198s Chip and pin bank card fraud is easier than the banks admit images and subtitles

so it's possible to build a simple bit of electronics. This is something that we builtto prove the concept but it's possible for criminals to make much smaller ones. And infact, criminals have been making much smaller versions of this. And what this device doesis you put the card in to the device.You can put this up your sleeve if you want and then it will trick the terminal into thinkingthat the pen is correct by telling the terminal that the PIN is correct, but telling the cardthat there is a signature transaction is going through. And therefore, the card will neversee any PIN, let alone the wrong PIN or the correct PIN.If your credit or debit card details are used without your consent you should not have topay for the losses. Your card provider can't refuse to reimburse you unless they have evidencethat you acted fraudulently, or with gross negligence. The biggest problem with chipand pin is that the banks are dumping the liability for fraud onto trust in customers.If a customer disputes a transaction the banks look at the logs and if the logs say thatthe transaction wasn't authorized by a PIN, they just reverse it back to the merchant.But if the logs say that the transaction was authenticated by means of a PIN, then they'llsay that the customer was negligent, or must have been mistaken, or completely to a lie.So, what we have found is it's possible to trick a chip and pin terminal into accepta transaction even when the wrong pin has been entered. You can type in any pin youwant, 00000, but the terminal will say that the PIN has been verified correctly and that'sthe receipt that the bank will use to try to pin the blame on the customer.We've produced a number of papers which have shown flaws in the chip and pin system. Andthe banks have typically tried to pretend that there wasn't a problem or ignore to orsimply stop it becoming a public issue. In one case where we showed how people were tamperingwith chip and pin terminals the banks refused to help the police prosecute the two peoplewho were responsible for the fraud.And more recently, when we showed or how it was possible for bad guys to manipulate signalsbetween cars and terminals, so that the wrong pins could be used. role in fixing the problem,the banks simply demanded that the student thesis that described all this should be takendown from the web. Chip and PIN is new payment method.But car providers should recognize that the vast majority of their customers are law-abiding,and don't deliberately put their card details at risk. We'd like the payment car sectorto ignore this and process payments immediately. Anything short of this isn't allowed underthe regulations and sends out a bad message out to [xx] For all our free advice on whatto look our for and how to deal with card fraud, click on the link below.

Chip and pin bank card fraud is easier than the banks admit

Click here to get the full story and how you could be affected whi.ch/chipandpinvideo Which? has seen evidence that criminals can use a stolen debit or credit card to pay for items without the cardholder divulging the correct Pin, by using technology that hoodwinks the card reader into believing a legitimate code has been entered. This leaves the cardholder liable for the loss as banks will often not refund the money if the PIN has been entered.
card, pin, chip, card fraud, bank, chip and pin, bank fraud, fraud,
< ?xml version="1.0" encoding="utf-8" ?><>

< start="9.78" dur="5.81">so it's possible to build a simple bit of electronics. This is something that we built>

< start="15.59" dur="6.21">to prove the concept but it's possible for criminals to make much smaller ones. And in>

< start="21.8" dur="5.689">fact, criminals have been making much smaller versions of this. And what this device does>

< start="27.489" dur="3.91">is you put the card in to the device.>

< start="31.399" dur="7">You can put this up your sleeve if you want and then it will trick the terminal into thinking>

< start="38.76" dur="4.489">that the pen is correct by telling the terminal that the PIN is correct, but telling the card>

< start="43.249" dur="4.4">that there is a signature transaction is going through. And therefore, the card will never>

< start="47.649" dur="4.671">see any PIN, let alone the wrong PIN or the correct PIN.>

< start="52.32" dur="4.62">If your credit or debit card details are used without your consent you should not have to>

< start="56.94" dur="5.469">pay for the losses. Your card provider can't refuse to reimburse you unless they have evidence>

< start="62.409" dur="5.101">that you acted fraudulently, or with gross negligence. The biggest problem with chip>

< start="67.51" dur="5.37">and pin is that the banks are dumping the liability for fraud onto trust in customers.>

< start="72.88" dur="4.79">If a customer disputes a transaction the banks look at the logs and if the logs say that>

< start="77.67" dur="6.199">the transaction wasn't authorized by a PIN, they just reverse it back to the merchant.>

< start="83.869" dur="4.53">But if the logs say that the transaction was authenticated by means of a PIN, then they'll>

< start="88.399" dur="5.22">say that the customer was negligent, or must have been mistaken, or completely to a lie.>

< start="93.619" dur="5.67">So, what we have found is it's possible to trick a chip and pin terminal into accept>

< start="99.289" dur="4.141">a transaction even when the wrong pin has been entered. You can type in any pin you>

< start="103.43" dur="6.5">want, 00000, but the terminal will say that the PIN has been verified correctly and that's>

< start="109.93" dur="4.42">the receipt that the bank will use to try to pin the blame on the customer.>

< start="114.35" dur="6.35">We've produced a number of papers which have shown flaws in the chip and pin system. And>

< start="120.7" dur="7">the banks have typically tried to pretend that there wasn't a problem or ignore to or>

< start="127.999" dur="5.381">simply stop it becoming a public issue. In one case where we showed how people were tampering>

< start="133.38" dur="4.55">with chip and pin terminals the banks refused to help the police prosecute the two people>

< start="137.93" dur="2.57">who were responsible for the fraud.>

< start="140.5" dur="5.93">And more recently, when we showed or how it was possible for bad guys to manipulate signals>

< start="146.43" dur="6.199">between cars and terminals, so that the wrong pins could be used. role in fixing the problem,>

< start="152.629" dur="4.701">the banks simply demanded that the student thesis that described all this should be taken>

< start="157.33" dur="4.989">down from the web. Chip and PIN is new payment method.>

< start="162.319" dur="4.821">But car providers should recognize that the vast majority of their customers are law-abiding,>

< start="167.14" dur="4.67">and don't deliberately put their card details at risk. We'd like the payment car sector>

< start="171.81" dur="5.239">to ignore this and process payments immediately. Anything short of this isn't allowed under>

< start="177.049" dur="5.821">the regulations and sends out a bad message out to [xx] For all our free advice on what>

< start="182.87" dur="3.5">to look our for and how to deal with card fraud, click on the link below.>