Stolen Credit Card CVV/CVC Puzzle

Please note this sub-forum does not provide professional finance advice. You should seek advice from a licensed financial advisor.

To post in this sub-forum you must have made 100 posts or have Trust status or have completed our ID Verification.

If investing please consider our affiliate link for new accounts: Sharesies.

Forums › Finance and wealth management › Stolen Credit Card CVV/CVC Puzzle

1 | 2 | 3 | 4 | 5 | 6

2568 posts

Uber Geek

Trusted

#3285007 22-Sep-2024 10:34

This is kinda offtopic, but why do people worry about this so much? Your card gets used and it wasn't you, you file a dispute. It's happened to me a few times. And if you do lose your card and you notice you lock it until you find it again.

I mean I can think of two reasons: One: The admin of filing a dispute and two it's a pain have not have access to the stolen money until the dispute is sorted, which can take a couple of months.

But am I dumb? Should I be cutting antennas and shaving CCVs or whatever it's called off?

Audiophiles are such twits! They buy such pointless stuff: Gold plated cables, $2000 power cords. Idiots.

OOOHHHH HYPERFIBRE!

SimonGilmour

31 posts

Geek

#3285010 22-Sep-2024 10:51

muppet:

This is kinda offtopic, but why do people worry about this so much? Your card gets used and it wasn't you, you file a dispute. It's happened to me a few times. And if you do lose your card and you notice you lock it until you find it again.

I mean I can think of two reasons: One: The admin of filing a dispute and two it's a pain have not have access to the stolen money until the dispute is sorted, which can take a couple of months.

But am I dumb? Should I be cutting antennas and shaving CCVs or whatever it's called off?

For myself (I'm the OP) there are two reasons. One, it is interesting to know how these things work. Two, I thought I'd protected myself against this by shaving off the CVC and I'm wondering why I still got 2FA texts when someone tried to use it.

I used to work in liquor and as soon as anyone dodgy finds or "finds" a card they go liquor store-petrol station-liquor store-petrol station....(the limit used to be $80 in those days per transaction) and given the class of these people they are usually trying to buy cigarettes. For instance I remember two white *&^%ing morons going back and forth faffing around trying to keep the limit under $80 buying cigarrettes with a card whose name was clearly not theirs. Mr Gopal or Mr Mohammed or something.

Ever since then I refuse to use paywave and removed the CVC number. I don't even want the hassle of having to ring the bank and explain that the last few transactions weren't mine so I cut the aerial on all my cards. This worked in this case as they couldn't use paywave which you can bet they tried. You might say well you can just lock the card as soon as you lose it. But what if you don't realise it for a while - it might only take minutes before someone tries to use it. Or what if you lose your phone at the same time and can't log into your online banking. I certainly don't want to log into banking on my work/another computer, and then you have to spend time on the phone to the bank.

So my preparedness worked in this case except for getting the 2FA texts and so I am wondering why it looks like some vendor might have let it be used without the CVC.

Batman

Mad Scientist
29761 posts

Uber Geek

Trusted

Lifetime subscriber

#3285025 22-Sep-2024 11:50

SimonGilmour:
Hi, Interested if anyone has some knowledge here.

I lost my wallet this morning. Was hoping that it might be handed in but then a few hours later I got 2FA texts - someone was trying to use my ANZ VISA Credit Card on "One NZ" (Previously Vodafone, I believe). The problem is that I cut the aerial on and literally shave off the CVC/CVV number off of my credit cards. So it can't be used for paywave and I can't see how it can be used online without the CVC number. I talked to ONE NZ and they swear that the CVC number is needed to make a purchase on their site.

So something doesn't add up. Is there a way around the CVC number? Did they brute-force guess it? Are OneNZ lying?

Any idea?

Thanks,

s

How do you cut the aerial without destroying the card? Genuine question. Keen to know.

SimonGilmour

31 posts

Geek

#3285027 22-Sep-2024 11:59

Batman:

How do you cut the aerial without destroying the card? Genuine question. Keen to know.

There is a loop - an aerial - that starts and ends at the chip and loops right around the circumfrence of the card. I googled it years ago. You shine a bright light through the card so you can see where the aerial goes and make a cut through the loop away from the chip. I make a double cut and remove the sliver so there is no chance it can still contact. I can't work out how to put a pic in this forum. So I end up with a slit in the side of the card a couple of mm wide that extends from the edge to maybe a cm in.

Every [bank] card is different so you need to shine the light to find the aerial. Obviously you can't undo this if you want paywave again.

SomeoneSomewhere

1802 posts

Uber Geek

Lifetime subscriber

#3285059 22-Sep-2024 14:20

A hole punch near the perimeter of the card and away from the chip is also a good option; again, aim carefully using a flashlight to see through the card.

Ge0rge

2052 posts

Uber Geek

Trusted

Lifetime subscriber

#3285066 22-Sep-2024 14:47

Why do people want to prevent the paywave from working?

neb

11294 posts

Uber Geek

Trusted

Lifetime subscriber

#3285072 22-Sep-2024 15:02

Kyanar:
neb: Most issues with invalid CVVs are because the cardholder either mistypes it or doesn't have the card handy and tries to guess it. Because of this many payment processors choose to allow transactions with invalid CVVs on the grounds that it's more profitable to allow them than to decline them.

Er, no. Scheme rules (as in Mastercard, Visa, and Amex, not the banks) absolutely prohibit permitting a transaction with an invalid CVV. A CVV is not mandatory, but if it is provided, it absolutely must be correct.

Those rules... they're more what you'd call 'guidelines' than actual rules when the risk of losing money is involved. My comment came from someone who worked for a major US payment processor, but it's not hard to find plenty of online comments about people successfully running transactions with invalid CVVs. From a very rudimentary Google, here's one example. Here's another:

I paid in amazon right now about 10 mins ago while purchasing some food item. My cvv i entered incorrect intentionally. I had this idra from a friend whose transactions were getting passed even when cvv was being entered wrong.

Here's another. There's lots more out there.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Note that to use Quic Broadband you must be comfortable with configuring your own router.

neb

11294 posts

Uber Geek

Trusted

Lifetime subscriber

#3285073 22-Sep-2024 15:05

Ge0rge: Why do people want to prevent the paywave from working?

Because anyone standing close to you can run Paywave transactions against your card without you knowing about it. Since it's undetectable it's not known how much of this happens, but some people don't want to take the risk.

rugrat

3107 posts

Uber Geek

Lifetime subscriber

#3285209 22-Sep-2024 19:50

Also I lost my card. Knew where I lost it went back and it was gone.

I had payWave disabled, but if it was enabled whoever picked it up could do up to $200 dollar transactions with no PIN required in the time it took me to realise card was missing.

Locked card completely once realised so card not present transactions would be blocked also. Luckily no fraud took place.

If payWave wasn’t blocked may have been different outcome.

My Dad who is in a rest home so didn’t realise for some time had over $10,000 stolen, most was payWave.

Person caught, bank refunded money, but justice department decided not to prosecute as my mum passed away before case. Card was joint one so her last holiday was ruined. My Dad has dementia so cannot be a witness.

SimonGilmour

31 posts

Geek

#3285216 22-Sep-2024 20:32

Quote: SomeoneSomewhere: A hole punch near the perimeter of the card and away from the chip is also a good option; again, aim carefully using a flashlight to see through the card.

Great idea using hole punch! I going to try to attach a pic of one of my cards (there is a sticker on the other side of this card which makes it look weird).

Quote: Ge0rge: Why do people want to prevent the paywave from working?

Read all of my comments in this thread.

rugrat:

Also I lost my card. Knew where I lost it went back and it was gone.

I had payWave disabled, but if it was enabled whoever picked it up could do up to $200 dollar transactions with no PIN required in the time it took me to realise card was missing.

Locked card completely once realised so card not present transactions would be blocked also. Luckily no fraud took place.

If payWave wasn’t blocked may have been different outcome.

My Dad who is in a rest home so didn’t realise for some time had over $10,000 stolen, most was payWave.

Person caught, bank refunded money, but justice department decided not to prosecute as my mum passed away before case. Card was joint one so her last holiday was ruined. My Dad has dementia so cannot be a witness.

This.

boosacnoodle

963 posts

Ultimate Geek

#3285219 22-Sep-2024 20:48

geek3001:
In terms of Lotto, I presume you mean Lotto NZ? If so, I can assure you they definitely require the card's CVC number as part of the topping-up process when you buy a ticket manually via their smartphone app as I do this regularly.

Yes - they ask for one, but they do not validate this. I tried this with my partners BNZ card last night and just put in 123 - it worked.

snj

185 posts

Master Geek

#3285224 22-Sep-2024 21:12

boosacnoodle:
geek3001:

In terms of Lotto, I presume you mean Lotto NZ? If so, I can assure you they definitely require the card's CVC number as part of the topping-up process when you buy a ticket manually via their smartphone app as I do this regularly.

Yes - they ask for one, but they do not validate this. I tried this with my partners BNZ card last night and just put in 123 - it worked.

You just reminded me that it's a year since https://www.stuff.co.nz/business/132693818/players-question-mylotto-security-after-payments-with-false-card-details-approved (comments from Lotto in the article). Seems nothing has changed.

SimonGilmour

31 posts

Geek

#3285225 22-Sep-2024 21:18

boosacnoodle:
geek3001:

In terms of Lotto, I presume you mean Lotto NZ? If so, I can assure you they definitely require the card's CVC number as part of the topping-up process when you buy a ticket manually via their smartphone app as I do this regularly.

Yes - they ask for one, but they do not validate this. I tried this with my partners BNZ card last night and just put in 123 - it worked.

Wow. That's *&^%ing ridiculous. The ENTIRE POINT of the CVC number is to verify that the person has the PHYSICAL CARD in their possession. Vendors ignoring this makes it a mockery.

SimonGilmour

31 posts

Geek

#3285284 22-Sep-2024 22:40

boosacnoodle:
Yes - they ask for one, but they do not validate this. I tried this with my partners BNZ card last night and just put in 123 - it worked.

I have written a strongly worded email to Visa.co.nz. Pointing out the absurdity that when I get my next VISA I will also have to cut off some or all of the 16 credit card digits so that someone who steals it can't use it. A protection which removing the CVC number IS SPECIFICALLY SUPPOSED TO DO.

neb

11294 posts

Uber Geek

Trusted

Lifetime subscriber

#3285287 22-Sep-2024 23:17

The CVC is designed to shift liability for one of more of the parties involved in the transaction, not to make you more secure. Same with Verified by Visa/Mastercard Secure, when that was enabled it resulted in a loss in conversion rate (i.e. abandoned transactions = lost sales) as high as 40-50% in some countries. When was the last time you encountered VbyV?

"Dear Mr. Gilmour,

As you know, we at Visa take security very seriously.

(Sarah, send this SOB the security letter)".

1 | 2 | 3 | 4 | 5 | 6