Past Opinions - CIOInsight
Home arrow Past Opinions arrow Are Contactless Payment Cards Tickets to Wholesale Fraud?
  Past Opinions


Are Contactless Payment Cards Tickets to Wholesale Fraud?
By Jeff Chasney


  Table of Contents:
  1. Are Contactless Payment Cards Tickets to Wholesale Fraud?
  2. ' Are Contactless Payment Cards '

Rate This Article:
Add This Article To:
Are Contactless Payment Cards Tickets to Wholesale Fraud?
( Page 1 of 2 )

Opinion: Contactless systems that let customers wave a keyfob or credit-card over a reader to make a purchase are convenient, but the capacity for fraud, especially from insiders, is mind-boggling, according to Jeff Chasney, CIO of CKE Restaurants.Do you know who has been contacting your "contactless payment card," or those of your customers? You may not.

With today's magnetic-stripe credit cards, you at least know who you have given your card to.

To use your account, thieves must get their hands on your card; or, if they gain access to online records, they have to get not only your credit-card number, but also its expiration date (and more recently, the authorization code on the card back).

However, the new "contactless" payment systems present new opportunities for fraudulent activity that are far less obvious than with mag-stripe cards.

Resource Library:
A thief need not have possession of a victim's contactless card in order to capture all the relevant information. He or she only has to intercept the data during the wireless connection between the card and a point-of-sale system.

The thief doesn't even need to decrypt the contents. It's enough to extract the encrypted data and use that in a transaction.

And to read the encrypted data, one only needs to get in reasonably close proximity to the victim. Contactless radio signals are very short range, but can be picked up from three to six feet. A thief can simply "walk by" the victim.

Proximity or "contactless" cards are used exclusively in physical locations which, not coincidentally, is where the majority of credit-card fraud occurs.

Worse, the majority of fraud is perpetrated by employees; by insiders, whose access to cards and ingenuity in misappropriating data are a deadly combination.

How Safe Are the New Contactless Payment Systems? Click here to read more.

Small mag-stripe readers are easily "palmed," for example, so the employee can simultaneously process a legitimate credit-card payment on a POS system and store the card's data for illicit use later on.

This method is simple and reasonably covert with just a little sleight-of-hand practice.

Credit-card fraud has never been a difficult crime to commit at the point of payment.

So how can the "contactless payment card" be compromised? Not quite as easily as a mag-stripe.

As advocates point out, contactless-card data is protected with 128-bit triple-DES encryption.

7-Eleven's CIO: Contactless Payment Is Here Click here to read more.

But these new technology cards present some new opportunities that didn't exist before.

For example, take a full-service restaurant where the bill is presented to the customer at the table. What if the waiter has a mini "contactless" reader in his pocket?

Such a device could read a card anywhere in reasonably close proximity; it need not even be from someone at the particular table that he is cashing out.

Next Page: Waiter on a mission?



 
 
>>> More Past Opinions Articles          >>> More By Jeff Chasney
 


 
 
FEATURED SPONSORED MESSAGE
 

    Free System Center Trial!

    Download the free System Center trial and see first-hand how it can help your company consolidate IT management tasks and optimize resources.


FEATURED SPONSORED MESSAGE

    Free Trial Download!

    Download SQL Server 2008 for a free trial and see how this global efficiency engine stores, sorts, mines, analyzes, reports, and manages any data -- and saves you time and money.


BIZTECH 3.0
By Brian P. Watson
CIOs and the Consumerization of IT

New advice on how CIOs should bring consumer-focused technologies into the enterprise.
CIO STRATEGY
The Perfect IT Book for the Business?

Parkinson needs a book that explains IT to the business. Got any suggestions?    

Google CIO on IT's Role in Corporate Culture

RECENT NEWS

KNOW IT ALL
By Tony Kontzer
Internet Addiction: A Mental Illness?

A leading psychiatric group doesn't think so. But maybe it should. 


EDITORS' PICKS
 
 
LATEST STORIES

FEEDBACK


Ziff Davis Enterprise RSS Feeds

Sponsored Links
  • Get Free BlackBerry® Enterprise Server Express
  • Cost-Saving, efficient VoIP solutions provided by CIMCO
  • Servers that cut energy costs by 95%? Cool.
  • Save time & money with Microsoft's cloud services.
  • Simplicity is Power. Start simplifying with Citrix.
  • Register for WES 2010 by March 26 and save $200.
  • One number. One voicemail. Sprint Mobile Integration.
  • CDW Healthcare offers the IT solutions you need.
  • FREE Sophos Encryption Tool: Encrypt, compress and share files easily.
  • eWEEK Quick LInks