Chip & Pin security (??)

DullGreyGuy

born_again said:

DullGreyGuy said:

born_again said:

bxcfilm said:

"as he agrees the chip cannot be replicated.  "

I'm not sure who you're talking about here, but the more important point is that to work this scam you don't have to produce a duplicate card, you just have to capture the necessary information. Remember that I have first hand experience to demonstrate that. At the time when the fraudulent amounts were charged to my account, I was either in a taxi back to our apartment (paid for in cash, BTW), or resting in the apartment. I had my card with me all the time.

There's nothing sensationalist about that.

For chip & pin to be recorded as the transaction method, you need to either use the original card or a card they have created from details taken from the original card.
There is no other way of doing it. As the card reader needs to read a physical card for the system to recognise the C&P as the method used.

So you think the experts are wrong @born_again and it is possible to replicate a EMV chip with just the basic card details?

It's possible to make a magnetic strip using them but never heard of any way of making a swipe and sign appear as a chip and pin transaction. 

It is possible to clone a chip. But it is not cost effective to do so. That can not be done via mag stripe. It needs to read the chip.

Not sure where you have got making a swipe & sign appear as c&p though? As only way that can happen is if the card has a chip with the details encoded to it.

Personally I wonder if OP simply does not recognise retailers & that they were processed using the wrong amount & OP did not realise 🤷‍♀️
Would not be the 1st or last time that happens.

Clone it with only the information gathered by a hacked PDQ? Wouldn't have thought it could be tricked to disclose its private key. It's been said you can do it in lab conditions with full access to the card but not by a casual scan of the card. 

The C&P -v- C&S was in one of the articles the OP originally pointed to that its possible to do C&S but make it appear as C&P - haven't read about it previously but not going to waste energy arguing over if the expert is right or wrong as it was broadly irrelevant to the OP's comments that you can easily clone a card then do C&P transactions. 

I would also question dates, wouldn't be the first time payments show a few days or more after the actual transactions. Plus you get cases where you buy from one shop but they're using their "sisters" PDQ. 

Years ago I had a call from AmEx C/F asking if I recognised a transaction to a music company in Germany. I said no but would double check and realised it was for some software (not music related) that I'd bought and I didnt know where they were based nor that this was a side project for a music company so cleared it as non-fraudulant