need can see the full PAN.  This requirement relates to protection of PAN displayed on screens, paper receipts, printouts, etc.'

moneysavinghero

I am at a loss of how this fraud is occurring as I am very careful about where I use the cards. I can rule out anyone in my household and at the time this payment was made I was at work and had the card with me

You don't need the actual physical card to make payments online - you only need to know what the numbers are. Your card could be safe in your pocket at work, but someone could still be using it's details to make payments.

[Deleted User]

moneysavinghero said:

I am at a loss of how this fraud is occurring as I am very careful about where I use the cards. I can rule out anyone in my household and at the time this payment was made I was at work and had the card with me

You don't need the actual physical card to make payments online - you only need to know what the numbers are. Your card could be safe in your pocket at work, but someone could still be using it's details to make payments.

I have scratched off the CVV codes on my new cards to prevent this.

FindMyWayBack

born_again said:

Deleted_User said:

 or if required contactless. I am trying to find the source of the fraud. 

I would stop that too

Eco_Miser

flo22 said:

born_again said:

Deleted_User said:

I have now received a conditional refund. The company has passed the details to the bank of the order that was made on my card. All cards have been canceled now and I won't be using them at all apart from via Apple Pay or if required contactless. I am trying to find the source of the fraud. 

Just to make you aware, that while as a customer you do not get a receipt unless you ask. The merchant still has their copy which has your full card details on it.
So dishonest person with access to till roll = Bingo card numbers.

Card detail should never be shown in full on a till roll, if the retailer is doing this then they are not compliant with PCI DSS requirement 3.3 which states 'Mask PAN when displayed (the first six and last four digits are the maximum number of digits to be displayed), such that only personnel with a legitimate business need can see the full PAN.  This requirement relates to protection of PAN displayed on screens, paper receipts, printouts, etc.'

 I believe that born_again's point was that people with a legitimate business need are sometimes dishonest, and in that case the vendor's copy of the till roll (or electronic equivalent) provides the full card data.