IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [credit-card]

Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).

This tag is about credit cards and other payment cards.

If you're storing credit card numbers, then you may be required to comply with the Payment Card Industry Data Security Standard (PCI DSS). See the tag .

More and more credit cards contain a chip, which makes them a smart card. See the tag .

453 questions
238
votes
7 answers

All 0s (zeros) in a bank card's CVC code

My bank card recently expired. I got a new one and this one turned out to be "lucky": its CVC code was 000. For a few months I used it extensively, both online and offline, without any difficulties - until the day when I entered my card details on…
Vlad Nikiforov
  • 2,023
  • 2
  • 8
  • 9
165
votes
5 answers

How does Amazon bill me without the CVC / CVV / CVV2?

The card in question is a VISA, if that's of any importance. I've noticed this only on Amazon. All other sites I've purchased something from, ever, have needed the CVC code for the card. However, I know I never entered the CVC on Amazon when I added…
TC1
  • 1,753
  • 2
  • 11
  • 9
49
votes
8 answers

What prevents web shop owners from misusing credit card data?

I don't own a credit card but read much about fraud with stolen credit cards. Since I don't own one, I don't know how you exactly buy online using your credit card, so please correct me, if I am wrong (and I hope so). Customer choses articles in…
sweet home
  • 593
  • 5
  • 7
39
votes
1 answer

Is CVV calculated or merely assigned?

Is the 3-digit (4-digit for those acolytes of standardization, American Express!) CVV/CSV/CVC calculated from card number and expiration date, or is it merely assigned? I know that once when I got a renewed Visa, it had the same 16-digit account…
Bruce Ediger
  • 4,532
  • 2
  • 27
  • 26
36
votes
3 answers

Why don't popular web services mask the CVV?

Most popular web services like PayPal, Google Wallet, and others do not mask CVV numbers, eg: (). As I read, the CVV is a security feature and it seems logical to mask it in order to hide it from prying eyes. But I haven't see…
Paul Annekov
  • 463
  • 1
  • 4
  • 6
30
votes
4 answers

Hotel reservation. How is this secure with only credit card number and expiry date?

Until today I managed to avoid paying online with my credit card (I'm weird, I know...) but somehow I managed to do it. Today though I had to book a hotel room (on booking.com) that required a deposit. I entered the card issuer, card number and card…
ILikePaperMoney
  • 271
  • 1
  • 3
  • 5
26
votes
7 answers

Recourse if debit card was used on a suspicious website

My husband got a pop-up ad on his phone for a fashion website and purchased two pairs of sunglasses using our debit card. The confirmation was emailed to me (marked as spam by gmail), and the site seemed very suspicious to me: the URL is nonsense,…
thumbtackthief
  • 677
  • 2
  • 7
  • 11
23
votes
2 answers

How was the website able to tell my credit card was wrong before it processed it?

I was putting in my cc number and and as soon as I had finished inputting 16 digits it highlighted it in red. I looked it over and realized one digit was wrong. Corrected it, it became black. How did the website know it was wrong?
larry909
  • 635
  • 1
  • 6
  • 8
23
votes
5 answers

Is it standard practice to ask a customer to send a photo of their credit card to confirm their identity?

My friend ordered clothes from a clothing site and was asked to send a picture of her credit card. Is it standard practice to ask a customer to send a photo of their credit card to confirm their identity?
JMK
  • 2,506
  • 7
  • 29
  • 40
15
votes
4 answers

Is a 3 or 4 digit CVV enough for online transactions?

Background: The CVV/CVV2 number ("Card Verification Value") on a credit card or debit card is a 3 or 4 digit number printed on the card. It is 3 digits on VISA, MasterCard and Discover branded credit and debit cards, and 4 digits on an American…
Md Mahbubur Rahman
  • 476
  • 2
  • 5
  • 15
12
votes
2 answers

Why is the American Express 4-digit security code located on the front of the card?

Credit cards issued by American Express have two security codes, a 3-digit one and a 4-digit one: These two security codes aren't embossed so that if a physical impression of the card details has to be made when processing a transaction the…
Franck Dernoncourt
  • 345
  • 2
  • 4
  • 14
9
votes
2 answers

When does an Apple Pay token get converted to a real credit-card

Apple Pay says they store a Token on the phone and use it for transactions. Who issues this token? Who then converts this token to a real credit-card. Where is the mapping from token to real card stored?
pslk
  • 113
  • 6
9
votes
3 answers

How does credit card authorization work

Few days ago I heard a professional scammer explaining how he exploits the banks, I cant find the right word to describe his actions, even the word scam does not fit as he is not breaking the law but exploiting it. He was explaining how he gets on a…
Ulkoma
  • 8,773
  • 17
  • 68
  • 96
9
votes
2 answers

What are the security implications of my credit card number being known by someone else?

I am new to the credit card world. What are the security threats or possibilities, if someone knows my credit/debit card no. Will he be able to misuse it or will he require any additional information related to the card?
Mangu Singh Rajpurohit
  • 289
  • 3
  • 11
8
votes
2 answers

Secure transactions (on or off the internet) with a credit card

I have read about how hopelessly insecure credit cards are, and was wondering if there is, in the uk, a provider of either: One time use credit cards. Text me on transaction cards. Pre paid cards: limited exposure. Secure transaction cards ( I…
ctrl-alt-delor
  • 279
  • 1
  • 2
  • 8
1
2 3 4 5