6 ms·
2 can be genuine use. I let my partner use my card and I use it on my phone as rfid. Maybe ignore phone usages since they are secured pretty well.
by dnnddidiej 5mo ago
2 can be genuine use. I let my partner use my card and I use it on my phone as rfid. Maybe ignore phone usages since they are secured pretty well.
- WhyIsItAlwaysHN 5mo agoExactly, hopefully this is not an autoblock in the future.
- masklinn 5mo ago> A transaction that fails on three or four of them is almost always fraud. A transaction that fails on one might be your grandma being weird with her debit card on vacation.
- WhyIsItAlwaysHN 5mo agoThe article states that the particular item is a clear sign of fraud. If that was true, then it should be treated in a special manner. A more paranoid bank could enforce it without adhering to this guidance of multi-factor detection. It isn't though, so balancing it with other rules is fine.
- nujabe 5mo agoThey can distinguish a physical card vs Apple Pay
- masklinn 5mo agoAll of them can be genuine use, these are fraud signals not fraud proofs, and the article does cover this: > What works is running them all and scoring each transaction across the signals. A transaction that fails on three or four of them is almost always fraud. A transaction that fails on one might be your grandma being weird with her debit card on vacation.
- dnnddidiej 5mo ago> If a card swipes in Chicago and seven minutes later swipes in Los Angeles, one of those swipes is fake. The card is cloned. This is the most uncontroversial fraud signal you’ll find — there’s almost no legitimate reason a single card is in two distant places in seven minutes.
- lmz 5mo agoThe question is whether they would treat that as a single card (physical vs digital).
- dnnddidiej 5mo agoIf they don't then this is a good detection system for a very specific scenario (but nonetheless a good trick)
- rswail 5mo agoThe Apple/Google Pay cards have a DPAN (device account number) that is different to the CPAN of the physical card. It keeps the same issuer (first 6 digits) and the same "last 4" digits, but the others are different. The DPAN is translated into the CPAN by software at the issuing bank, so it's not identifiable by the merchants. Merchants get the "last 4" digits, but that's not enough to identify specific CPANs.