Gaping security issue?
Discussion
I ordered some wine by mail order and the delivery driver wanted ID to prove I was over 18. Driving licence or passport he said. But they were filed away so I asked if a credit card would do. He said 'maybe' so I showed him the back where my name was. He pointed his phone at it, tapped it a few times then said 'OK' and off he went.
10 seconds later I realised that he could easily have taken a photo of it, and all the info needed to commit fraud is there. Same for passports and driving licences. I phoned the CC company and they said the only way to be sure is to cancel the card - so I did.
Isn't this requirement for ID (that gets a phone pointed at it) a blatant open door for all sorts of nefarious activities?
10 seconds later I realised that he could easily have taken a photo of it, and all the info needed to commit fraud is there. Same for passports and driving licences. I phoned the CC company and they said the only way to be sure is to cancel the card - so I did.
Isn't this requirement for ID (that gets a phone pointed at it) a blatant open door for all sorts of nefarious activities?
Simpo Two said:
I ordered some wine by mail order and the delivery driver wanted ID to prove I was over 18. Driving licence or passport he said. But they were filed away so I asked if a credit card would do. He said 'maybe' so I showed him the back where my name was. He pointed his phone at it, tapped it a few times then said 'OK' and off he went.
10 seconds later I realised that he could easily have taken a photo of it, and all the info needed to commit fraud is there. Same for passports and driving licences. I phoned the CC company and they said the only way to be sure is to cancel the card - so I did.
Isn't this requirement for ID (that gets a phone pointed at it) a blatant open door for all sorts of nefarious activities?
If you are concerned about security of your credit card, get in touch with your supplying bank. And if not, why not? They will probably have prepared and rapid systems for this.10 seconds later I realised that he could easily have taken a photo of it, and all the info needed to commit fraud is there. Same for passports and driving licences. I phoned the CC company and they said the only way to be sure is to cancel the card - so I did.
Isn't this requirement for ID (that gets a phone pointed at it) a blatant open door for all sorts of nefarious activities?
This is why credit card companies rely on multi factor authentication to authorize internet transactions. The only thing he could have used the data for is a telephone purchase, which have really tight auth controls and normally put the onus on the merchant to assure identity.
Basically it's extremely unlikely to be an issue.
Basically it's extremely unlikely to be an issue.
Simpo Two said:
I ordered some wine by mail order and the delivery driver wanted ID to prove I was over 18. Driving licence or passport he said. But they were filed away so I asked if a credit card would do. He said 'maybe' so I showed him the back where my name was. He pointed his phone at it, tapped it a few times then said 'OK' and off he went.
10 seconds later I realised that he could easily have taken a photo of it, and all the info needed to commit fraud is there. Same for passports and driving licences. I phoned the CC company and they said the only way to be sure is to cancel the card - so I did.
Isn't this requirement for ID (that gets a phone pointed at it) a blatant open door for all sorts of nefarious activities?
If he only saw one side, he doesn't have all your card details. You've no doubt done "cardholder not present" transactions before, so you've given your full details to randoms. You typically aren't liable for fraudulent use of your credit card.10 seconds later I realised that he could easily have taken a photo of it, and all the info needed to commit fraud is there. Same for passports and driving licences. I phoned the CC company and they said the only way to be sure is to cancel the card - so I did.
Isn't this requirement for ID (that gets a phone pointed at it) a blatant open door for all sorts of nefarious activities?
Furbo said:
If he only saw one side, he doesn't have all your card details.
The card has the number on the back so he saw number, start and expiry dates and CVV code. That's enough isn't it?Yes, I've given the same info over the phone to specific companies when buying something, but not to a foreign gentleman with an unmarked van. The better news is that it was an Amazon order so unless he's rogue it should be OK. But still, I've never shown my CC to anyone before which was why I thought 'Hang on...'
Simpo Two said:
Furbo said:
If he only saw one side, he doesn't have all your card details.
The card has the number on the back so he saw number, start and expiry dates and CVV code. That's enough isn't it?Yes, I've given the same info over the phone to specific companies when buying something, but not to a foreign gentleman with an unmarked van. The better news is that it was an Amazon order so unless he's rogue it should be OK. But still, I've never shown my CC to anyone before which was why I thought 'Hang on...'
It's vanishingly unlikely you'd have had a problem and, almost certainly, it would have been your card company who footed the bill if you had.
I've had actual fraud on my card and haggled with my card company not to cancel, because a new card would be a week away from arriving.
BertBert said:
I'm very confused. You were asked for id, you chose to show your credit card and you think there a conspiracy?
Wasn't that all of your making?
I thought he'd just look at it to check the name, not possibly photograph it.Wasn't that all of your making?
Furbo said:
Is yours one of those cards where you can see the reversal of the number from the back? Not all cards are like that.
It's printed on the back. Not on the front at all.Furbo said:
I've had actual fraud on my card and haggled with my card company not to cancel, because a new card would be a week away from arriving.
Not a problem for me, I run two different CCs so will use the other one.Maybe if they ask again I'll decline and play the 'because GDPR' act
Furbo said:
Is yours one of those cards where you can see the reversal of the number from the back? Not all cards are like that.
It's vanishingly unlikely you'd have had a problem and, almost certainly, it would have been your card company who footed the bill if you had.
I've had actual fraud on my card and haggled with my card company not to cancel, because a new card would be a week away from arriving.
Most credit and debit cards have all the info on one side now, and just the bank logo on the other....It's vanishingly unlikely you'd have had a problem and, almost certainly, it would have been your card company who footed the bill if you had.
I've had actual fraud on my card and haggled with my card company not to cancel, because a new card would be a week away from arriving.
Simpo Two said:
I ordered some wine by mail order and the delivery driver wanted ID to prove I was over 18. Driving licence or passport he said. But they were filed away so I asked if a credit card would do. He said 'maybe' so I showed him the back where my name was. He pointed his phone at it, tapped it a few times then said 'OK' and off he went.
10 seconds later I realised that he could easily have taken a photo of it, and all the info needed to commit fraud is there. Same for passports and driving licences. I phoned the CC company and they said the only way to be sure is to cancel the card - so I did.
Isn't this requirement for ID (that gets a phone pointed at it) a blatant open door for all sorts of nefarious activities?
You let him take a photo of it ! 10 seconds later I realised that he could easily have taken a photo of it, and all the info needed to commit fraud is there. Same for passports and driving licences. I phoned the CC company and they said the only way to be sure is to cancel the card - so I did.
Isn't this requirement for ID (that gets a phone pointed at it) a blatant open door for all sorts of nefarious activities?
Gassing Station | Speed, Plod & the Law | Top of Page | What's New | My Stuff