Target does this.
Maybe. It looked exactly the same to me as the one I’d seen at Target 20 minutes earlier…but I’m not the most observant of technological details.
Mag strip cards are a security problem because the only authentication is a scribbled signature on the back that nobody checks. As a recap to most, there are (up to) 3 factors in authentication:
Something you have
Something you know
Something you are
Technically conventional cards are 2-factor, since you often need to physically present the card, and the signature that goes with it is a form of biometrics. But it’s a really terrible form, and nobody ever really checks it, so current cards are effectively 1-factor authentication. Plus, when you buy online it’s truly 1-factor auth.
Chip and pin cards elevate security substantially by being true 2-factor authentication – you need the card (something you have) AND the pin (something you know) in order for it to work.
Chip and signature cards, like they’re rolling out here, are worth fuck-all. I don’t know why anyone is bothering, except marketing bullshit.
(Maybe that’s a bit harsh, I’m sure it’s slightly harder to forge a chip card than a mag strip card, but I was under the impression that forged cards are a negligible aspect of CC fraud.)
Counterfeit cards are, according to these statistics, responsible for 37% of fraudulent transactions in the US.
If nobody is going to look at the card (to use at something like a gas pump), it’s extremely easy to copy one right now. The machine costs something like $100 and plain white cards are maybe 2 cents each and can be used over and over again.
Some time after I received a replacement credit card with a chip, the local Trader Joe’s upgraded their credit card terminals, which included a screen that said the terminal accepted stripe, chip, apple pay and android pay. I tried to use my chip credit card, but it didn’t work. When I told the cashier, they said, “Oh, that part’s not set up yet.” Then don’t have the terminal tell people that they can use it!! :smack:
I wish everything would just change over to chip and pin. This whole “do I swipe or dip or insert” thing is driving me crazy. Plus I have one card with only a stripe, one card with both, and a card with only the chip, so I have to remember which one does which.
Ignorance fought. However, writing to a chip card is also extremely easy, as my DoD Id cards (same basic technology only zounds more secure because it’s encrypted and requires a pin to read) can be written to by any old $20 card reader. I’m guessing the difference here is that there’s additional information stored on the chip card that’s used to authenticate that’s not typically stored in databases. The usual vector of hacking a database full of CC numbers and then writing them to disposable cards probably won’t work, but if you stick a chip card into a compromised reader I’m guessing it’s completely trivial to clone it.
Why do you guys keep talking about what they do in Europe when they do the same thing in a country just north of you?
Canada has been using chipped cards for years.
Yesterday at my local Walgreens pharmacy (in California), I swiped my magnetic strip (and chipped) card to pay. The clerk told me no, I had to re-do it and now have to insert my card into the chip reader. Chips are here, to stay, for some time anyway.
There’s a country just north of us?
They call it Canada but really it’s a suburb of Detroit.
Yes. I used the chip-reader slot yesterday and a couple of days ago, only to be told they don’t work and that it might be a few weeks until they do. I had to use the magnetic strip.
Saturday Mrs. L.A. kept trying to swipe her card at Home Depot and it wouldn’t work. Their chip-readers do work.
I’m zero-for-five for receiving new chipped cards.
A week or two ago I was in Target and they couldn’t get the chip reader to work at all. The two people in front of me both resorted to using old/alternate cards without chips so they could pay.
I had that issue at Walmart the first time a few weeks ago. The cashier knew enough that the swipe would no longer work, but we both kept trying to put the card in the slot and pull it out quickly. In hindsight, of course that wouldn’t work, it’s not like the strip anymore dummy!
I ended up using a debit card that day instead, but now I’ve since realized that when you use the chip you have to ***leave it in the slot ***until it says “Transaction Complete”. They really should put tidbit in big bold letters at the top of every article on this subject, it will save every shopper a ton of time in the future until we all get the quick swipe out of our muscle memory.
I was at Target a couple of weeks ago and didn’t leave the card in the slot long enough. It seems a much slower process than the old one of just sliding the card. I wonder if that will be an issue for places with many quick transactions.
The new card readers can read both mag-stripe & EMV cards; however, just because a merchant has installed the new hardware (card reader) doesn’t mean that it’s live yet. If that’s the case, you have to continue to use the old swipe reader on the side. Once that merchant/location goes live, you’ll need to ‘dip’ your EMV card & won’t be able to swipe that EMV card at that location anymore.
There will be lots of confusion over the next months (year?) as to what you should do with your card at a given merchant (swipe vs. dip) as the industry ramps up to this.
The big thing with the Oct 1 date is the liability shift for fraud from issuing bank to merchant. However, that’s transparent to the consumer as it’s still ‘someone else’.
This confusion is literally nothing compared to using Apple Pay or similar things.
If a pay point wants you to dip your card and you swipe it, the reader will tell you to dip your card.
If you want to use your phone to pay and that feature isn’t enabled, you sit there like a doofus holding your phone up to the box until the clerk tells you, “uuuuuuhhhhhhh, that doesn’t work here, or something.”
Our Walmart, CVS and Walgreens has them.
Are they doing away with the cards that you just wave close to the scanner? They were advertised heavily. Supposedly very convenient for quick purchases. I can’t recall which bank advertised them.
I’d never use one. I can’t see charging $3.78 on a cc or debit card for a Coke, chips, and gum. I use cash for anything under $20.
They do make “dual ported” EMV chips that can be used by inserting into the card reader or by just waving past a suitably equipped card reader. EMV cards that use this chip are being promoted in exotic lands such as Canada.
But in the US, the contactless cards that were available prior to EMV were a complete flop. For the most part, US banks are not going to the expense of using the dual ported EMV chips. There are a few smaller issuers, but the big issuers (notably, Chase which was a big proponent of the earlier cards) are not doing it.
However, US banks are hoping that smart phone payments will take off, so they are promoting the contactless payment terminals among merchants.
By the way, earlier in the thread the contactless cards were referred to as RFID cards. They are actually NFC cards.
Hehe I went to Home depot and swiped my card. The tiny little 16 year old girl cashier said “Your card has a chip, you have to insert it in the bottom part.” I dutifully started to insert it and she turned away. Suddenly her head snapped back and she yelled “And leave it in there until it said you can take it out!” several dozen decibels louder than anything I was expecting her to say. She saw the shocked look on my face, and I think it was much louder than she had been expecting to say it as well.
So I think you are probably right on that.