stollen debit card number. i think he works for google.

I am more of a system analyst that is controlling and doing software development on the EFT platform rather than someone who works the technical aspect of EFT design. So if something was exposed, it would only be the offset, and you'd need to pass that into a hardware-based decryptor to get any kind of real value out of the offset.Īs far as encrypting transmission of card data, yes, that is part of the PCI requirement. It was first encoded with DES back in the day, but the industry demanded higher protection, so they switched to triple DES a few years back, and that has been the standard ever since. Sort of like how PIN transmission works in ATMs. The offset is what is transmitted, and that is what is decrypted at the EFT switch. As far as I know, the value is sent as plain text from the chip to the card reader, but it is only an offset. On your next transaction, that value is submitted to the EFT switch, and the EFT switch verifies that it is truly the value they wrote to that card. The EFT switch, which is the network that provides the auth, will write a new value to the chip on every transaction. The chip is a read/write dealio with every transaction and I have not heard otherwise that the value could be static, but I also don't know for sure. ICVV/CVV2 was an enhancement to the strip (just add more stuff!) to ease the weakness of the mag strip. What can I do to prevent this/protect myself?

The thing is, it could've easily been $2,000 or more and they could've cleared out the entire account. My question is how I can protect myself from something like this happening in the future? $240 isn't enough to break me or make me bounce checks all over town, but it's definitely annoying. That's gonna be a pain, but I can handle that. The debit card has been shut down by the credit union's fraud department and I'm going to run down there on lunch time and see about getting the charges reversed and getting a new card. They saw that charges were happening in two different states 1700 miles apart at the same time and shut it down. The bank only caught it because I was craving lasagna and ran to the grocery store. I have the physical card, but they got the number. Whether they swiped it personally one of the many times I've used it to pay for drive through food or whether they got it from one of the many database hacks that happen on a daily basis I have no idea. Long story short, someone apparently got my debit card number.

Here, please treat others with respect, stay on-topic, and avoid self-promotion.Īlways do your own research before acting on any information or advice that you read on Reddit. Get your financial house in order, learn how to better manage your money, and invest for your future. Banking Megathread: FDIC, NCUA, and your cash.

Private communication is not safe on Reddit.

Scam alert: Ignore any private messages or chat requests.

Stollen debit card number. i think he works for google.