# US Credit Card Question

**URL:** <https://boards.straightdope.com/t/us-credit-card-question/843890>\
**Category:** Factual Questions\
**Created:** [November 23, 2019, 9:26pm UTC](https://boards.straightdope.com/t/us-credit-card-question/843890 "2019-11-23T21:26:48Z")\
**Posts on this page:** 14\
**Page:** 3

<div class="post-metadata">

**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\
**Post date:** [November 25, 2019, 5:45pm UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/41 "2019-11-25T17:45:05Z")

</div>

> [@upend](#):
>
> In fact, I’ve not even seen it discussed as a thing nowadays. The likelyhood of someone pottering around with an RFID reader, waving it at back pockets is not great.

While there is some overlap, for contactless credit cards, the standard is [EMV](https://en.wikipedia.org/wiki/EMV) which is not a simple RFID system. And NFC used by smartphones for payments is another thing.

The reason you don’t hear a whole lot about people stealing CC numbers via special devices is that there’s a whole lot easier ways to steal them online from the safety of one’s home. One can grab thousands of numbers in a short period of time.\*

But the overseas geeks are getting bolder and bolder. Devices to unlock and drive off with various makes of cars are openly sold overseas. And a whole lot of other similar gear. All for not much money. At some point the CC scanners will be sold in bulk and then things might change.

Like **TimeWinder** I’ve seen a _lot_ of RFID or whatever blocking wallets or card holders lately. And I wasn’t even looking for them.

Keep in mind that people might be carrying cards other than contactless CCs which they may want to protect.

- One common way to obtain CC nos. now is to break into the poorly protected cloud storage system where some other cracker has stored their stolen numbers. No honor among thieves.

---

<div class="post-metadata">

**Author:** ![RaftPeople](https://avatars.discourse-cdn.com/v4/letter/r/6f9a4e/32.png) [@RaftPeople](https://boards.straightdope.com/u/RaftPeople)\
**Post date:** [November 25, 2019, 5:54pm UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/42 "2019-11-25T17:54:48Z")

</div>

> [@Reply](#):
>
> you, this is 2019, about two decades after the rest of the world adopted chip + PIN. The US is just super slow with stuff like this.

Historical tangent:  
The US fraud rate was low compared to Europe. Europe introduced chip+pin and it took a significant number of years to get their fraud rate down equal to the US level. The US didn’t have the same incentive. But it’s also true that the US is slow on things like this.

---

<div class="post-metadata">

**Author:** ![Procrustus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/procrustus/32/2994_2.png) [@Procrustus](https://boards.straightdope.com/u/Procrustus)\
**Post date:** [November 25, 2019, 5:54pm UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/43 "2019-11-25T17:54:56Z")

</div>

> [@Bullitt](#):
>
> With those contact-less cards, would an RFID-blocking wallet be needed or desired?

Perhaps a stupid question. How does one know if one has a contact-less card. I just looked in my wallet. I have five credit cards, some issued quite recently. None has any indication that it can be “tapped” for payment. Is there something on contact-less cards that tells me? Or should I just try it and see what happens?

---

<div class="post-metadata">

**Author:** ![Cheesesteak](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cheesesteak/32/3694_2.png) [@Cheesesteak](https://boards.straightdope.com/u/Cheesesteak)\
**Post date:** [November 25, 2019, 6:18pm UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/44 "2019-11-25T18:18:47Z")

</div>

> [@Procrustus](#):
>
> Perhaps a stupid question. How does one know if one has a contact-less card.

It should have the megaphone signal strength (whatever that is) symbol printed on it. No symbol, it’s a regular card.

---

<div class="post-metadata">

**Author:** ![Procrustus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/procrustus/32/2994_2.png) [@Procrustus](https://boards.straightdope.com/u/Procrustus)\
**Post date:** [November 25, 2019, 6:22pm UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/45 "2019-11-25T18:22:40Z")

</div>

> [@Cheesesteak](#):
>
> It should have the megaphone signal strength (whatever that is) symbol printed on it. No symbol, it’s a regular card.

So, from my personal experience, this still seems rare in the US.

---

<div class="post-metadata">

**Author:** ![Bullitt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bullitt/32/5725_2.png) [@Bullitt](https://boards.straightdope.com/u/Bullitt)\
**Post date:** [November 25, 2019, 9:22pm UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/46 "2019-11-25T21:22:11Z")

</div>

> [@Joey\_P](#):
>
> I wouldn’t bother. First, just to clarify, the chip (that gold part at the end) that you dip (actually the term) into the reader is not an RFID chip. I know you said contactless, which is correct for RFID, but it gets confused. RFID is embedded in the card and the one you wave near the machine. If you have RFID/NFC/Contactless, you’ll have a little wifi looking symbol on the card.  
> Most cards don’t use that. It’s a perk, not a requirement.  
> In either case, I’ll be surprised if they stick around for too long since people A)don’t even typically know they’re there and B)are skipping right over that to Apple/Android pay.

> [@upend](#):
>
> this was a thing that people said when contactless credit cards started in the UK.
> 
> In fact, I’ve not even seen it discussed as a thing nowadays. The likelyhood of someone pottering around with an RFID reader, waving it at back pockets is not great.
> 
> In any case, why not just steal the card and spend it in £30 chunks (that’s the UK limit for contactless for Visa/MC)

Good to know, and a good thing too.

> [@Procrustus](#):
>
> Perhaps a stupid question. How does one know if one has a contact-less card. I just looked in my wallet. I have five credit cards, some issued quite recently. None has any indication that it can be “tapped” for payment. Is there something on contact-less cards that tells me? Or should I just try it and see what happens?

Not a stupid question, I was wondering the same thing too. I looked at the cards in my wallet and one has a wifi-looking symbol in the lower right. Here’s a picture, [Icon - Album on Imgur](https://imgur.com/a/0PV1Rd7).

Is this a contact-less card?

---

<div class="post-metadata">

**Author:** ![Alley\_Dweller](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/alley_dweller/32/430_2.png) [@Alley\_Dweller](https://boards.straightdope.com/u/Alley_Dweller)\
**Post date:** [November 26, 2019, 5:31am UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/47 "2019-11-26T05:31:45Z")

</div>

> [@Bullitt](#):
>
> Not a stupid question, I was wondering the same thing too. I looked at the cards in my wallet and one has a wifi-looking symbol in the lower right. Here’s a picture, [Icon - Album on Imgur](https://imgur.com/a/0PV1Rd7).
> 
> Is this a contact-less card?

Yes.

---

<div class="post-metadata">

**Author:** ![Bullitt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bullitt/32/5725_2.png) [@Bullitt](https://boards.straightdope.com/u/Bullitt)\
**Post date:** [November 26, 2019, 6:17am UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/48 "2019-11-26T06:17:52Z")

</div>

Thanks. I’ll have to give that a try then.

---

<div class="post-metadata">

**Author:** ![Melbourne](https://avatars.discourse-cdn.com/v4/letter/m/b5e925/32.png) [@Melbourne](https://boards.straightdope.com/u/Melbourne)\
**Post date:** [November 26, 2019, 10:01am UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/49 "2019-11-26T10:01:27Z")

</div>

> [@Joey\_P](#):
>
> If you have RFID/NFC/Contactless, you’ll have a little wifi looking symbol on the card.  
> Most cards don’t use that. It’s a perk, not a requirement.  
> In either case, I’ll be surprised if they stick around for too long since people A)don’t even typically know they’re there and B)are skipping right over that to Apple/Android pay.

It’s universal in Aus. All the card readers have been replaced with readers that take contactless payment, it’s faster than pin, and they often don’t accept swipe.

Android pay is making inroads, and when the kids grow up and start buying groceries maybe it will happen, but right now Android Pay is being used for Coffee, not soap.

---

<div class="post-metadata">

**Author:** ![bob\_2](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bob_2/32/3341_2.png) [@bob\_2](https://boards.straightdope.com/u/bob_2)\
**Post date:** [November 26, 2019, 10:01am UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/50 "2019-11-26T10:01:29Z")

</div>

> [@Lord\_Feldon](#):
>
> And those who pay with cards are subsidizing the people who pay with cash, who don’t pay any extra for the extra labor, the bank fees for withdrawing change, the counting errors, the cash that goes home in unscrupulous employees’ pockets, etc.
> 
> I don’t think I’ve ever seen a clear answer as to who is getting the better deal. The card industry says cash is more expensive, the cash industry says cards are more expensive, and both have figures to prove it.

That’s a fair point. I remember when a company I worked for researched switching its van fleet from diesel to LPG; the initial figures showed a small but worthwhile saving, so we went ahead.

A year down the line, the savings were much more than predicted; our conclusion was that employees weren’t able to steal the gas or use their cards to put fuel in their own cars.

Another advantage of cards is that there is far less cash being carried around, so vastly reduced opportunity for heists. The vulnerable point these days is the ATM; there has been a spate of robberies where thieves have used 4WD trucks or even diggers to drag them out of shops to empty them at their leisure.

---

<div class="post-metadata">

**Author:** ![Bullitt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bullitt/32/5725_2.png) [@Bullitt](https://boards.straightdope.com/u/Bullitt)\
**Post date:** [November 26, 2019, 11:28am UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/51 "2019-11-26T11:28:28Z")

</div>

Interesting result there with that switch to LPG.

About cash vs plastic, fewer and fewer people are carrying cash these days. I carry and use very little, just some small bills for tips, except for some emergency cash tucked away in my wallet. Other than that it’s almost always plastic. It’s very convenient.

---

<div class="post-metadata">

**Author:** ![yendis](https://avatars.discourse-cdn.com/v4/letter/y/ed8c4c/32.png) [@yendis](https://boards.straightdope.com/u/yendis)\
**Post date:** [November 26, 2019, 12:21pm UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/52 "2019-11-26T12:21:18Z")

</div>

> [@Reply](#):
>
> Ugh. I’m also not really sure what their point is, since without the PINs like the rest of the world use, the chip just spits out all your info to any card reader anyway. How is that any more secure than the magstripes? Crazy system. 😕 Even when they’re working as intended, they’re still [quite vulnerable](https://en.wikipedia.org/wiki/EMV#Vulnerabilities) anyway. Security theater, I suppose.

The chip does not spit any info at the reader. Unlike a magstripe the chip is encrypted, and the transaction is, or should be, point to point encrypted. The reader just passes the encrypted info on and get an encrypted response back. It never sees any info in the clear. It is orders of magnitude more secure than a magstripe.

---

<div class="post-metadata">

**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\
**Post date:** [November 26, 2019, 12:53pm UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/53 "2019-11-26T12:53:28Z")

</div>

> [@yendis](#):
>
> The chip does not spit any info at the reader. Unlike a magstripe the chip is encrypted, and the transaction is, or should be, point to point encrypted. The reader just passes the encrypted info on and get an encrypted response back. It never sees any info in the clear. It is orders of magnitude more secure than a magstripe.

Just to note that the “orders of magnitude more secure” part may not be an apt description.

E.g., there have been many notable cases of POS systems having malware planted on them and with MitM attacks mass sucking up of CC numbers.

The list of [vulnerabilities](https://en.wikipedia.org/wiki/EMV#Vulnerabilities) given in the EMV article I linked to earlier gives one pause. (Some include even chip-and-pin bypasses. :eek:)

It’s better than mag stripes. But a far cry from a panacea.

---

<div class="post-metadata">

**Author:** ![DesertDog](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/desertdog/32/11503_2.png) [@DesertDog](https://boards.straightdope.com/u/DesertDog)\
**Post date:** [November 27, 2019, 5:03pm UTC](https://boards.straightdope.com/t/us-credit-card-question/843890/54 "2019-11-27T17:03:48Z")

</div>

> [@RaftPeople](#):
>
> Historical tangent:  
> The US fraud rate was low compared to Europe. Europe introduced chip+pin and it took a significant number of years to get their fraud rate down equal to the US level. The US didn’t have the same incentive. But it’s also true that the US is slow on things like this.

Another factor is that we have a _lot_ more banks in the US than your typical European country and they all had to get on board with the idea.

I had both my credit and debit cards at my main bank expire in August and September respectively this year. The debit card is not embossed and doesn’t even have the number on the front, just my name (it’s printed on the back). The credit card is still embossed; I looked at it thinking, “How quaint.” I don’t know if it was because it was a different division or the bank had made the switch in the month between.

Both have the contectless logo on them but I have used it only once. I had to be taught how to do so. I’d been tapping the part on the reader above the screen that showed the logo, would get no response, and shove the card into the chip reader. Finally when there was nobody behind me, I grumbled, “I can’t get this thing to work,” and the cashier said to tap the screen, not where the logo was.

[Previous page](https://boards.straightdope.com/t/us-credit-card-question/843890.md?page=2)
