Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Chase wouldn't be the one processing skimmed transactions, anyhow - it would be any merchant or processor the thief could find with weak fraud controls. In the US, ultimate liability for fraud is usually with the wronged merchant.

You know why Paypal lost a hundred million in fraud? One way was because they were the weakest link at the time: Paypal got used for cashing. (The hardest, riskiest part of stealing credit cards: transforming a credit card number into hard currency, without getting arrested. There are any number of ways to do this: buy items with a high resale value on eBay, pay with Psypal backed by stolen cards, sell items for cash. Set up affiliate account with merchant of high margin item, put sham transactions through using Paypal account backed by stolen cards, withdrawal clean money from affiliate account to which no accessible link to Paypal accounts exist. etc, etc)

Smart cards/RFID are basically worthless for preventing card not present fraud, which is the lion's share of it.



I know it's an innocent typo, but I love the idea of Psypal. That's when they use psychics for fraud detection.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: