news.volyx.in

The underground world of credit card network exploitation (chargebackstop.com)

500 points by pimpl · 1120 days ago · 267 comments on HN

Article summary

The article discusses the author's experience with credit card network exploitation, where their company faced a surge in card testing attacks. The attacks involved multiple cards with similar parameters, suggesting a possible bank leak. The author implemented Stripe Radar and custom rules to prevent future attacks. The article also touches on the issue of American banks accepting transactions with incorrect information, such as invalid CVV or expiration dates.

Main themes

  • credit card fraud
  • payment security
  • banking regulation
  • 3D Secure
  • 2FA
  • US vs EU banking practices

What commenters say

  • 3D Secure is an effective solution to prevent credit card fraud, but its implementation varies by country and bank.
  • The US banking sector is slow to adopt modern security measures, such as chip and PIN technology.
  • Some commenters argue that the use of card readers is common in certain European countries, while others disagree.
  • The lack of standardization in payment processing and security measures contributes to the prevalence of credit card fraud.
  • Government intervention and regulation may be necessary to prevent credit card fraud and promote the adoption of secure payment technologies.
  • The use of 2FA, such as SMS or mobile app authentication, is not foolproof and can be inconvenient for users.
  • Some argue that the cost of credit card fraud is ultimately borne by consumers, rather than banks or merchants.