3 ms·
But that's for debit cards - I think most banks include the account number in a debit card number. You would still need the CCV number from the back of the card
by nodata 16y ago
But that's for debit cards - I think most banks include the account number in a debit card number. You would still need the CCV number from the back of the card for the attack to work.
- hboon 16y agoCCVs aren't always required for transactions.
- lwhi 16y agoCCV proves the cardholder was present at the time of the transaction. Online merchants are never allowed to store CCV numbers.
- nodata 16y agoThey can ask for them though.
- lwhi 16y ago.. indeed, and they often do.
- dedward 16y agoedit: CCV proves that you at one time had access to the CCV number. Online merchants are supposed to comply with PCI-DSS - not store your CCV ever, never transmit your number unencrypted, never store cardholder information unencrypted, plus tons of management controls and audit controls over the same. In practice, let's just say lazy programming is everywhere. I've seen many people who handle online transactions and violate PCI-DSS to some degree, including storing CCV numbers.
- InclinedPlane 16y agoI haven't noticed any other bank which had the same practice. Also, not all online merchants use CCV. Also consider the risk of creating fake physical CCs, no address or CCV necessary.
- Cushman 16y agoJust checked— my credit union debit card number includes my account number.