Apart from being forced to use PayPal for Ebay transactions would anyone actually bother to use it?
What's NFC? PayPal lobs Chip and PIN readers at UK small biz
Accepting credit cards just got even easier, with PayPal and iZettle both announcing Chip and PIN readers suitable for European markets where mag-stripes are considered passe. PayPal Here has been around in the US for a while, allowing merchants to take credit-card payments into their PayPal accounts, but like rival service …
-
-
Friday 22nd February 2013 14:04 GMT Phil W
I'm not the biggest fan of PayPal but it has it's uses.
I use it for paying for subscription service like my internet hosting, where I'd rather not set up a direct debit but don't want to have to pay manually each month.
It's also handy if you want to buy something from a website that seems a bit dodgy, but is the only place where you can get a particular item.
-
Friday 22nd February 2013 16:52 GMT Anonymous Coward
Possibley
I work at a small event that takes £50,000+ in cash over two days (it's a bring and buy stall in a bigger event). However we then pay most of that out to the sellers, so it's high turnover but relativley low actual cash we keep. We're all doing as volunteers as all the fees we take from charging the seller, all go (after costs) to our club funds. We can't currently do any cards, as the setup and running costs for a merchant account are not worth it for the scale of our event.
However, if we can offer chip and pin (and the buyer will have to pay the %charge as we pay the majority of the cash out to a seller later) then we can offer cards, useful when some items go for £500 plus and at the moment we have to rely on cheques or people carrying wads of cash.
All will depend on the costs to use it I guess.
-
-
-
-
Friday 22nd February 2013 15:24 GMT JaitcH
A certain Pin/Chip reader manufacturer ...
who manufactures motorised card reader/writers had a test ROM that allowed for duplication. The cards have no logo's (i.e. blank) and are intended for test and production purposes.
A technician friend works there and I made my own machine and he supplied the ROMs. Cost was around $320 - using my own PCB. The quick copy procedure is called a 'Yes' card. The version that takes longer yet to copy, with multiple read/writes of the 'master' card, which is because it has to test some code in a card being copied.
My wife has a copy of my card, the codes are contained in a small safe in our house. In the event of my death she will be able to continue to transact ATM business.
Banks seemingly don't do sophisticated checks as I was in the UK last year and used an ATM and then, receiving a SMS/text from me, my wife used her card in an ATM physically thousands of miles/kilometres away successfully within minutes of my use. Obviously banks believe in fast travel.
Even more susceptible are the PIN/chip readers in stores - they are designed to be remote programmed. The 'floor' levels are often changed at busy seasons. Leave the power off on a terminal overnight and see what doesn't happen.
We can also clone cell SIM chips, the easiest is a 'virgin' chip that has never been used, which can be obtained quite easily.
So much for security. As long as the banks are satisfied PIN/chip is secure. their smugness will allow us to continue copying cards. I even told a bank manager cards could be copied - he said that his information is that they are totally secure.
These unique "unpredictable numbers" aren't so unpredictable. My SecureCard is so secure I have a list of numbers in a file on my Note 2 which I can use to fool the HSBC computer. Usually it makes a request for one or two entries, just as with the real 'Secure'Key. Go figure.
What is secure is the password to the file!
-
Friday 22nd February 2013 16:43 GMT greenawayr
Maybe your credit card company...
...is a bit sloppy, but ours were sh!t hot when we were travelling. We gave them a list of countries we'd be visiting around Asia, Europe and America, popped into Lao for a few days having not notified them, and no dice (luckily had cash to exchange), but the other countries listed all cleared fine.
-
-
Monday 25th February 2013 10:46 GMT sugerbear
Re: A certain Pin/Chip reader manufacturer ...
Unfortunatly you are being very selective by choosing a card (not Visa/MasterCard/JCB/Discovery/Amex) with a well known defect.
So please please please, take a bank card from the UK and clone ALL of the chip data (software, keys etc).
When you have done you can then post about it.
-
-
-
Friday 22nd February 2013 14:09 GMT Anonymous Coward
So...
The question is: A market trader says that you can pay with your card. He offers you a mobile phone with a gizmo attached to it. Do you
a: Say, no thanks I'll pay by cash.
b: Put your card into an impossible to verify piece of hardware hooked up to someone's mobile?
Hmm. Tough one. I think I'd prefer a proper GSM connected C&P PED.
-
Monday 25th February 2013 10:54 GMT sugerbear
Re: So...
ok. The worst that could happen is that the trader will know your PIN number. He may also know your card pan number and its expiry date. But the reader wont know what is on the magstripe (which is good, cant be cloned and used in the US).
Without the physcial card the info the trader has is useless. The generated cryptograms rely on (amongst other things) the application transaction counter (which is held on the chip) which is unique to every transasction.
So I understand peoples reluctance to use something that looks odd, but because it's chip it is much more secure.
-
Monday 25th February 2013 11:44 GMT Graham Marsden
@sugarbear Re: So...
"The worst that could happen is that the trader will know your PIN number. "
Yes and that's a prima facie excuse for the Card Company to deny liability for any fraud on the card.
And how difficult would it be to create a gizmo that, when you put the card in the slot, also reads the mag stripe?
And this doesn't even get near PayPal being so willing to reverse a transation and take money out of a Trader's account based on the say-so of a customer and *then* maybe start looking at whether the complaint was actually valid...
-
-
-
Friday 22nd February 2013 14:54 GMT dkjd
"rival service iZettle and the much-hyped Square it uses only the magnetic stripe" I think this is not correct. IZettle used chip-and-signature, and this means that VISA didn't approve it because "it has to support mag-stripe too". Nothing to do with mastercard supporting IZettle ofc.
As far as I know they now have started a chip-and-pin solution, but they have never done mag-stripe
-
Friday 22nd February 2013 20:05 GMT Anonymous Coward
US Banking on the Past
I do miss chip 'n' pin. Here in the States they have swipe 'n' pin, and for transactions under about $10 they'll just swipe and offer you a receipt - no signatures or PINs.
I still keep my UK account open, and get my new debit card sent to me here. My American family and friends look in awe at this fabulous card with a golden chip and even contactless payment, ooh! It just amazes me that America is so far behind on so many things, especially when it comes to banking.
As for PayPal, I closed my account, because even though my UK bank lets me use my US address as my main residence, PayPal only lets you enter a UK address, so you can't link your account.
-
-
Monday 25th February 2013 08:35 GMT Henry Blackman
iZettle supports Chip and Signature - so Visa, quite rightly doesn't support it.
No one supports NFC, because it's not worth it. Not all cards have it, so why reject cards which haven't been replaced yet, or the bank isn't bothering yet. Maximum transaction value is £20 usually, so that eliminates that. All in all Chip and Pin is the best solution!