3 ms·
Wouldn't asking for the name on the card as well stop this? You're not going to be able to randomly generate the correct name.
by seanwilson 10y ago
Wouldn't asking for the name on the card as well stop this? You're not going to be able to randomly generate the correct name.
- tyingq 10y agoUnfortunately, at least in the US, cardholder name matching doesn't work for most transactions. Only AMEX supports it. Edit: Offtopic rant, but as an online merchant this is the sort of thing that pisses me off about the CC situation. They don't support other obvious things either, like passing in the shipping address and ip address so they can be used for fraud detection. Yes, there are outboard services (MaxMind,etc) you can use, but they are working with a small subset of transactions, so their algorithms and blacklists are incomplete.
- ScottBurson 10y agoName matching doesn't work??! I guess you must be right, or this attack wouldn't be possible, but holy shit that is fucked up.
- tyingq 10y ago100% true. Does not work, outside of AMEX cards. You can put anything you want in the cardholder name fields.