Change in credit card security?

[Bullitt]

@Roderick_Femm

… So I got the same CC number, which was nice, because I hate having to change all my auto-pays…

A tip, if changing auto-pays is a problem: have a second CC account, as a backup account, and assign all auto-pays to that CC.

My primary CC frequently gets fraud alerts, about 2-3x a year. I also take frequent road trips and these may trigger fraud alerts. My primary CC can be replaced by the bank and that doesn’t interrupt my auto-pays. Both CCs are with the same bank, so bill paying isn’t too difficult for that backup account.

[Projammer]

@Heracles

That whole system could be done electronically, but somebody would have to process 1000 deposits and 1000 reimbursements (no possibility of walking out to save time: each customer would need to slip their card into the reader to void their deposit), and the credit card processor would surely charge fees for 998 voided transactions.

They wouldn’t even have to do that. All they have to do it swipe the card with a hold for the deposit amount. If they don’t later request a payment of the hold amount or less, the hold is released and no funds or fees are processed.

[dalej42]

@friedo

After the rash of credit card data breaches, several merchants started going back to the old knuckle-busters for a time. The largest was probably PF Chang’s.

Obviously the non-embossed cards won’t work in those. The merchants would have to fill out a card slip manually. (How many do you think know how to do that anymore?)

One card that really pissed me off had the information printed on the back across the width of the card. So you had to hold it vertically to read it. Because some marketing genius in a bank somewhere thought that was totes rad. Because why not make a credit card with a user interface 90-degrees different to every other card in the history of human civilization.

Thankfully I was able to get rid of that card quickly; I only opened it for miles.

Ugh, I don’t miss those days from a few years ago when it seemed like every few months I’d get the thin envelope telling me of some ‘data breach’ and that my card was being cancelled and a new one issued with a new number. Even if the data breach was some corporate VP waiting out a flight delay at an airport bar and having his laptop stolen when his brain was too shriveled from martinis.

[dalej42]

@Asimovian

I’m remembering one other place where I still see the card imprint machines: taxis. Some older cabs still don’t have updated systems, and I know there was a time earlier this year that I was surprised to have the driver whip out one of those machines.

I guess that’s why the credit card machine is always ‘broken’ in Chicago cabs. I got tired of cabbies giving me that line so I switched to Uber exclusively now.

[LSLGuy]

@Bullitt

A tip, if changing auto-pays is a problem: have a second CC account, as a backup account, and assign all auto-pays to that CC.

My primary CC frequently gets fraud alerts, about 2-3x a year. I also take frequent road trips and these may trigger fraud alerts. My primary CC can be replaced by the bank and that doesn’t interrupt my auto-pays. Both CCs are with the same bank, so bill paying isn’t too difficult for that backup account.

This^.

The card I use for all routine autopays never leaves my desk drawer. The card I use for routine purchases out in the wild or for online retail is never used for auto-pays.

The former card hasn’t been bothered in 15 years. The latter one rarely lasts a year before being replaced by the issuer after a data breach somewhere.

[Tim_T-Bonham.net]

@friedo

One card that really pissed me off had the information printed on the back across the width of the card. So you had to hold it vertically to read it. Because some marketing genius in a bank somewhere thought that was totes rad. Because why not make a credit card with a user interface 90-degrees different to every other card in the history of human civilization.

Seems like that would make it pretty obvious if the waiter or clerk was looking at the back to make a note of your credit card info. So it would be a security improvement, if you pay attention.

[Balthisar]

@friedo

It has nothing to do with security, it’s just cheapasses who don’t want to bother with embossing the information on the front of the card anymore. It’s a backwards-incompatible change, and ugly as shit to boot.

Dunno about that. I have two credit cards that aren’t embossed, but they’re made of metal and quite heavy. Clerks comment on the weight and material every once in a while, but no one raises an eyebrow about the flat letters.

Oh, cost: yeah, metal, more expensive than a simple embosser.

[Pantastic]

@t-bonham@scc.net

And they no longer serve any functional purpose – nobody uses the old carbon paper imprinting credit slips anymore.

They’re the standard fallback if there’s a problem with power or phones, and the people that I know who work retail do have them available. A few months ago I was at a farm supply place that shut down their system before the last few customers were out and ran the three of us that bought something on the carbon paper thing. So they’re not entirely unused, but for a non-raised card you could fill out a slip manually instead.

[LSLGuy]

@t-bonham@scc.net

Seems like that would make it pretty obvious if the waiter or clerk was looking at the back to make a note of your credit card info. So it would be a security improvement, if you pay attention.

You do understand they’re obligated by Visa/MC rules to look at the back to see if it’s signed? If they haven’t done that they’ve (probably) violated the merchant contract and increased their liability for a bad card.

You also recognize that in many situations you can’t possible watch your card every second it’s out of your hands? Depending on the layout at the store / restuarant they may have legitimate needs to go backstage with it, turn their back to you, walk to the other side of the crowded room, etc.

Also, if some dishonest clerk is serious about stealing, they just leave their phone someplace quietly taking video. All they have to do is aim your card towards the phone (which could be anywhere) and they’ve got all the info they need. Them looking at it with their eyes is about the dumbest way to harvest the numbers.

[Bullitt]

@LSLGuy

This^.

The card I use for all routine autopays never leaves my desk drawer. The card I use for routine purchases out in the wild or for online retail is never used for auto-pays.

The former card hasn’t been bothered in 15 years. The latter one rarely lasts a year before being replaced by the issuer after a data breach somewhere.

Even better! My wife and I should just leave the backup CC at home. Because of the problems we’ve had — occasional fraud alerts that randomly close an account (have to wait while the bank sends out the replacementj, and being out of town when my card is declined and when I call they say their system is undergoing their nightly backups so please call back in 30 and we’ll release the hold, etc. — we’ve resorted to having 4 CCs where we used to have only 1. I carry 3 and my wife carries 3 but not all the same as I. Even if the banks says Sorry for the inconvenience, we are overnight FedEx’ing a new card to you, it can be a major inconvenience.

@Balthisar

Dunno about that. I have two credit cards that aren’t embossed, but they’re made of metal and quite heavy. Clerks comment on the weight and material every once in a while, but no one raises an eyebrow about the flat letters.

Oh, cost: yeah, metal, more expensive than a simple embosser.

That’s wild — metal CCs? What banks are they with?

And so you don’t carry plastic.

@LSLGuy

You also recognize that in many situations you can’t possible watch your card every second it’s out of your hands? Depending on the layout at the store / restuarant they may have legitimate needs to go backstage with it, turn their back to you, walk to the other side of the crowded room, etc.

Europe and Canada (also, IIRC) have had an excellent system for years — the small machine they carry to the customers at the points of sale. The CC never leaves your sight. They’ve had the chips for several years, maybe over 10, while in the US that has been common only in the past 2-3 years.