Is There an App That Will Read the Chip on My Credit Card
TORONTO – A smartphone app, which allows the user to read credit carte du jour information through wallets and purses, is cause for concern amongst consumers that deport credit cards with radio-frequency identification (RFID) applied science, co-ordinate to experts.
The free app, available on the Samsung Milky way S3 through the Google Play store, allows the phone to read the RFID fleck on a credit card, picking up the cardholder'due south proper noun, credit menu number and expiry appointment, according to a CBC investigation.
RFID fleck technology is used in many credit cards, almost commonly used for tap-to-pay systems like MasterCard's PayPass or Visa payWave.
The technology stores information including the carte du jour number, the cardholder's name and the expiry date. It does non include the iii digit security number on the back of the carte – usually used when a larger purchase is being made on the card.
Major credit carte du jour companies have stated that RFID technology is prophylactic, however the engineering science is not encrypted – unlike the scrap on the front of the card that physically plugs in to debit or credit machines.
RFID engineering science serves the same purpose as the magnetic strip on a credit carte, but works wirelessly, making it more susceptible to high-tech theft.
"The units that you lot tap your menu on are assail very low ranges, so y'all just accept to get within a few inches of the device for it to read your card. But there is nothing inherent in the technology that says information technology has to be inside three to four inches – if you turn the power up you can push button it out to ten or 15 feet," said David Skillicorn, professor at the school of computing at Queens University.
"That'southward where the problem starts – because now yous don't have to exist very close to the credit card or the passport in lodge to read the information on information technology."
The CBC investigation into the awarding revealed that credit card data could be read through wallets, pockets and purses using the phones near field communication (NFC) antenna.
Theoretically, this means that someone using the app could gain access to your credit carte du jour information by just standing near yous.
"The new slice here is that instead of having to buy a slightly elusive slice of hardware from some sort of mail service-order place, you tin at present but download the app to your phone and piggy dorsum on its Bluetooth capabilities," Skillicorn told Global News.
Skillicorn said that 1 of the risks associated with this type of technology is identity theft. He notes that because RFID engineering does not provide the three digit security code on the back of the carte, a thief would non be able to make a substantial purchase.
"You tin steal small-scale amounts of money, yes, just you lot can steal identify – and that'southward the real chance. You could phone upward MasterCard or Visa and when they ask you to enter your bill of fare number, you can change the address listed on the business relationship and other personal details – but you tin't go a buy a $5000 TV with that information," said Skillicorn.
But Gordon Agnew, associate professor at the University of Waterloo who specializes in cryptography and information security, disagrees.
Agnew argues that because the RFID technology is moving into debit cards now, the financial take a chance is much higher.
"Most credit card companies say you are not liable for fraudulent use of your card, but a lot of debit cards are coming out with RFID technology and those cards are liable depending on the depository financial institution," said Agnew.
What can consumers do to protect themselves?
The hazard of these apps is limited to the Android platform right now.
Near field communication is not yet available on the iPhone and BlackBerry is "also secure" to adopt the technology, co-ordinate to Agnew.
"The offset line of defense is go on it protected," said Agnew.
"You lot tin bank check to meet if the card is RFID enabled – if at that place is a pie shaped symbol, fabricated up of four or more lines, on the card and then this means your card has the technology."
If your card is RFID enabled, Skillicorn suggests wrapping the credit card in tin foil – the standard line of defense against RFID skimming attacks. The aluminum blocks signals from accessing the card.
Alternatively, those with RFID enabled cards can get a metal, or metallic lined wallet – often sold at travel stores.
Source: https://globalnews.ca/news/508214/smartphone-app-that-allows-credit-card-skimming-real-risk-to-consumers-experts/
0 Response to "Is There an App That Will Read the Chip on My Credit Card"
Post a Comment