For Prepaid Cards, Choose EMV Chip Cards, A Smart Card All Around

By Curtis Arnold

Besides the thieves themselves, the main culprit to emerge from the recent heist of personal information from over 100 million Target and Neiman Marcus shoppers isn’t human at all. Rather, the unlikely villain is a decades old piece of technology known simply as the magstripe, or magnetic stripe, that graces the backs of billions of credit, debit and prepaid debit cards carried by Americans in their pocketbooks and wallets everyday.

But, there is an alternative on the way, the EMV chip card.

In a way that not even the most well crafted editorials or investigative journalism series could have accomplished, the collective anger spawned by millions of consumers has focused a spotlight on the inability of magnetic stripe technology to safeguard the critical account and personal data it contains. “Basically, the magnetic strip contains all the data needed for credit card fraud,” says Lamar Bailey, Director of Security Research for Tripwire, a data security firm that works with companies like Visa, MasterCard and Safeway. “Unfortunately, these strips are very easy to read and duplicate and are a favorite target for a wide variety of financial fraud.”

***************************************************************
[button link=”#Comments” variation=”darkgrey”]We want your opinion![/button]  What do you think of the recent security breaches?  How safe do you feel your personal data is currently?  What are your main concerns about using credit, debit or prepaid cards?  We want to hear from you!  Just add in your thoughts in the Comments section below!
***************************************************************

As difficult as the lesson has been to learn, there is now a more widespread understanding of the need to quickly embrace so-called smart cards. Also known as EMV or chip and PIN cards, they have been the standard in Europe for years and offer far greater identity protection than magnetic strips. Introduced in the 1990s in Europe, these so-called EMV cards take their name from Europay/MasterCard/Visa. As Robert Siciliano, the CEO of IDTheftSecurity.com, explains it, EMV chip cards contain an embedded microchip that is authenticated using a personal identification number, or PIN. “When a customer uses a smart card to make a purchase, the card is placed into a PIN pad terminal or a modified swipe-card reader, which accesses the card’s microchip and verifies the card’s authenticity. The customer then enters a four digit PIN, which is checked against the PIN stored on the card.”

This is another way of saying that smart cards are a tougher nut for identity thieves to crack – and a good explanation as to why global cyber criminals have set their sights on the U.S. It also means that, whenever possible, American consumers should choose a payment card that offers EMV chip protection. This is particularly true for the growing number of Americans who utilize prepaid debit cards.

While it’s true that the prepaid debit card industry has been exploding recently – Mercator Advisory Groups reports that Americans loaded $192 billion onto prepaid cards in 2012 – the mainstreaming of a product once favored primarily by those who couldn’t get bank accounts or credit cards has not yet been accompanied by stronger consumer protections. For instance, if a credit card is lost or stolen, federal law limits consumer liability to just $50, although most major card issuers offer zero liability. Federal law also protects debit cards, although limiting liability depends on a consumer quickly reporting a card lost or stolen. By sharp contrast, prepaid debit cards do not have blanket protection. The terms and conditions vary depending on the card issuer, with some being quite good and others nonexistent.

Because of that lack of protection, prepaid debit card users concerned about fraud can avoid having their accounts cleaned out by getting an EMV chip card. Unfortunately, these smart cards are not available everywhere – not even close. Some card issuers, such as the Members 1st Federal Credit Union, do offer EMV chip reloadable prepaid cards. But as is the case with most debit and credit cards, a smart card option is not yet available. “EMV has not been popular in the US because of the high cost of replacing all the credit card readers and millions of credit cards,” says Lamar Bailey of Tripwire.

What can change that? For many credit and debit card issuers, the change is underway and expected to be complete by 2017. A combination of public pressure, regulation and simple self-interest could prompt the same move by prepaid card providers. “The technology in a magnetic stripe card has been hacked and decimated,” says Siciliano of IDTheftSecurity.com. “EMV for prepaid cards would bring them to the same security standard as credit and debit cards and more than likely open up a new market for card providers.”

Photo Information below.

Caption:  By 2017, look for embedded security chips to be present in all US credit and debit cards. (Photo credit: Wikipedia)

***************************************************************
[button link=”#Comments” variation=”darkgrey”]We want your opinion! [/button] What do you think of the recent security breaches?  How safe do you feel your personal data is currently?  What are your main concerns about using credit, debit or prepaid cards?  We want to hear from you!  Just add in your thoughts in the Comments section below!
***************************************************************

Tag: prepaid card

  • For Prepaid Cards, Choose EMV Chip Cards, A Smart Card All Around

    For Prepaid Cards, Choose EMV Chip Cards, A Smart Card All Around

    By Curtis Arnold

    Besides the thieves themselves, the main culprit to emerge from the recent heist of personal information from over 100 million Target and Neiman Marcus shoppers isn’t human at all. Rather, the unlikely villain is a decades old piece of technology known simply as the magstripe, or magnetic stripe, that graces the backs of billions of credit, debit and prepaid debit cards carried by Americans in their pocketbooks and wallets everyday.

    But, there is an alternative on the way, the EMV chip card.

    In a way that not even the most well crafted editorials or investigative journalism series could have accomplished, the collective anger spawned by millions of consumers has focused a spotlight on the inability of magnetic stripe technology to safeguard the critical account and personal data it contains. “Basically, the magnetic strip contains all the data needed for credit card fraud,” says Lamar Bailey, Director of Security Research for Tripwire, a data security firm that works with companies like Visa, MasterCard and Safeway. “Unfortunately, these strips are very easy to read and duplicate and are a favorite target for a wide variety of financial fraud.”

    ***************************************************************
    [button link=”#Comments” variation=”darkgrey”]We want your opinion![/button]  What do you think of the recent security breaches?  How safe do you feel your personal data is currently?  What are your main concerns about using credit, debit or prepaid cards?  We want to hear from you!  Just add in your thoughts in the Comments section below!
    ***************************************************************

    As difficult as the lesson has been to learn, there is now a more widespread understanding of the need to quickly embrace so-called smart cards. Also known as EMV or chip and PIN cards, they have been the standard in Europe for years and offer far greater identity protection than magnetic strips. Introduced in the 1990s in Europe, these so-called EMV cards take their name from Europay/MasterCard/Visa. As Robert Siciliano, the CEO of IDTheftSecurity.com, explains it, EMV chip cards contain an embedded microchip that is authenticated using a personal identification number, or PIN. “When a customer uses a smart card to make a purchase, the card is placed into a PIN pad terminal or a modified swipe-card reader, which accesses the card’s microchip and verifies the card’s authenticity. The customer then enters a four digit PIN, which is checked against the PIN stored on the card.”

    This is another way of saying that smart cards are a tougher nut for identity thieves to crack – and a good explanation as to why global cyber criminals have set their sights on the U.S. It also means that, whenever possible, American consumers should choose a payment card that offers EMV chip protection. This is particularly true for the growing number of Americans who utilize prepaid debit cards.

    While it’s true that the prepaid debit card industry has been exploding recently – Mercator Advisory Groups reports that Americans loaded $192 billion onto prepaid cards in 2012 – the mainstreaming of a product once favored primarily by those who couldn’t get bank accounts or credit cards has not yet been accompanied by stronger consumer protections. For instance, if a credit card is lost or stolen, federal law limits consumer liability to just $50, although most major card issuers offer zero liability. Federal law also protects debit cards, although limiting liability depends on a consumer quickly reporting a card lost or stolen. By sharp contrast, prepaid debit cards do not have blanket protection. The terms and conditions vary depending on the card issuer, with some being quite good and others nonexistent.

    Because of that lack of protection, prepaid debit card users concerned about fraud can avoid having their accounts cleaned out by getting an EMV chip card. Unfortunately, these smart cards are not available everywhere – not even close. Some card issuers, such as the Members 1st Federal Credit Union, do offer EMV chip reloadable prepaid cards. But as is the case with most debit and credit cards, a smart card option is not yet available. “EMV has not been popular in the US because of the high cost of replacing all the credit card readers and millions of credit cards,” says Lamar Bailey of Tripwire.

    What can change that? For many credit and debit card issuers, the change is underway and expected to be complete by 2017. A combination of public pressure, regulation and simple self-interest could prompt the same move by prepaid card providers. “The technology in a magnetic stripe card has been hacked and decimated,” says Siciliano of IDTheftSecurity.com. “EMV for prepaid cards would bring them to the same security standard as credit and debit cards and more than likely open up a new market for card providers.”

    Photo Information below.

    Caption:  By 2017, look for embedded security chips to be present in all US credit and debit cards. (Photo credit: Wikipedia)

    ***************************************************************
    [button link=”#Comments” variation=”darkgrey”]We want your opinion! [/button] What do you think of the recent security breaches?  How safe do you feel your personal data is currently?  What are your main concerns about using credit, debit or prepaid cards?  We want to hear from you!  Just add in your thoughts in the Comments section below!
    ***************************************************************

  • U.S. Credit Card Security Outdated

    U.S. Credit Card Security Outdated

    Target has begun 2014 with a very bad hangover. As has been widely reported, as many as 40 million of the large retailer’s customers had financial and personal information stolen during the height of the holiday shopping season. The repercussions for Target have already been severe and seem only to get worse by the day. Besides seeing its all-important holiday shopping traffic decline, several states’ attorneys general are investigating Target and a number of class-action lawsuits have been filed against the company.

    A recent story in The Los Angeles Times points out that backward technology long ago abandoned by much of the rest of the world may be more to blame for the data breach than anything Target did or didn’t do. The story by reporter Chris O’Brien says that while it’s still the norm for U.S. credit card holders to have plastic with a magnetic strip that holds their account information, most other countries have opted for so-called smart cards.

    These smart cards earn that name, O’Brien writes, because they utilize embedded microchips to hold customer information rather than the magnetic strips that are found on 99 percent of all of the credit cards issued in the US. “The additional encryption on so-called smart cards has made the kind of brazen data thefts suffered by Target almost impossible to pull off in most other countries,” writes O’Brien.

    Because around 80 countries have already embraced smart card technology, the more vulnerable U.S. has become the favorite target of identity thieves. Given that smart cards provide such superior security, the question is why the U.S. hasn’t embraced their use. According to O’Brien’s story, there has been no political pressure to force businesses and financial institutions to make the switch. Importantly, an upgrade to smart cards would be expensive.

    Nevertheless, it does appear that the U.S. will soon become home to a lot more smart cards. According to O’Brien’s article, many credit card issuers have launched efforts to make the switch by October of 2015. To do that, credit card companies will change the rules about who is responsible whenever there are fraudulent purchases as a result of security breaches. “Under the new rules, the entity in the payment chain – merchant, credit card, banks – deemed to have the weakest security will be liable,” writes O’Brien. “Credit card companies can’t make anyone adopt the technology, but they’re giving them a hard nudge.”

Credit and Debit Card Ratings