3 ms·

I can't believe that buying a device for several hundred dollars, signing up for a cellular contract, entering a stolen credit card number, and then tricking a

I can't believe that buying a device for several hundred dollars, signing up for a cellular contract, entering a stolen credit card number, and then tricking a customer service rep is supposedly easier than just swiping a card with a fake magnetic strip? Shouldn't it be trivial for Apple to block devices with fraudulent transactions from using Apple Pay?

37prime 12y ago
Yes, only if the issuing bank flagged it.
Tarang 12y ago
There's also the bit where you don't need the original card to shop. Overall the system seems secure with the exception of being able to punch in anyone's card and use it without needing the card again. Nonetheless, you can keep it easy and get loads of people on board first before making it tougher.
hurin 12y ago
You don't need a cellular contract - and the simcard is presumably stolen as well or a pre-pay account created under a fake name.
- madeofpalk 12y ago
  You don't even need an active sim card to activate a phone. As long as there's a sim card in the tray, the iPhone will activate.
kalleboo 12y ago
There's probably much less friction for someone who say works as a waiter to start stealing cards by snapping photos with their iPhone vs buying a card skimmer, learning to use it, etc.
sorbits 12y ago
I would also think the risk is pretty high. Unless you’re very careful, your phone (i.e. Apple) has your identity, so if you add stolen credit cards to Apple Pay, and those cards are flagged as stolen, it should be possible to figure out who tried to use them. It also seems like a simple one-time password sent to the mobile phone number that the bank has on record, as a mandatory step when adding a credit card to Apple Pay, would effectively make it impossible to add stolen credit cards. The article makes it sound like it’s up to the bank to accept or deny a credit card, once added, so I would assume the bank can do this even without cooperation from Apple.

37prime 12y ago

Yes, only if the issuing bank flagged it.

Tarang 12y ago

There's also the bit where you don't need the original card to shop. Overall the system seems secure with the exception of being able to punch in anyone's card and use it without needing the card again. Nonetheless, you can keep it easy and get loads of people on board first before making it tougher.

hurin 12y ago

You don't need a cellular contract - and the simcard is presumably stolen as well or a pre-pay account created under a fake name.

madeofpalk 12y ago
You don't even need an active sim card to activate a phone. As long as there's a sim card in the tray, the iPhone will activate.

kalleboo 12y ago

There's probably much less friction for someone who say works as a waiter to start stealing cards by snapping photos with their iPhone vs buying a card skimmer, learning to use it, etc.

sorbits 12y ago

I would also think the risk is pretty high. Unless you’re very careful, your phone (i.e. Apple) has your identity, so if you add stolen credit cards to Apple Pay, and those cards are flagged as stolen, it should be possible to figure out who tried to use them. It also seems like a simple one-time password sent to the mobile phone number that the bank has on record, as a mandatory step when adding a credit card to Apple Pay, would effectively make it impossible to add stolen credit cards. The article makes it sound like it’s up to the bank to accept or deny a credit card, once added, so I would assume the bank can do this even without cooperation from Apple.