Risky New Bank Card Technology – Is Your Card At Risk

It sounds like a great idea. A host of new credit and debit cards issued by big financial players like Chase and MasterCard come armed with small computer chips and radio antennae that allow consumers to make payments by literally waving their plastic over a card reader. But according to a story in Consumer Reports Magazine, in exchange for the convenience of these so-called contactless cards their holders face increased risk of being victimized by thieves.

Here’s the main problem: the very same technology – often a radio frequency identification, or RFID, chip – that makes it such a snap to hand over debit or credit card information to a merchant is also what makes it easy for a thief to lift those vital numbers themselves. That’s because criminals need only to get their hands on the sort of card reader stores use, which is easy because they sell for less than $100. Armed with a reader, a thief must only get within a few inches of a victim’s card in order to swipe the account number and expiration date, which can then easily be transferred to blank cards. Unfortunately, that means a crook can start making purchases with a counterfeit card, even if a victim still physically has theirs in their wallet or purse.

So how do you know if your cards use this technology? Chase cards have labeled their contactless cards “Blink,” MasterCard’s are called “Pay Pass,” and others simply have a symbol consisting of four curved lines. There are plenty of people who have one. Citing The Nilson Report, a newsletter, the Consumer Reports story says 35 million contactless cards are in circulation in the U.S. alone.

If you do have a contactless card, protecting yourself is not necessarily easy. There are wallets with shields that market themselves as RFID blockers. Although they can make it more difficult for an electromagnetic reader to swipe your account information, they don’t entirely block the transmission of card data. Another option is a protective sleeve made out of duct tape and lined with aluminum foil. Consumer Reports tests show that approach was superior to many options available for purchase but still didn’t offer complete protection. Probably the best method of protection is to ask for a card that doesn’t have this technology.

Representatives of the credit and debit card industry insisted to Consumer Reports that contactless cards are safe. Chase spokesman Paul Hartwick told the magazine that the security codes on its contactless cards are designed to change with every transaction so that even if a card were compromised it would work for only one fraudulent transaction.

The Smart Card Alliance, an industry group, maintains that contactless card technology deployed by American Express, Discover, MasterCard, and Visa is secure and that there have been no reports that consumers have been victimized.  American Express says its contactless cards do not reveal the card account number, and Consumer Reports’ own tests supported this assertion.

According to Kevin Fu, a University of Massachusetts at Amherst assistant professor, the absence of a flood of fraud reports linked to the cards is not proof of their security.  Because the contactless cards in circulation in the U.S. represent only 3.5 percent of the total debit and credit cards in use, they have not yet presented a big enough target to lure many crooks, especially when traditional magnetic stripe cards are so easily counterfeited.

Tag: prepaid card

  • Risky New Bank Card Technology – Is Your Card At Risk

    Risky New Bank Card Technology – Is Your Card At Risk

    It sounds like a great idea. A host of new credit and debit cards issued by big financial players like Chase and MasterCard come armed with small computer chips and radio antennae that allow consumers to make payments by literally waving their plastic over a card reader. But according to a story in Consumer Reports Magazine, in exchange for the convenience of these so-called contactless cards their holders face increased risk of being victimized by thieves.

    Here’s the main problem: the very same technology – often a radio frequency identification, or RFID, chip – that makes it such a snap to hand over debit or credit card information to a merchant is also what makes it easy for a thief to lift those vital numbers themselves. That’s because criminals need only to get their hands on the sort of card reader stores use, which is easy because they sell for less than $100. Armed with a reader, a thief must only get within a few inches of a victim’s card in order to swipe the account number and expiration date, which can then easily be transferred to blank cards. Unfortunately, that means a crook can start making purchases with a counterfeit card, even if a victim still physically has theirs in their wallet or purse.

    So how do you know if your cards use this technology? Chase cards have labeled their contactless cards “Blink,” MasterCard’s are called “Pay Pass,” and others simply have a symbol consisting of four curved lines. There are plenty of people who have one. Citing The Nilson Report, a newsletter, the Consumer Reports story says 35 million contactless cards are in circulation in the U.S. alone.

    If you do have a contactless card, protecting yourself is not necessarily easy. There are wallets with shields that market themselves as RFID blockers. Although they can make it more difficult for an electromagnetic reader to swipe your account information, they don’t entirely block the transmission of card data. Another option is a protective sleeve made out of duct tape and lined with aluminum foil. Consumer Reports tests show that approach was superior to many options available for purchase but still didn’t offer complete protection. Probably the best method of protection is to ask for a card that doesn’t have this technology.

    Representatives of the credit and debit card industry insisted to Consumer Reports that contactless cards are safe. Chase spokesman Paul Hartwick told the magazine that the security codes on its contactless cards are designed to change with every transaction so that even if a card were compromised it would work for only one fraudulent transaction.

    The Smart Card Alliance, an industry group, maintains that contactless card technology deployed by American Express, Discover, MasterCard, and Visa is secure and that there have been no reports that consumers have been victimized.  American Express says its contactless cards do not reveal the card account number, and Consumer Reports’ own tests supported this assertion.

    According to Kevin Fu, a University of Massachusetts at Amherst assistant professor, the absence of a flood of fraud reports linked to the cards is not proof of their security.  Because the contactless cards in circulation in the U.S. represent only 3.5 percent of the total debit and credit cards in use, they have not yet presented a big enough target to lure many crooks, especially when traditional magnetic stripe cards are so easily counterfeited.

  • City Embraces Gift Cards – Iowa City turns to gift cards to boost downtown businesses

    City Embraces Gift Cards – Iowa City turns to gift cards to boost downtown businesses

    Keep Austin Weird. Many people don’t realize that the slogan that is now so closely associated with the quirky capital city of Texas was originally coined as a rallying cry for citizens to favor local businesses over national chains with their spending dollars.

    Austin’s efforts to bolster local businesses has been successful enough that other cities, like Louisville, Kentucky, have swiped the exact same phrase and used it as a way for restaurants, bars and clothing stores to brand themselves. Now there’s another way for businesses to band together to encourage their friends and neighbors to patronize their shops: by starting a gift card program.

    According to a story in The Daily Iowan, that’s exactly what businesses in the Downtown District of Iowa City did this past Aug. The idea was the brainchild of the Downtown District, which cited the success of other cities like Des Moines in offering a single gift card that can be utilized at numerous businesses in a small geographic area.

    In her story, reporter Gabriela Dunn writes that the gift card program cost $7,000 to launch and that 85 of 280 downtown businesses have agreed to accept the cards. According to Betsy Potter, the Downtown District operations director, local businesses have been vocal in their desire for a gift card program to be started. “The initial reason for the program was that we heard from a lot of our businesses that a downtown gift card would be beneficial for them,” Potter told the newspaper, which chronicles events in the hometown of the University of Iowa. “We got almost weekly calls asking if there was a community gift card.”

    So far, only four people have signed up to get a card, which cost $1.50 to activate. But Potter said that her organization has yet to do any marketing and was unconcerned about the meager initial response. Still, Patrick Barron, a University of Iowa economics lecturer, told the newspaper he was skeptical about the program’s prospects. “Frankly, looking at it from a customer perspective, I don’t see why I would buy a card if I don’t get a discount or incentive.”

Credit and Debit Card Ratings