CC shared secret
Roland Perry
ukcrypto at chiark.greenend.org.uk
Wed, 6 Aug 2008 13:54:40 +0100
In article <4899840C.3040608@pelicancrossing.net>, Wendy M. Grossman
<wendyg@pelicancrossing.net> writes
>What frosts me is that adding VfV to the list of hoops you have to jump
>through to put through a purchase doesn't make the bank any less likely
>to decide the transaction is dubious
There's the other aspect which is that if the transaction is rejected as
"suspicious" (not because any of the passwords were wrong, just a
purchase outside what they say is your normal pattern) then they don't
tell the cardholder that their card *may* have been compromised. Which
is odd because surely the only plausible scenario that it's "not you"
making the purchase in such circumstances is that the card *has* been
compromised, and shouldn't you be warned?
> and stop your card.
IME they just refuse the charge, but don't do anything else, and
especially don't stop the card, or issue a new card proactively.
--
Roland Perry