Quote:
Originally Posted by Matt D
Well, you'd think so, but according to C4's investigation they were able to purchase items from Amazon using different billing and delivery addresses to those of the cardholder.
|
In which case, the critical weakness is with Amazon, not with the Visa card. They should be verifying that the purchaser is in possession of the card by collecting the CVV at point of sale, but they're not (presumably because they think it interferes with their one-click impulse buying engine). They should also be cross-checking addresses but again, they want to operate a gift delivery service so their product offering is taking precedence over card security measures.