Very Important: Chip based card security flaw you might not know

163°
Critic
guest_999

I was always under the impression that chip based card can not be cloned because of chip so no concern when using at any PoS in shops. However today I came to know that it is not so.
https://arstechnica.com/information-technology/...

A chip based cared security only comes into play when the card reader is “insert card” style but there are still the old “swipe style” card reader machines being used(just confirmed it from a friend who paid using the same swipe style machine at a petrol pump a few weeks back). If you use a chip based card in a swipe style card reader machine then your card chip’s security won’t play any role & your chip based card is completely susceptible to card cloning just like older non-chip cards.

So make sure that any PoS where you use your chip based card is insert style & not swipe style.If you cannot avoid swipe style card reader then use some card with not so much balance/card limit.

23 Comments  |  
10 Dimers
  • Sort By
Pro Community Angel Pro Community Angel
Link Copied

Everything has a remedy wink
And every remedy has a disease

Critic Critic
Link Copied

Yes,but this is very surprising.RBI should ban the usage of swipe style card reader immediately because what’s the point of using chip based card if it can also be cloned like older cards when using such swipe style card readers. Before knowing this I was using my card at any shop without a worry believing that chip based card cannot be cloned but now I will not use my card at swipe style PoS.

Deal Cadet Deal Cadet
Link Copied

Wrong info. Cards issued nowdays come with magnetic strip and are also Chip based. Not all cards are completely chip based but in the process. So even the chip based cards are being issued with the old magnetic strip tech. Sometimes due to whatever reason if chip is not getting detected then they swipe and go forward with the payment. So the issue is that cloning here happens due to the magnetic strip and the chip has no role in this.

View 2 more replies
Vanguard Vanguard
Link Copied

The cashier at the supermarket chains always swipe my card first at their billing machine before using the actual POS. How safe is that?

Critic Critic
Link Copied

?? swiping/dipping card reader is the PoS.If you are saying that he swipes your card 2 times or he first swipes the card at one reader & then use a different reader then it is definitely a card cloning scam.

View 6 more replies
Community Angel Community Angel
Link Copied

Can we pay at pos using Virtual Card ? If yes, How?

@abhishek012

Finance Ninja Finance Ninja
Link Copied

Tokenized virtual cards worked on NFC POS machine.

like SamsungPay & upcoming GooglePay Tokenized payment.

View 4 more replies
Deal Subedar Deal Subedar
Link Copied

Chip based card can also easily cloned.

Suchna janhit me jari.

Remedy : use a dedicaded card for pos maching with low balance e.g 10k

Dont swipe ur card at local shop, intead use qr based transaction preferebly upi

Never use atm which is not in brach building, otheriwse some skimming can be possible

Helpful Helpful
Link Copied

You can disable swiping for citi cards. Call CC.

Benevolent Benevolent
Link Copied

Many major banks are supporting instant locking/unlocking of credit cards on their mobile app. Use it to lock your cards and unlock them only when you are using them.

For ICICI bank they give an option to individually lock/unlock for ATM, online and international transactions.
For citibank they give an option to individually lock/unlock domestic/ and international transactions.

Ever since I read news about 100 million Indian credit card details being sold on DarkWeb (darknet) I started keeping all my credit cards locked using mobile apps of respective banks. I unlock the cards instant when I have to use the card and immediately lock it back again.

Critic Critic
Link Copied

Good practice but similar option is also available for many banks’ debit cards & the recent/latest news was about 1.3 million Indian cards(both debit & credit) details available on dark web.

replyuser
Click here to reply
Reply