3 ms·
I’ve always found it incredible that US banks often require only the card number to perform a transaction. All those “card generators” I used to see uploaded to
by nickdothutton 3y ago
I’ve always found it incredible that US banks often require only the card number to perform a transaction. All those “card generators” I used to see uploaded to BBS in the late 80s and early 90s make sense.
- deathanatos 3y agoThat part of the article was news to me. Like, why do I have to deal with CVVs, expiration dates, zip codes, (not to mention the resulting work from the fallout from the fraud) … if it doesn't even matter? How many person years of human life per year could pursue something … worthwhile … if we checked the CVV?
- cesarb 3y agoIt makes sense to me that zip codes don't matter (or might be a weak signal), since some countries might not have postal codes, or might have a different postal code format. But I agree with you that it doesn't make sense to not check the CVV and expiration date; both are printed directly in the card, and should match exactly (unlike the card owner name, which is also printed in the card, but the user might type it differently, for instance typing in full their middle name when it's abbreviated in the card).
- nitwit005 3y agoHaven't dealt with credit cards, but people often have the zip code wrong on their address. The mail gets delivered if the rest of the information is correct. I assume that makes it hard to be strict about zip code.
- zaroth 3y agoI don’t understand not checking CVV and Expiration Date at all… But for the other info, they could be carding for prepaid cards which have no name, address, or ZIP code to verify against?
- deathanatos 3y agoDo prepaids not have ZIPs? So many things demand this info (heck, even some gas pumps…) … what do people enter at those prompts? (I left out name; I assume name isn't matched against, given how fuzzy of a field it is. Most sites don't even prompt for the information accurately enough to make a match anyways.)
- KirillPanov 3y ago> what do people enter at those prompts? 11111 I'm serious. That's the "zip code" assigned to cards without a zip code.
- jaywalk 3y agoI recently discovered, after almost a year, that I had put the wrong expiration date of a new card into my password manager. It was the correct year but the wrong month. Not a single transaction had failed with the wrong expiration date.