5 ms·

Ok, I am a complete noob in this regard. I have a VISA Gold card with a chip and payWave, what should I do to protect myself from this?

lstamour 12y ago
First, this doesn't affect PayWave yet, just PayPass. But to continue: (1) Don't put your phone in the same pocket as your card, (2) Get either a metal or protected wallet for NFC-enabled cards, (3) Review card usage and don't worry about it. You aren't responsible for card fraud with credit cards. The chances of this being used against you are incredibly slim. It's also less useful as an avenue to commit fraud since payment with NFC is usually limited to under $25 by merchant agreements. Besides, duplicated cards are old hat, what with programmable chips and magnetic strips already. What's neat here is the proof-of-concept demo involving phones without the need for specialized SIM cards or approved phone handsets. Not 100% sure myself, but maybe it only works because PayPass allows for stickers on your phone case to emulate a credit card? Oh and if you go to pay for something on a website and enter your 3-digit code plus the card number, well, spyware could have your card already. So NFC as an attack vector is slower and less useful. Watch out for those custom keyboards ;-)
- deleted 12y ago
  [deleted]
  - marcosscriven 12y ago
    I'm not clear from your comment whether HCE means I could in fact use it for PayWave (rather than just PayPass), despite the title? Would it work with Opal too for instance?
    - deleted 12y ago
      [deleted]
    - tonteldoos 12y ago
      I haven't tried myself (I have PayWave, and this is now on my todo list for tomorrow), but I imagine that they maybe hadn't tested it on Paywave when they wrote the title? The standard(s) seem pretty pervasive, and I've often had PayWave work where there is only a PayPass sign... On your last question - I'm not familiar with Opal at all. Any links/information?
      - madeofpalk 12y ago
        Opal is Sydney's new contactless smartcard ticketing system, using MiFare DESFire EV1, based on Londons Oyster.
        tonteldoos 12y ago
        Ah, righto. I doubt it then, but can't say for sure. I'd imagine that PCI cards will have a different set of requirements to adhere to, for starters. If it did work, however, it'd be reaaaal nice to try on Queensland's Go card ;-)
- tonteldoos 12y ago
  Commenter below mentions that it works on his paywave...
driverdan 12y ago
Do you use it? If not just find the chip in the card and crush it. That's what I do.

lstamour 12y ago

First, this doesn't affect PayWave yet, just PayPass. But to continue: (1) Don't put your phone in the same pocket as your card, (2) Get either a metal or protected wallet for NFC-enabled cards, (3) Review card usage and don't worry about it. You aren't responsible for card fraud with credit cards. The chances of this being used against you are incredibly slim. It's also less useful as an avenue to commit fraud since payment with NFC is usually limited to under $25 by merchant agreements. Besides, duplicated cards are old hat, what with programmable chips and magnetic strips already. What's neat here is the proof-of-concept demo involving phones without the need for specialized SIM cards or approved phone handsets. Not 100% sure myself, but maybe it only works because PayPass allows for stickers on your phone case to emulate a credit card? Oh and if you go to pay for something on a website and enter your 3-digit code plus the card number, well, spyware could have your card already. So NFC as an attack vector is slower and less useful. Watch out for those custom keyboards ;-)

deleted 12y ago
[deleted]
- marcosscriven 12y ago
  I'm not clear from your comment whether HCE means I could in fact use it for PayWave (rather than just PayPass), despite the title? Would it work with Opal too for instance?
  - deleted 12y ago
    [deleted]
  - tonteldoos 12y ago
    I haven't tried myself (I have PayWave, and this is now on my todo list for tomorrow), but I imagine that they maybe hadn't tested it on Paywave when they wrote the title? The standard(s) seem pretty pervasive, and I've often had PayWave work where there is only a PayPass sign... On your last question - I'm not familiar with Opal at all. Any links/information?
    - madeofpalk 12y ago
      Opal is Sydney's new contactless smartcard ticketing system, using MiFare DESFire EV1, based on Londons Oyster.
      - tonteldoos 12y ago
        Ah, righto. I doubt it then, but can't say for sure. I'd imagine that PCI cards will have a different set of requirements to adhere to, for starters. If it did work, however, it'd be reaaaal nice to try on Queensland's Go card ;-)
tonteldoos 12y ago
Commenter below mentions that it works on his paywave...

driverdan 12y ago

Do you use it? If not just find the chip in the card and crush it. That's what I do.