We'd like to remind Forumites to please avoid political debate on the Forum... Read More »
This is to keep it a safe and useful space for MoneySaving discussions. Threads that are - or become - political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.
The CVV isn't used for in-person transactions and isn't stored on the mag stripe/chip. It isn't used in contactless including Apple/Google Pay.
The only way someone would have it is physical sight of the printed code on the signature strip or you've given it in a remote (phone/online) transaction that they have access to via a retailer or your computer.
I have now received a conditional refund. The company has passed the details to the bank of the order that was made on my card. All cards have been canceled now and I won't be using them at all apart from via Apple Pay or if required contactless. I am trying to find the source of the fraud.
Just to make you aware, that while as a customer you do not get a receipt unless you ask. The merchant still has their copy which has your full card details on it. So dishonest person with access to till roll = Bingo card numbers.
Card detail should never be shown in full on a till roll, if the retailer is doing this then they are not compliant with PCI DSS requirement 3.3 which states 'Mask PAN when displayed (the first six and last four digits are the maximum number of digits to be displayed), such that only personnel with a legitimate business need can see the full PAN. This requirement relates to protection of PAN displayed on screens, paper receipts, printouts, etc.'