this post was submitted on 22 Jul 2023
91 points (96.0% liked)

Technology

55715 readers
5725 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

My wife and I keep getting our debit cards stolen online. We notice the charges and are able to dispute them and cancel our cards, but it sure is annoying.

We don't put our card information on suspicious websites. They're on well known websites like amazon and Facebook.

We ran out emails through a data breach checker and it found nothing.

I don't think there's any malware on our devices.

Any idea what could be happening and how to prevent it?

you are viewing a single comment's thread
view the rest of the comments
[–] demesisx@infosec.pub 15 points 11 months ago (1 children)

A lot of other good comments here but I would also recommend not swiping your card at ANY machine. I had my debit card # lifted several times before I finally decided to only use something secure like ApplePay (at the gas pump particularly). Apple Pay changes the card number every single time it’s used. So, it can at least pinpoint the exact moment it was stolen if it somehow did give up your info. I’ve never had to worry about my card number getting stolen since I made that change.

[–] Snowman44@lemmy.world 3 points 11 months ago (2 children)

I don't have apple pay, but I do use Google pay whenever I can.

[–] MeatSweat@sh.itjust.works 8 points 11 months ago (1 children)

Google Pay will do the same thing so you should be good there. It's called credit card tokenization.

[–] AbstractLinguist@lemmy.world 11 points 11 months ago

And it’s even better than you described. The one time token isn’t a new card number, it’s not a card number at all. It’s basically Apple saying “yep this is legit” to the other computer, and then the two banking systems do their money transfer on the back end.

Even if someone could intercept it and decrypt it, it would be completely useless because that’s just not a thing.

Pretty sure Google does basically the same thing. Never used it though.

[–] demesisx@infosec.pub 6 points 11 months ago

Looks like Google will offer that too if you use Google Wallet on your phone.