Online credit card payment "arcot" verification? is this legit?

Please note this sub-forum does not provide professional finance advice. You should seek advice from a licensed financial advisor.

To post in this sub-forum you must have made 100 posts or have Trust status or have completed our ID Verification.

If investing please consider our affiliate link for new accounts: Sharesies.

Forums › Finance and wealth management › Online credit card payment "arcot" verification? is this legit?

sidefx

3711 posts

Uber Geek

Trusted

#242554 3-Nov-2018 12:30

I pay for things online frequently with an ANZ visa credit card, but this is the first time I've got this:

It popped up after clicking submit on a payment express page for a well known nz insurer. It's asking for a bunch of verification information (date of birth, credit limit on the card, cvc, etc)

legit?

"I was born not knowing and have had only a little time to change that here and there." | Octopus Energy | Sharesies
- Richard Feynman

1 | 2

3711 posts

Uber Geek

Trusted

#2118940 3-Nov-2018 12:34

Looks like it's this?

https://www.anz.co.nz/banking-with-anz/banking-safely/verified-by-visa/

The anz logo, layout of page, etc just look so amateurish lol

(I also have 2FA setup so I dunno why they don't just text me a code that I can enter to verify...?)

EDIT: Plus I also haven't kept up with the current approach to https indicators so was surprised not to see a green lock, but I guess that's expected too: https://blog.chromium.org/2018/05/evolving-chromes-security-indicators.html

EDIT2: Interestingly after enter the details it was asking for (including mobile number) it sent me a text saying that in the future they would text me a code to verify... so I guess this is a different 2FA system to the one I already have setup when logging into ANZ online banking.

"I was born not knowing and have had only a little time to change that here and there." | Octopus Energy | Sharesies
- Richard Feynman

richms

28168 posts

Uber Geek

Trusted

Lifetime subscriber

#2118943 3-Nov-2018 12:43

It is, banks don't seem to think it is a terrible idea despite it making it acceptable to enter personal information into a scammy looking website, and when you get genius telcos who impliment it on their mobile apps, you cant pay them when you have no data left to load the stupid scam like website.

Richard rich.ms

Dratsab

3946 posts

Uber Geek

Trusted

Lifetime subscriber

#2118950 3-Nov-2018 13:08

Read here. This sort of stuff can be found in a search engine faster than you can make thread. It's a good thing to bring up, but maybe add a bit of 'geek' to it :-)

https://www.secureidnews.com/news-item/arcot-partners-with-first-data-to-provide-payment-authentication-solution-to-merchants-solution-will-enable-verified-by-visa-and-mastercard-securecod/

https://www.theguardian.com/money/2007/apr/21/creditcards.debt

sidefx

3711 posts

Uber Geek

Trusted

#2118951 3-Nov-2018 13:11

richms:

It is, banks don't seem to think it is a terrible idea despite it making it acceptable to enter personal information into a scammy looking website, and when you get genius telcos who impliment it on their mobile apps, you cant pay them when you have no data left to load the stupid scam like website.

TBH, I think most scammers have better web design skills ;D

"I was born not knowing and have had only a little time to change that here and there." | Octopus Energy | Sharesies
- Richard Feynman

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2118960 3-Nov-2018 13:33

It is SecureCode / verified by Visa. No need to worry on this instance.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2119335 4-Nov-2018 07:43

Problem is that is not the Visa or bank domain so it looks like phishing. So badly done, it is stupid.

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2119340 4-Nov-2018 08:05

freitasm: Problem is that is not the Visa or bank domain so it looks like phishing. So badly done, it is stupid.

I know... most of the time it is transparent to the customer (as in, goes straight through without a prompt). Whoever designed it wasn’t thinking.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

irongarment

280 posts

Ultimate Geek
Inactive user

#2119342 4-Nov-2018 08:19

I tend to refer to it as "bolloxed by visa". It's a preventative measure to stop you actually buying anything.

jarledb

Webhead
3253 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2278642 18-Jul-2019 03:55

Just came accross this today.

Really looked like phishing, and when looking up the domain arcot.com the domain has a protected Whois, which doesn't make it look any less scammy.

Luckily this thread came up when searching for Arcot.

Someone should do something about that service..

Jarle Dahl Bergersen | Referral Links: Want $50 off when you join Octopus Energy? Use this referral code
Are you happy with what you get from Geekzone? Please consider supporting us by making a donation or subscribing.

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#2278658 18-Jul-2019 08:32

michaelmurfy: It is SecureCode / verified by Visa. No need to worry on this instance.

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2278659 18-Jul-2019 08:35

Totally secure. The logos confirm it. Now give me your money.

coffeebaron

6231 posts

Uber Geek

Trusted

Lifetime subscriber

#2278665 18-Jul-2019 08:45

freitasm:

Totally secure. The logos confirm it. Now give me your money.

Sure here you go: 4444 1234 8428 9272

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

SpartanVXL

1306 posts

Uber Geek

#2278703 18-Jul-2019 09:33

Yup, I’ve had this a few times when making bookings for things when going on holiday overseas.

Had to look up who Arcot was and ANZ’s info page before going through with it. Bad design, really sets off the red flag warnings.

Jashan

78 posts

Master Geek

Trusted

#2278725 18-Jul-2019 09:52

Arcot Systems offers authentication and digital signing solutions to protect and verify the digital identity of card holders and merchants. It is used by leading payment solution for 3D secure. You get the enter your details page when you have never registered for verified by Visa or MasterCard Secure. The next time you make a payment through a site you have never paid to before you will be sent an OTP to verify your identity. It usually does not asks for verification if it recognizes the website or if you have paid to the same website before.

Edit: Spelling

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2278729 18-Jul-2019 09:56

@Jashan:

Arcot Systems offers authentication and digital signing solutions to protect and verify the digital identity of card holders and merchants. It is used by leading payment solution for 3D secure. You get the enter your details page when you have never registered for verified by Visa or MasterCard Secure. The next time you make a payment through a site you have never paid to before you will be sent an OTP to verify your identity. It usually does not asks for verification if it recognizes the website or if you have paid to the same website before.

Edit: Spelling

That's all good. But you are in a retailer's site, and suddenly a different page - not on retailer's and not your bank's - asks you for credit card information. It does look like phishing and I wouldn't touch if I had no more information.

1 | 2