Re: [MBZ] Credit Card Info Nicked

[dan penoff.com via Mercedes]

Good to hear. Another reason why it’s always better to use a credit card rather 
than debit. Better protections.

I’ve got text alerts for all my cards for transactions above $100. Yeah, it can 
get noisy at times, but at least I know when something is up…

-D

> On Dec 14, 2022, at 3:42 PM, Bob Rentfro via Mercedes  
> wrote:
> 
> I received a text reading it was from Chase and my card had a sketchy $804.35 
> charge on it and I should type YES if it’s legit and type NO if it’s not. 
> Since I wasn’t certain that the text itself was legit, I called Chase. 
> Long story short, it was stolen and there were two attempted usages: one to 
> buy a refrigerator in Dallas and the other was $798.64 of textbooks at 
> Central Piedmont Community College. 
> I also received an email receipt from the school containing the student’s 
> name, transaction number, all kinds of information. Sweet. 
> I rang up the school and I’m waiting to hear back from someone who dwells in 
> the correct level of power to see if this is actually a student we can go 
> after. 
> It was strange because yesterday I left the house without my debit card for 
> some odd reason but I wasn’t aware of it until I went to pay for my new PXG 
> putter. I had to bust out the “travel use only” card that I haven’t used 
> since May…and whammo…Nicky McNickerson. 
> Chase is making it right. 
> 
> AZBob
> 
> Sent from my iPhone
> ___
> http://www.okiebenz.com
> 
> To search list archives http://www.okiebenz.com/archive/
> 
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
> 

___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[Craig via Mercedes]

On Wed, 14 Dec 2022 13:42:37 -0700 Bob Rentfro via Mercedes
 wrote:

> It was strange because yesterday I left the house without my debit card
> for some odd reason but I wasn’t aware of it until I went to pay for my
> new PXG putter. I had to bust out the “travel use only” card that I
> haven’t used since May…and whammo…Nicky McNickerson. Chase is making it
> right. 

So the people at the golf store were the ones who took your card number?


Craig

___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[Andrew Strasfogel via Mercedes]

I received a weird Paypal email concerning a $500 request for money.  It
seemed legit until I engaged with the 800 number rep who sounded overseas.
I hung up and then called Paypal (tough to find their ph. number!) and
learned this is a scam to get you to install an app on your desktop or
phone, for nefarious purposes.  There really was a $500 req

On Wed, Dec 14, 2022 at 4:49 PM Craig via Mercedes 
wrote:

> On Wed, 14 Dec 2022 13:42:37 -0700 Bob Rentfro via Mercedes
>  wrote:
>
> > It was strange because yesterday I left the house without my debit card
> > for some odd reason but I wasn’t aware of it until I went to pay for my
> > new PXG putter. I had to bust out the “travel use only” card that I
> > haven’t used since May…and whammo…Nicky McNickerson. Chase is making it
> > right.
>
> So the people at the golf store were the ones who took your card number?
>
>
> Craig
>
> ___
> http://www.okiebenz.com
>
> To search list archives http://www.okiebenz.com/archive/
>
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
>
>
___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[Andrew Strasfogel via Mercedes]

Request on the dummy site, but on the real Paypal site I could easily
cancel the request.  On the realistic but fraudulent site there was no such
option and if I didn't do anything the money would have automatically been
deducted from my bank account.

On Wed, Dec 14, 2022 at 9:15 PM Andrew Strasfogel 
wrote:

> I received a weird Paypal email concerning a $500 request for money.  It
> seemed legit until I engaged with the 800 number rep who sounded overseas.
> I hung up and then called Paypal (tough to find their ph. number!) and
> learned this is a scam to get you to install an app on your desktop or
> phone, for nefarious purposes.  There really was a $500 req
>
> On Wed, Dec 14, 2022 at 4:49 PM Craig via Mercedes 
> wrote:
>
>> On Wed, 14 Dec 2022 13:42:37 -0700 Bob Rentfro via Mercedes
>>  wrote:
>>
>> > It was strange because yesterday I left the house without my debit card
>> > for some odd reason but I wasn’t aware of it until I went to pay for my
>> > new PXG putter. I had to bust out the “travel use only” card that I
>> > haven’t used since May…and whammo…Nicky McNickerson. Chase is making it
>> > right.
>>
>> So the people at the golf store were the ones who took your card number?
>>
>>
>> Craig
>>
>> ___
>> http://www.okiebenz.com
>>
>> To search list archives http://www.okiebenz.com/archive/
>>
>> To Unsubscribe or change delivery options go to:
>> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
>>
>>
___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[mitch--- via Mercedes]

A couple of years ago, my niece called me up and asked me to pay the $50 
monthly rent on her storage unit, because it was 150 miles away from her 
and she didn't have a CC.


I whipped out my $500 credit line card that I keep for potentially 
sketchy uses, called the storage facility, and gave them all the card 
info over the phone.
7:30pm I get the fraud text from Chase, somebody tried to pay a $200+ 
Verizon bill with it. Made me want to drive up to Houghton Lake and 
dismember the guy I talked to on the phone 6 hours earlier, even though 
it didn't cost me anything.
Chase mailed me a new card. I hadn't used that thing in months, so it 
would be a massive coincidence if that happened without somebody at the 
storage facility stealing it.


Now I know to call and ask for a one time disposable card number for 
purchases like that.


___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[Bob Rentfro via Mercedes]

That's what is disconcerting about this event. I had not used the card in 
several weeks before busting it out at the PXG shop. 
The correct human from Central Piedmont Community College is supposed to call 
me today to see if I can go after the student. I will likely call the PXG shop 
and let them know what has happened. 
I appreciate Chase’s on the ball-ness in this whole event. 

AZBob

Sent from my iPhone

> On Dec 15, 2022, at 10:46 PM, mitch--- via Mercedes  
> wrote:
> 
> A couple of years ago, my niece called me up and asked me to pay the $50 
> monthly rent on her storage unit, because it was 150 miles away from her and 
> she didn't have a CC.
> 
> I whipped out my $500 credit line card that I keep for potentially sketchy 
> uses, called the storage facility, and gave them all the card info over the 
> phone.
> 7:30pm I get the fraud text from Chase, somebody tried to pay a $200+ Verizon 
> bill with it. Made me want to drive up to Houghton Lake and dismember the guy 
> I talked to on the phone 6 hours earlier, even though it didn't cost me 
> anything.
> Chase mailed me a new card. I hadn't used that thing in months, so it would 
> be a massive coincidence if that happened without somebody at the storage 
> facility stealing it.
> 
> Now I know to call and ask for a one time disposable card number for 
> purchases like that.
> 
> ___
> http://www.okiebenz.com
> 
> To search list archives http://www.okiebenz.com/archive/
> 
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
> 

___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[dan penoff.com via Mercedes]

It’s quite possible that the PXG shop’s account or POS system is compromised 
rather than an employee there stealing the information. That also has a lot to 
do with the speed of the misuse - a valid card number has to be sold and used 
quickly, before the card issuer can find out it’s compromised and kill the card.

Mrs. Dan had a similar situation with her card being compromised at a liquor 
store. It was hit three times within an hour of it being used. All three hits 
were in south Florida and for really stupid stuff, like a bowling alley.

-D

> On Dec 16, 2022, at 7:47 AM, Bob Rentfro via Mercedes  
> wrote:
> 
> That's what is disconcerting about this event. I had not used the card in 
> several weeks before busting it out at the PXG shop. 
> The correct human from Central Piedmont Community College is supposed to call 
> me today to see if I can go after the student. I will likely call the PXG 
> shop and let them know what has happened. 
> I appreciate Chase’s on the ball-ness in this whole event. 
> 
> AZBob
> 
> Sent from my iPhone
> 
>> On Dec 15, 2022, at 10:46 PM, mitch--- via Mercedes  
>> wrote:
>> 
>> A couple of years ago, my niece called me up and asked me to pay the $50 
>> monthly rent on her storage unit, because it was 150 miles away from her and 
>> she didn't have a CC.
>> 
>> I whipped out my $500 credit line card that I keep for potentially sketchy 
>> uses, called the storage facility, and gave them all the card info over the 
>> phone.
>> 7:30pm I get the fraud text from Chase, somebody tried to pay a $200+ 
>> Verizon bill with it. Made me want to drive up to Houghton Lake and 
>> dismember the guy I talked to on the phone 6 hours earlier, even though it 
>> didn't cost me anything.
>> Chase mailed me a new card. I hadn't used that thing in months, so it would 
>> be a massive coincidence if that happened without somebody at the storage 
>> facility stealing it.
>> 
>> Now I know to call and ask for a one time disposable card number for 
>> purchases like that.
>> 
>> ___
>> http://www.okiebenz.com
>> 
>> To search list archives http://www.okiebenz.com/archive/
>> 
>> To Unsubscribe or change delivery options go to:
>> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
>> 
> 
> ___
> http://www.okiebenz.com
> 
> To search list archives http://www.okiebenz.com/archive/
> 
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
> 

___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[Andrew Strasfogel via Mercedes]

My gf had her Visa card hacked several times when in Naples. It seems FL is
a hotbed for CC fraudsters.

On Fri, Dec 16, 2022 at 7:59 AM dan penoff.com via Mercedes <
mercedes@okiebenz.com> wrote:

> It’s quite possible that the PXG shop’s account or POS system is
> compromised rather than an employee there stealing the information. That
> also has a lot to do with the speed of the misuse - a valid card number has
> to be sold and used quickly, before the card issuer can find out it’s
> compromised and kill the card.
>
> Mrs. Dan had a similar situation with her card being compromised at a
> liquor store. It was hit three times within an hour of it being used. All
> three hits were in south Florida and for really stupid stuff, like a
> bowling alley.
>
> -D
>
> > On Dec 16, 2022, at 7:47 AM, Bob Rentfro via Mercedes <
> mercedes@okiebenz.com> wrote:
> >
> > That's what is disconcerting about this event. I had not used the card
> in several weeks before busting it out at the PXG shop.
> > The correct human from Central Piedmont Community College is supposed to
> call me today to see if I can go after the student. I will likely call the
> PXG shop and let them know what has happened.
> > I appreciate Chase’s on the ball-ness in this whole event.
> >
> > AZBob
> >
> > Sent from my iPhone
> >
> >> On Dec 15, 2022, at 10:46 PM, mitch--- via Mercedes <
> mercedes@okiebenz.com> wrote:
> >>
> >> A couple of years ago, my niece called me up and asked me to pay the
> $50 monthly rent on her storage unit, because it was 150 miles away from
> her and she didn't have a CC.
> >>
> >> I whipped out my $500 credit line card that I keep for potentially
> sketchy uses, called the storage facility, and gave them all the card info
> over the phone.
> >> 7:30pm I get the fraud text from Chase, somebody tried to pay a $200+
> Verizon bill with it. Made me want to drive up to Houghton Lake and
> dismember the guy I talked to on the phone 6 hours earlier, even though it
> didn't cost me anything.
> >> Chase mailed me a new card. I hadn't used that thing in months, so it
> would be a massive coincidence if that happened without somebody at the
> storage facility stealing it.
> >>
> >> Now I know to call and ask for a one time disposable card number for
> purchases like that.
> >>
> >> ___
> >> http://www.okiebenz.com
> >>
> >> To search list archives http://www.okiebenz.com/archive/
> >>
> >> To Unsubscribe or change delivery options go to:
> >> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
> >>
> >
> > ___
> > http://www.okiebenz.com
> >
> > To search list archives http://www.okiebenz.com/archive/
> >
> > To Unsubscribe or change delivery options go to:
> > http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
> >
>
> ___
> http://www.okiebenz.com
>
> To search list archives http://www.okiebenz.com/archive/
>
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
>
>
___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[dan penoff.com via Mercedes]

I wouldn’t say it’s any worse that other states. I’ve only had it happen once 
in over 20 years here.

I suspect that Naples is a far better place to be grabbing credit card numbers 
considering the demographics. I’m sure that has a lot to do with it.

-D

On Dec 16, 2022, at 12:56 PM, Andrew Strasfogel 
mailto:astrasfo...@gmail.com>> wrote:

My gf had her Visa card hacked several times when in Naples. It seems FL is a 
hotbed for CC fraudsters.

On Fri, Dec 16, 2022 at 7:59 AM dan penoff.com via Mercedes 
mailto:mercedes@okiebenz.com>> wrote:
It’s quite possible that the PXG shop’s account or POS system is compromised 
rather than an employee there stealing the information. That also has a lot to 
do with the speed of the misuse - a valid card number has to be sold and used 
quickly, before the card issuer can find out it’s compromised and kill the card.

Mrs. Dan had a similar situation with her card being compromised at a liquor 
store. It was hit three times within an hour of it being used. All three hits 
were in south Florida and for really stupid stuff, like a bowling alley.

-D

> On Dec 16, 2022, at 7:47 AM, Bob Rentfro via Mercedes 
> mailto:mercedes@okiebenz.com>> wrote:
>
> That's what is disconcerting about this event. I had not used the card in 
> several weeks before busting it out at the PXG shop.
> The correct human from Central Piedmont Community College is supposed to call 
> me today to see if I can go after the student. I will likely call the PXG 
> shop and let them know what has happened.
> I appreciate Chase’s on the ball-ness in this whole event.
>
> AZBob
>
> Sent from my iPhone
>
>> On Dec 15, 2022, at 10:46 PM, mitch--- via Mercedes 
>> mailto:mercedes@okiebenz.com>> wrote:
>>
>> A couple of years ago, my niece called me up and asked me to pay the $50 
>> monthly rent on her storage unit, because it was 150 miles away from her and 
>> she didn't have a CC.
>>
>> I whipped out my $500 credit line card that I keep for potentially sketchy 
>> uses, called the storage facility, and gave them all the card info over the 
>> phone.
>> 7:30pm I get the fraud text from Chase, somebody tried to pay a $200+ 
>> Verizon bill with it. Made me want to drive up to Houghton Lake and 
>> dismember the guy I talked to on the phone 6 hours earlier, even though it 
>> didn't cost me anything.
>> Chase mailed me a new card. I hadn't used that thing in months, so it would 
>> be a massive coincidence if that happened without somebody at the storage 
>> facility stealing it.
>>
>> Now I know to call and ask for a one time disposable card number for 
>> purchases like that.
>>
>> ___
>> http://www.okiebenz.com
>>
>> To search list archives http://www.okiebenz.com/archive/
>>
>> To Unsubscribe or change delivery options go to:
>> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
>>
>
> ___
> http://www.okiebenz.com
>
> To search list archives http://www.okiebenz.com/archive/
>
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
>

___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com


___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[Allan Streib via Mercedes]

If a retailer is still using "swipe" technology (mostly gone now except for gas 
pumps) then it's easy for a compromised system to steal the card info. For 
"chip" transactions it's supposed to be difficult/impossible because the clear 
text card info is never transmitted.


On Fri, Dec 16, 2022, at 07:58, dan penoff.com via Mercedes wrote:
> It’s quite possible that the PXG shop’s account or POS system is 
> compromised rather than an employee there stealing the information. 
> That also has a lot to do with the speed of the misuse - a valid card 
> number has to be sold and used quickly, before the card issuer can find 
> out it’s compromised and kill the card.
>
> Mrs. Dan had a similar situation with her card being compromised at a 
> liquor store. It was hit three times within an hour of it being used. 
> All three hits were in south Florida and for really stupid stuff, like 
> a bowling alley.
>
> -D
>

___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[dan penoff.com via Mercedes]

Unless the retailer has grossly out of date equipment (and is wy out of 
compliance), the card information is never sent in the clear. It’s encrypted at 
the time it’s read and transmitted that way. That’s part of PCIE P2PE standard 
version 3.0 Domain 1 (2019). Since you have to work with a card processor, it’s 
highly unlikely this could be the case, as I can’t imagine there are any card 
processors out there who aren’t compliant with the latest standard.

-D

> On Dec 16, 2022, at 3:35 PM, Allan Streib via Mercedes 
>  wrote:
> 
> If a retailer is still using "swipe" technology (mostly gone now except for 
> gas pumps) then it's easy for a compromised system to steal the card info. 
> For "chip" transactions it's supposed to be difficult/impossible because the 
> clear text card info is never transmitted.
> 
> 
> On Fri, Dec 16, 2022, at 07:58, dan penoff.com via Mercedes wrote:
>> It’s quite possible that the PXG shop’s account or POS system is 
>> compromised rather than an employee there stealing the information. 
>> That also has a lot to do with the speed of the misuse - a valid card 
>> number has to be sold and used quickly, before the card issuer can find 
>> out it’s compromised and kill the card.
>> 
>> Mrs. Dan had a similar situation with her card being compromised at a 
>> liquor store. It was hit three times within an hour of it being used. 
>> All three hits were in south Florida and for really stupid stuff, like 
>> a bowling alley.
>> 
>> -D
>> 
> 
> ___
> http://www.okiebenz.com
> 
> To search list archives http://www.okiebenz.com/archive/
> 
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
> 

___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[dan penoff.com via Mercedes]

And just to clarify, if someone has put a card “skimmer” on the reader, that’s 
a totally different situation. You only need a card reader to get the data off 
the magnetic stripe. If it’s a retail POS terminal that data is encrypted when 
the card is swiped.

-D

> On Dec 16, 2022, at 3:42 PM, dan penoff.com via Mercedes 
>  wrote:
> 
> Unless the retailer has grossly out of date equipment (and is wy out of 
> compliance), the card information is never sent in the clear. It’s encrypted 
> at the time it’s read and transmitted that way. That’s part of PCIE P2PE 
> standard version 3.0 Domain 1 (2019). Since you have to work with a card 
> processor, it’s highly unlikely this could be the case, as I can’t imagine 
> there are any card processors out there who aren’t compliant with the latest 
> standard.
> 
> -D
> 
>> On Dec 16, 2022, at 3:35 PM, Allan Streib via Mercedes 
>>  wrote:
>> 
>> If a retailer is still using "swipe" technology (mostly gone now except for 
>> gas pumps) then it's easy for a compromised system to steal the card info. 
>> For "chip" transactions it's supposed to be difficult/impossible because the 
>> clear text card info is never transmitted.
>> 
>> 
>> On Fri, Dec 16, 2022, at 07:58, dan penoff.com via Mercedes wrote:
>>> It’s quite possible that the PXG shop’s account or POS system is 
>>> compromised rather than an employee there stealing the information. 
>>> That also has a lot to do with the speed of the misuse - a valid card 
>>> number has to be sold and used quickly, before the card issuer can find 
>>> out it’s compromised and kill the card.
>>> 
>>> Mrs. Dan had a similar situation with her card being compromised at a 
>>> liquor store. It was hit three times within an hour of it being used. 
>>> All three hits were in south Florida and for really stupid stuff, like 
>>> a bowling alley.
>>> 
>>> -D
>>> 
>> 
>> ___
>> http://www.okiebenz.com
>> 
>> To search list archives http://www.okiebenz.com/archive/
>> 
>> To Unsubscribe or change delivery options go to:
>> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
>> 
> 
> ___
> http://www.okiebenz.com
> 
> To search list archives http://www.okiebenz.com/archive/
> 
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
> 

___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[Allan Streib via Mercedes]

Yeah I meant that the card info is in clear text on the mag stripe. Anything 
that can read that (skimmer, or compromised POS system) can steal card numbers. 
I've got a USB mag stripe reader somewhere and I've tried it with my own cards 
on my personal computer.


On Fri, Dec 16, 2022, at 15:47, dan penoff.com via Mercedes wrote:
> And just to clarify, if someone has put a card “skimmer” on the reader, 
> that’s a totally different situation. You only need a card reader to 
> get the data off the magnetic stripe. If it’s a retail POS terminal 
> that data is encrypted when the card is swiped.
>
> -D
>
>> On Dec 16, 2022, at 3:42 PM, dan penoff.com via Mercedes 
>>  wrote:
>> 
>> Unless the retailer has grossly out of date equipment (and is wy out of 
>> compliance), the card information is never sent in the clear. It’s encrypted 
>> at the time it’s read and transmitted that way. That’s part of PCIE P2PE 
>> standard version 3.0 Domain 1 (2019). Since you have to work with a card 
>> processor, it’s highly unlikely this could be the case, as I can’t imagine 
>> there are any card processors out there who aren’t compliant with the latest 
>> standard.
>> 
>> -D
>> 
>>> On Dec 16, 2022, at 3:35 PM, Allan Streib via Mercedes 
>>>  wrote:
>>> 
>>> If a retailer is still using "swipe" technology (mostly gone now except for 
>>> gas pumps) then it's easy for a compromised system to steal the card info. 
>>> For "chip" transactions it's supposed to be difficult/impossible because 
>>> the clear text card info is never transmitted.
>>> 
>>> 
>>> On Fri, Dec 16, 2022, at 07:58, dan penoff.com via Mercedes wrote:
 It’s quite possible that the PXG shop’s account or POS system is 
 compromised rather than an employee there stealing the information. 
 That also has a lot to do with the speed of the misuse - a valid card 
 number has to be sold and used quickly, before the card issuer can find 
 out it’s compromised and kill the card.
 
 Mrs. Dan had a similar situation with her card being compromised at a 
 liquor store. It was hit three times within an hour of it being used. 
 All three hits were in south Florida and for really stupid stuff, like 
 a bowling alley.
 
 -D
 
>>> 
>>> ___
>>> http://www.okiebenz.com
>>> 
>>> To search list archives http://www.okiebenz.com/archive/
>>> 
>>> To Unsubscribe or change delivery options go to:
>>> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
>>> 
>> 
>> ___
>> http://www.okiebenz.com
>> 
>> To search list archives http://www.okiebenz.com/archive/
>> 
>> To Unsubscribe or change delivery options go to:
>> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
>> 
>
> ___
> http://www.okiebenz.com
>
> To search list archives http://www.okiebenz.com/archive/
>
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[dan penoff.com via Mercedes]

Correct. There’s nothing that protects the data on the magnetic stripe.

-D

> On Dec 16, 2022, at 3:57 PM, Allan Streib via Mercedes 
>  wrote:
> 
> Yeah I meant that the card info is in clear text on the mag stripe. Anything 
> that can read that (skimmer, or compromised POS system) can steal card 
> numbers. I've got a USB mag stripe reader somewhere and I've tried it with my 
> own cards on my personal computer.
> 
> 
> On Fri, Dec 16, 2022, at 15:47, dan penoff.com via Mercedes wrote:
>> And just to clarify, if someone has put a card “skimmer” on the reader, 
>> that’s a totally different situation. You only need a card reader to 
>> get the data off the magnetic stripe. If it’s a retail POS terminal 
>> that data is encrypted when the card is swiped.
>> 
>> -D
>> 
>>> On Dec 16, 2022, at 3:42 PM, dan penoff.com via Mercedes 
>>>  wrote:
>>> 
>>> Unless the retailer has grossly out of date equipment (and is wy out of 
>>> compliance), the card information is never sent in the clear. It’s 
>>> encrypted at the time it’s read and transmitted that way. That’s part of 
>>> PCIE P2PE standard version 3.0 Domain 1 (2019). Since you have to work with 
>>> a card processor, it’s highly unlikely this could be the case, as I can’t 
>>> imagine there are any card processors out there who aren’t compliant with 
>>> the latest standard.
>>> 
>>> -D
>>> 
 On Dec 16, 2022, at 3:35 PM, Allan Streib via Mercedes 
  wrote:
 
 If a retailer is still using "swipe" technology (mostly gone now except 
 for gas pumps) then it's easy for a compromised system to steal the card 
 info. For "chip" transactions it's supposed to be difficult/impossible 
 because the clear text card info is never transmitted.
 
 
 On Fri, Dec 16, 2022, at 07:58, dan penoff.com via Mercedes wrote:
> It’s quite possible that the PXG shop’s account or POS system is 
> compromised rather than an employee there stealing the information. 
> That also has a lot to do with the speed of the misuse - a valid card 
> number has to be sold and used quickly, before the card issuer can find 
> out it’s compromised and kill the card.
> 
> Mrs. Dan had a similar situation with her card being compromised at a 
> liquor store. It was hit three times within an hour of it being used. 
> All three hits were in south Florida and for really stupid stuff, like 
> a bowling alley.
> 
> -D
> 
 
 ___
 http://www.okiebenz.com
 
 To search list archives http://www.okiebenz.com/archive/
 
 To Unsubscribe or change delivery options go to:
 http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
 
>>> 
>>> ___
>>> http://www.okiebenz.com
>>> 
>>> To search list archives http://www.okiebenz.com/archive/
>>> 
>>> To Unsubscribe or change delivery options go to:
>>> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
>>> 
>> 
>> ___
>> http://www.okiebenz.com
>> 
>> To search list archives http://www.okiebenz.com/archive/
>> 
>> To Unsubscribe or change delivery options go to:
>> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
> 
> ___
> http://www.okiebenz.com
> 
> To search list archives http://www.okiebenz.com/archive/
> 
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
> 

___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[Jim Cathey via Mercedes]

> 
> If a retailer is still using "swipe" technology (mostly gone now except for 
> gas pumps) then it's easy for a compromised system to steal the card info.

At our Park, 99% of credit card transactions are handled _entirely_ by the PIN 
pad.
This is normal now.  Our bank charges more if we process the credit card 
ourselves,
which we can still do if there's a problem with the pads.  When the pad does 
the work,
we _never_ see the CC information.

The human factor remains the weak link.

-- Jim


___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[Jim Cathey via Mercedes]

> Correct. There’s nothing that protects the data on the magnetic stripe.

Nor the photograph of the number printed on the card.

-- Jim


___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com

Re: [MBZ] Credit Card Info Nicked

[dan penoff.com via Mercedes]

Absolutely. And most retailers need your express consent to manually enter your 
CC number into the POS/PIN pad. That’s actually a PCI requirement as well, but 
I question how often it’s done.

I’ve had cashiers ask me as I’ve got a CC with a bodged up magnetic stripe 
which I really need to get replaced.

-D

> On Dec 16, 2022, at 7:13 PM, Jim Cathey via Mercedes  
> wrote:
> 
> 
>> 
>> 
>> If a retailer is still using "swipe" technology (mostly gone now except for 
>> gas pumps) then it's easy for a compromised system to steal the card info.
> 
> At our Park, 99% of credit card transactions are handled _entirely_ by the 
> PIN pad.
> This is normal now.  Our bank charges more if we process the credit card 
> ourselves,
> which we can still do if there's a problem with the pads.  When the pad does 
> the work,
> we _never_ see the CC information.
> 
> The human factor remains the weak link.
> 
> -- Jim
> 
> 
> ___
> http://www.okiebenz.com
> 
> To search list archives http://www.okiebenz.com/archive/
> 
> To Unsubscribe or change delivery options go to:
> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
> 
___
http://www.okiebenz.com

To search list archives http://www.okiebenz.com/archive/

To Unsubscribe or change delivery options go to:
http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com