5 ms·

Credit cards are never secure by default. It is best to assume that the number will be stolen eventually.

rambojazz 7y ago
I really wish they had multi-factor authentication like bank transfers have. The only credit-cards that I use are prepaid ones, for the reason you just mentioned.
- elygre 7y ago
  If it’s prepaid, is it then a credit card anymore? I believe this is relevant with respect to much of the protection you have from using a credit card (chargebacks etc)
  - AstralStorm 7y ago
    Well, there's Revolut not quite prepaid virtual debit cards. Some banks offer temporary card numbers as a premium feature.
- dessant 7y ago
  Confirming online debit and credit card payments with a one-time password has become a standard practice in the EU. These solutions are also available in the US, are they not being adopted by banks there? https://usa.visa.com/pay-with-visa/featured-technologies/verified-by-visa.html https://usa.visa.com/pay-with-visa/featured-technologies/ver... https://www.mastercard.us/en-us/consumers/payment-technologies/securecode.html https://www.mastercard.us/en-us/consumers/payment-technologi...
  - filleduchaos 7y ago
    It's not just in Europe, even here in West Africa OTPs (and hardware tokens) have been standard practice for years. I always feel weirdly unsafe interacting with US-based companies/payment processors.
- Cu3PO42 7y ago
  They do in Europe. Since 9/13 it is mandatory for online transactions with some exceptions. The implementation is up to the bank, so can take different forms. In my case my bank has an app which will show the transaction and I can then accept/reject. My mom's bank's implementation looks very much like TOTP though I haven't investigated if it is. Transactions at a POS use a PIN.
  - AstralStorm 7y ago
    Here in Poland there is also an instant electronic transfer called BLIK, where you confirm the payment as well. What is sent is a temporary numeric code to the terminal (it can be typed in as well as sent over NFC or QR code) and it is similar to automatic escrow. Disputes work differently depending on the bank though. And in some banks they're starting to roll out OTP 3D Secure etc. confirmations even for PoS terminals above certain value. Most terminals support it, it's just a hold on transaction.
sdan 7y ago
This is why I use privacy.com whenever I can to make payments. I heard DoNotPay has a similar feature.

I really wish they had multi-factor authentication like bank transfers have. The only credit-cards that I use are prepaid ones, for the reason you just mentioned.

elygre 7y ago
If it’s prepaid, is it then a credit card anymore? I believe this is relevant with respect to much of the protection you have from using a credit card (chargebacks etc)
- AstralStorm 7y ago
  Well, there's Revolut not quite prepaid virtual debit cards. Some banks offer temporary card numbers as a premium feature.
dessant 7y ago
Confirming online debit and credit card payments with a one-time password has become a standard practice in the EU. These solutions are also available in the US, are they not being adopted by banks there? https://usa.visa.com/pay-with-visa/featured-technologies/verified-by-visa.html https://usa.visa.com/pay-with-visa/featured-technologies/ver... https://www.mastercard.us/en-us/consumers/payment-technologies/securecode.html https://www.mastercard.us/en-us/consumers/payment-technologi...
- filleduchaos 7y ago
  It's not just in Europe, even here in West Africa OTPs (and hardware tokens) have been standard practice for years. I always feel weirdly unsafe interacting with US-based companies/payment processors.
Cu3PO42 7y ago
They do in Europe. Since 9/13 it is mandatory for online transactions with some exceptions. The implementation is up to the bank, so can take different forms. In my case my bank has an app which will show the transaction and I can then accept/reject. My mom's bank's implementation looks very much like TOTP though I haven't investigated if it is. Transactions at a POS use a PIN.
- AstralStorm 7y ago
  Here in Poland there is also an instant electronic transfer called BLIK, where you confirm the payment as well. What is sent is a temporary numeric code to the terminal (it can be typed in as well as sent over NFC or QR code) and it is similar to automatic escrow. Disputes work differently depending on the bank though. And in some banks they're starting to roll out OTP 3D Secure etc. confirmations even for PoS terminals above certain value. Most terminals support it, it's just a hold on transaction.

sdan 7y ago

This is why I use privacy.com whenever I can to make payments. I heard DoNotPay has a similar feature.