Debit card cloning query

No, your bank is liable unless you told someone your pin, just the same as a credit card. Don't know why some people seem to think debit cards/current accounts don't have fraud protection.

The point was that a lot of the time, the banks refuse to acknowledge that the fraud happened unless you told someone else your pin. At which point you're not protected.

*edit* there was a program on a while back, where someone cloned a bank card with a chip on it. Apparently, there's a bit set on the magnetic stripe that indicates whether or not a chip is present. If you just clone the strip, you can't use it in a cash machine because it looks for the chip. However, if you clone the strip, flip the bit, the cash machine doesn't look for the chip, and it will start working. So currently, if someone has your pin (which they can use cameras, or fraudulent terminals to get), they can build a card without a chip that'll work in a cash machine.
 
Last edited:
The charity donation is likely just to check that card is active and working before making any large purchases with it.

correct, its very common for people to check if a card is "working" by donating to charity - the charities don't tend to do much pro-active fraud checking as they don't stand to loose anything.

The bank isn't the one that ends up footing the bill on card transasctions - the merchant will get the payment reversed.

in terms of the pin, its not "stored" as such in the chip, however the card has the ability to tell if the correct pin had been put in and respond positively.

The most interesting way of getting a card and pin (which has been done) is to infiltrate the factory that makes them - there have been cases of sealed units with a GSM unit built in texting the card numbers out :D
 
The point was that a lot of the time, the banks refuse to acknowledge that the fraud happened unless you told someone else your pin. At which point you're not protected.

*edit* there was a program on a while back, where someone cloned a bank card with a chip on it. Apparently, there's a bit set on the magnetic stripe that indicates whether or not a chip is present. If you just clone the strip, you can't use it in a cash machine because it looks for the chip. However, if you clone the strip, flip the bit, the cash machine doesn't look for the chip, and it will start working. So currently, if someone has your pin (which they can use cameras, or fraudulent terminals to get), they can build a card without a chip that'll work in a cash machine.

If they did what you said, the bank couldn't claim it wasn't fraudulent.
 
If they did what you said, the bank couldn't claim it wasn't fraudulent.

True - but the burden of proof appears to have shifted. If I had fraudulent transactions on my account that the bank said were done with the card present and the correct pin entered, I'd have a job to prove otherwise.
 
Credit cards and debit cards are used the exact same way. And hence cloned the exact same way.

You can actually buy all you need off the internet.
Portable magstripe recorders, magstripe writers, blank cards, card printers, card embossers.
Seriously, anyone can get into carding.

Shops are easy to do, take someones card, pretend to drop it swipe it through a magstripe reader, get someone to steal their pin, have a recording system for cards and pins to match up, piece together.
 
Back
Top Bottom