MWR research confirms risk of NFC enabled card theft
TweetFollow Us on Twitter

MWR research confirms risk of NFC enabled card theft

With contactless payments increasing in popularity, MWR InfoSecurity (www.mwrinfosecurity.com) has today warned consumers to be aware of the dangers from contactless cards. It also issued a reminder to retailers and banks that not all fraudulent card theft is the fault of the card owner and more needs to be done to thwart scammers.
 
MWR has developed an application that uses NFC (near field communication) to read the information stored in the contactless chip embedded in credit and debit cards. Google Play currently has a number of similar apps available via its store that claim to do the same thing, plus the source code isn’t too difficult to find.

Explaining the process MWR senior research consultant, Nick Walker explained: “Brushing past someone, the app sends a signal to the chip in the card to query the data stored. Depending on the card type will determine just what information is returned but classically the long card number and expiry date are easily read, with the card name occasionally retrieved too. In addition, the data usually includes metadata about the cards correct usage scenarios, such as whether the card is valid for ATM cash withdrawals, or how many pin attempts are allowed before an ATM should swallow the card.

“The piece that is typically missing is the CVV number [card verification value code, also referred to as CSC – card security code], however some retailers will still allow online payment transactions without this number which was introduced to prevent this type of ‘card not present’ fraud.”

Speaking about the limitations he said: “Due to limitations in the NFC technology in use, you have to be in fairly close proximity (4-5 centimeters) to be able to extract the data, but far too often I see people place a card in a breast or back pocket having made a transaction and that leaves them open to attacks like this. The problem, I think, is that consumers just don’t know that this type of app is readily available so need to be warned that cards stored in pockets present an inviting target to modern day criminals. To mitigate this kind of attack, cards can be stored in an RFID protected wallet – which contains a metal mesh which disrupts the signal and makes it harder for a criminal to steal the details.”

Speaking about the part retailer’s play in processing payments, Nick added: “Our research identified a number of online retailers where payments could be made without the CVV number, so enabling this verification would instantly prevent the scammer using card details obtained by such an app to make purchases. However, this wouldn’t stop someone who had stolen the card details and perhaps visually observed the CVV number during a legitimate transaction.

“As part of the research, a purchase was made from an online retailer during which there were a number of opportunities for the fraudulent transaction to be spotted, that weren’t. For example, the name of the card holder was incorrectly entered plus the billing address did not match – however neither was caught at the point the payment was taken. Even after the sale had been made, it wasn’t flagged as the order was processed and a day later the goods were delivered to my door. Retailers have a part to play to thwart ‘card not present’ crime and flags should be raised when things are amiss and transactions delayed while further checks are carried out.

“We all have a responsibility to prevent fraudulent transactions – the cardholder by making sure that they keep their details and payment cards secure; the retailer in having stringent processes in place to identify and halt suspicious activity and the acquirer [the merchant bank who processes the payment] to provide information of, or better still actual, fraud screening tools that will help guard against potential fraudulent transactions.”

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Latest Forum Discussions

See All

Six fantastic ways to spend National Vid...
As if anyone needed an excuse to play games today, I am about to give you one: it is National Video Games Day. A day for us to play games, like we no doubt do every day. Let’s not look a gift horse in the mouth. Instead, feast your eyes on this... | Read more »
Old School RuneScape players turn out in...
The sheer leap in technological advancements in our lifetime has been mind-blowing. We went from Commodore 64s to VR glasses in what feels like a heartbeat, but more importantly, the internet. It can be a dark mess, but it also brought hundreds of... | Read more »
Today's Best Mobile Game Discounts...
Every day, we pick out a curated list of the best mobile discounts on the App Store and post them here. This list won't be comprehensive, but it every game on it is recommended. Feel free to check out the coverage we did on them in the links below... | Read more »
Nintendo and The Pokémon Company's...
Unless you have been living under a rock, you know that Nintendo has been locked in an epic battle with Pocketpair, creator of the obvious Pokémon rip-off Palworld. Nintendo often resorts to legal retaliation at the drop of a hat, but it seems this... | Read more »
Apple exclusive mobile games don’t make...
If you are a gamer on phones, no doubt you have been as distressed as I am on one huge sticking point: exclusivity. For years, Xbox and PlayStation have done battle, and before this was the Sega Genesis and the Nintendo NES. On console, it makes... | Read more »
Regionally exclusive events make no sens...
Last week, over on our sister site AppSpy, I babbled excitedly about the Pokémon GO Safari Days event. You can get nine Eevees with an explorer hat per day. Or, can you? Specifically, you, reader. Do you have the time or funds to possibly fly for... | Read more »
As Jon Bellamy defends his choice to can...
Back in March, Jagex announced the appointment of a new CEO, Jon Bellamy. Mr Bellamy then decided to almost immediately paint a huge target on his back by cancelling the Runescapes Pride event. This led to widespread condemnation about his perceived... | Read more »
Marvel Contest of Champions adds two mor...
When I saw the latest two Marvel Contest of Champions characters, I scoffed. Mr Knight and Silver Samurai, thought I, they are running out of good choices. Then I realised no, I was being far too cynical. This is one of the things that games do best... | Read more »
Grass is green, and water is wet: Pokémo...
It must be a day that ends in Y, because Pokémon Trading Card Game Pocket has kicked off its Zoroark Drop Event. Here you can get a promo version of another card, and look forward to the next Wonder Pick Event and the next Mass Outbreak that will be... | Read more »
Enter the Gungeon review
It took me a minute to get around to reviewing this game for a couple of very good reasons. The first is that Enter the Gungeon's style of roguelike bullet-hell action is teetering on the edge of being straight-up malicious, which made getting... | Read more »

Price Scanner via MacPrices.net

Take $150 off every Apple 11-inch M3 iPad Air
Amazon is offering a $150 discount on 11-inch M3 WiFi iPad Airs right now. Shipping is free: – 11″ 128GB M3 WiFi iPad Air: $449, $150 off – 11″ 256GB M3 WiFi iPad Air: $549, $150 off – 11″ 512GB M3... Read more
Apple iPad minis back on sale for $100 off MS...
Amazon is offering $100 discounts (up to 20% off) on Apple’s newest 2024 WiFi iPad minis, each with free shipping. These are the lowest prices available for new minis among the Apple retailers we... Read more
Apple’s 16-inch M4 Max MacBook Pros are on sa...
Amazon has 16-inch M4 Max MacBook Pros (Silver and Black colors) on sale for up to $410 off Apple’s MSRP right now. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party... Read more
Red Pocket Mobile is offering a $150 rebate o...
Red Pocket Mobile has new Apple iPhone 17’s on sale for $150 off MSRP when you switch and open up a new line of service. Red Pocket Mobile is a nationwide MVNO using all the major wireless carrier... Read more
Switch to Verizon, and get any iPhone 16 for...
With yesterday’s introduction of the new iPhone 17 models, Verizon responded by running “on us” promos across much of the iPhone 16 lineup: iPhone 16 and 16 Plus show as $0/mo for 36 months with bill... Read more
Here is a summary of the new features in Appl...
Apple’s September 2025 event introduced major updates across its most popular product lines, focusing on health, performance, and design breakthroughs. The AirPods Pro 3 now feature best-in-class... Read more
Apple’s Smartphone Lineup Could Use A Touch o...
COMMENTARY – Whatever happened to the old adage, “less is more”? Apple’s smartphone lineup. — which is due for its annual refresh either this month or next (possibly at an Apple Event on September 9... Read more
Take $50 off every 11th-generation A16 WiFi i...
Amazon has Apple’s 11th-generation A16 WiFi iPads in stock on sale for $50 off MSRP right now. Shipping is free: – 11″ 11th-generation 128GB WiFi iPads: $299 $50 off MSRP – 11″ 11th-generation 256GB... Read more
Sunday Sale: 14-inch M4 MacBook Pros for up t...
Don’t pay full price! Amazon has Apple’s 14-inch M4 MacBook Pros (Silver and Black colors) on sale for up to $220 off MSRP right now. Shipping is free. Be sure to select Amazon as the seller, rather... Read more
Mac mini with M4 Pro CPU back on sale for $12...
B&H Photo has Apple’s Mac mini with the M4 Pro CPU back on sale for $1259, $140 off MSRP. B&H offers free 1-2 day shipping to most US addresses: – Mac mini M4 Pro CPU (24GB/512GB): $1259, $... Read more

Jobs Board

All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.