4 ms·

I'm curious if they are also logging the zip code entered via keypad. I can't remember the last time I used a pump without zip code validation.

ams6110 9y ago
From the write-up, it sounds like these were just grabbing the card data. Where I live most pumps do ask for zip code but a non-negligble number don't. Why haven't gas pumps converted to chip cards?
nkozyra 9y ago
I don't believe the most common skimmer has access to this, but the prevalence of required zip code with other transactions is so low it doesn't matter. Most frequently required: 1. Card no. 2. Expiration 3. CVV 4. Full name 5. Zip code (or address) But plenty of transactions will be fulfilled with just #1 and #2.
fencepost 9y ago
In many areas the zip code associated with the cards will likely be one of only 1-3 choices, particularly if the gas station isn't on a through road.
goialoq 9y ago
The zip code is to prevent criminals from stealing gas (via vendor fraud chargeback) via a card stolen elsewhere, not to prevent criminals from stealing cards at the gas station.
- benjaminjackman 9y ago
  I wonder if they use the stolen cards to steal gas from other stations, that eventually by and large gets sold back to stations from what I have read.
- tastyfreeze 9y ago
  The real reason for requiring zip code entry is a lower interchange fee for the station. If they didnt get a lower interchange fee they wouldnt care at all. It is also the only identity verification information that can be entered on a 10 key pad.
benjaminjackman 9y ago
It might be the case that enough of the zip codes are the same as where the pump is located or a few adjoining areas that trial and error would work well enough.
terryf 9y ago
As a foreigner who travels to the US on occasion - and therefore doesn't actually have an US zip code - what's up with that? If you have a keypad installed anyway, then why the hell not accept the chip reader with pin code? Not complaining or anything, but it's quite baffling. Nowhere else in the world that I've seen, they don't restrict payments to locals....
- js2 9y ago
  Try using a pump in Israel. I had to ask for help every time. Not only is Israel still using mag stripe, there's also some sort of national ID # you have to enter into the pump. And the license plate # too I think. I think tourists are supposed to be able to use all 0, but I couldn't navigate it. This is from 2012 but seems pretty close to what I dealt with there last year: https://www.tripadvisor.com/ShowTopic-g293977-i1733-k5730382-Buying_fuel_for_the_car_in_Israel-Israel.html https://www.tripadvisor.com/ShowTopic-g293977-i1733-k5730382... Which is to say: every country has its weird thing. :-)
  - sjwright 9y ago
    In Australia, we have this weird thing where you pump the fuel then walk into the shop to pay. It's just a ruse to get you to buy energy drinks and two chocolate bars.
    - KozmoNau7 9y ago
      It used to be like that here in Denmark, but due to a rash of fuel thefts, now it's all pre-pay at the pump. It was so odd going to Germany last month, and actually being able to pump and then pay in the shop afterwards.
    - js2 9y ago
      In New Jersey (and I think Oregon), you can't pump your own gas. Full service only. Years ago (this predated energy drinks by a couple decades) I filled up at a rural station in GA that had old mechanical pumps. I went inside to pay, having not taken note of the cost. When the cashier asked me how much I'd purchased and I told him I'd have to go check, he waved me off and pulled out a pair of binoculars to read the charge off the pump. I like to think now he foresaw the coming age of skimmers and wanted his pumps to remain immune.
tehwebguy 9y ago
Used one without zip verification the other day in Los Angeles. Before I started pumping my gas someone walked up and offered me $25 in gas for $15 in cash.

ams6110 9y ago

From the write-up, it sounds like these were just grabbing the card data. Where I live most pumps do ask for zip code but a non-negligble number don't. Why haven't gas pumps converted to chip cards?

nkozyra 9y ago

I don't believe the most common skimmer has access to this, but the prevalence of required zip code with other transactions is so low it doesn't matter. Most frequently required: 1. Card no. 2. Expiration 3. CVV 4. Full name 5. Zip code (or address) But plenty of transactions will be fulfilled with just #1 and #2.

fencepost 9y ago

In many areas the zip code associated with the cards will likely be one of only 1-3 choices, particularly if the gas station isn't on a through road.

goialoq 9y ago

The zip code is to prevent criminals from stealing gas (via vendor fraud chargeback) via a card stolen elsewhere, not to prevent criminals from stealing cards at the gas station.

benjaminjackman 9y ago
I wonder if they use the stolen cards to steal gas from other stations, that eventually by and large gets sold back to stations from what I have read.
tastyfreeze 9y ago
The real reason for requiring zip code entry is a lower interchange fee for the station. If they didnt get a lower interchange fee they wouldnt care at all. It is also the only identity verification information that can be entered on a 10 key pad.

benjaminjackman 9y ago

It might be the case that enough of the zip codes are the same as where the pump is located or a few adjoining areas that trial and error would work well enough.

terryf 9y ago

As a foreigner who travels to the US on occasion - and therefore doesn't actually have an US zip code - what's up with that? If you have a keypad installed anyway, then why the hell not accept the chip reader with pin code? Not complaining or anything, but it's quite baffling. Nowhere else in the world that I've seen, they don't restrict payments to locals....

js2 9y ago
Try using a pump in Israel. I had to ask for help every time. Not only is Israel still using mag stripe, there's also some sort of national ID # you have to enter into the pump. And the license plate # too I think. I think tourists are supposed to be able to use all 0, but I couldn't navigate it. This is from 2012 but seems pretty close to what I dealt with there last year: https://www.tripadvisor.com/ShowTopic-g293977-i1733-k5730382-Buying_fuel_for_the_car_in_Israel-Israel.html https://www.tripadvisor.com/ShowTopic-g293977-i1733-k5730382... Which is to say: every country has its weird thing. :-)
- sjwright 9y ago
  In Australia, we have this weird thing where you pump the fuel then walk into the shop to pay. It's just a ruse to get you to buy energy drinks and two chocolate bars.
  - KozmoNau7 9y ago
    It used to be like that here in Denmark, but due to a rash of fuel thefts, now it's all pre-pay at the pump. It was so odd going to Germany last month, and actually being able to pump and then pay in the shop afterwards.
  - js2 9y ago
    In New Jersey (and I think Oregon), you can't pump your own gas. Full service only. Years ago (this predated energy drinks by a couple decades) I filled up at a rural station in GA that had old mechanical pumps. I went inside to pay, having not taken note of the cost. When the cashier asked me how much I'd purchased and I told him I'd have to go check, he waved me off and pulled out a pair of binoculars to read the charge off the pump. I like to think now he foresaw the coming age of skimmers and wanted his pumps to remain immune.

tehwebguy 9y ago

Used one without zip verification the other day in Los Angeles. Before I started pumping my gas someone walked up and offered me $25 in gas for $15 in cash.