Quote:
Originally Posted by Matt D
The issue with this is that the cards transmit the cardholder's name, the card number, and the expiry date... all unencrypted.
If someone obtains that information, they can then use the card details to make purchases online (at sites like Amazon, which don't use the CVV number), without any of the "small transaction restrictions" that are in place when physically using the contactless card in a shop.
EDIT:
The original C4 News story - http://www.channel4.com/news/million...posed-to-fraud
|
Would they not also require your address? Is there not a check to make sure the Invoce address matches?