Why don’t amazon require Card CVV Number? People can steal my card!!!

[ASPWLF]

Recently I have used amazon and I have never really shopped on there apart from a very long time ago but that was with a gift voucher



I decided to make an account for future sake and I needed to buy something today but I was adding my card and unlike every website it doesn’t ask for a CV code ...... wtf



ok I know not all websites use one but that means someone can just literally get my card number and spend .....



seriously though do they not do anything ? Would they say it’s up to me or can they prevent this I really don’t get how this is secure for a big company someone explain please ?





I could just go and get my mates card and boom I’ve bought you a Christmas present .... only it’s on your card lmfao







some will say say to me ..... but how would they of got ur number unless they had the card? Well it’s called if a hacker or virus gets your bank details somehow that’s why I’m concerned

 

[fatiain]

I had to put my CVV in when I set up my Amazon payments.

It's 123 if you're interested.

 

[Hades]

Did you opt in to one-click-ordering (in other words agreeing they can hold your CVV)?

 

[Werewolf]

Did you opt in to one-click-ordering (in other words agreeing they can hold your CVV)?

IIRC they don't ask for it even if you don't have one click ordering enabled.

From memory CVV isn't so much about protecting the card user from fraud (although it helps a fair bit), but down to reducing the risk faced by the company accepting it.
If a company doesn't require CVV from my understanding they take on more of the risk of fraudulent transactions, same with VBV etc, however I suspect it's a risk something like amazon might be welling to take if you're a repeat customer, and I know they require the card to be entered again in full if you are sending to a different address.
I think it's often a requirement of the payment processor, but if you're big enough you can choose not to (in a similar way to Tesco always wants my CVV for every grocery order, whilst Morrisons just want it once).

Basically it's risk management vs making it easy for the customer and how much the company is willing to risk in chargebacks and fraud claims.

Some payment processors didn't even used to require you entered a valid address for the card, as I found out years ago when someone used my credit card number to pay for porn, the only other detail the provider wanted was an email address that wasn't even verified*, no name, no address, let alone CVV (I did some searching into the payment processor and found out that because it was hard for some US providers to verify UK addresses, they didn't even try).

*When I rang up to complain and tell them it was fraud the payment company asked if I'd used acertain type of email address (one of the free US providers).

 

[fatiain]

... I found out years ago when someone used my credit card number to pay for porn...

<airquotes> Someone </airquotes>

 

[Werewolf]

<airquotes> Someone </airquotes>

LOL

I had better things to spend my money on and was not amused to see the charge on my card.


I also had some random delivery several years later of two porn DVD's, that turned out to have been some marketing scam as apparently loads of others got the same ones* (my guess is that they sent them out to people in a certain age bracket or something, I think I posted about it on here at the time.



*I found a thread about it on MSE a few weeks later.

 

[Flukester]

I have a feeling it will prompt if you change or are from a new IP address also, could be wrong.....

It's like PayPal, I can withdraw funds instantly unless I change IP then it's up to 24hr for security purposes.

 

[ANDARIAL]

I have a feeling it will prompt if you change or are from a new IP address also, could be wrong.....

It's like PayPal, I can withdraw funds instantly unless I change IP then it's up to 24hr for security purposes.

Not sure about that,sometimes i am from France ,sometimes UK etc ETC VPN
Have never been asked for CVV since i set up amazon account
Same for Paypal
That said All purchases always go to my home address

 

[touch]

I could just go and get my mates card and boom I’ve bought you a Christmas present .... only it’s on your card lmfao

If you go get his card you'll have the CVV too.

some will say say to me ..... but how would they of got ur number unless they had the card? Well it’s called if a hacker or virus gets your bank details somehow that’s why I’m concerned

Go and try it. Log into your online banking and try to see your card details. I bet it doesn't show your card details anywhere.

 

[sgavan]

I just paid for my bike insurance and they said they don't take the cvv code anymore either.

 

[Haggisman]

I have a feeling it will prompt if you change or are from a new IP address also, could be wrong.....

It's like PayPal, I can withdraw funds instantly unless I change IP then it's up to 24hr for security purposes.

That makes no sense, since the vast majority of home users are likely to be on a dynamic IP

 

[PiKe]

Amazon prompt you to re-enter the credit/debit card details if you try to change the delivery address.

 

[Rannoch]

Amazon prompt you to re-enter the credit/debit card details if you try to change the delivery address.

They sure do. If you try and buy a gift card they ask you to enter the card details again also.

 

[new boy]

I placed an order with just eat, I had 2 cards on the account, mine and the mrs. I accidentally used my mrs card and entered my CVV number, it went through fine much to her annoyance.

 

[peterwalkley]

That makes no sense, since the vast majority of home users are likely to be on a dynamic IP

Yes and no ....

Home ISP's will typically give you a 7 day lease on the IP address and as its fairly rare that a customer will spend a whole 7 days without using the internet the IP can effectively become permanent as it will just get rolled over to the same device when the lease expires. Often its only when someone is away on holiday and switched everything off that they come back to a new IP.

Source: I've been working in this area for more years than I care to admit.

 

[LuckyBenski]

Will it not just ask for the CVV upon payment/checkout? I don't use Amazon but other sites that remember my card details do that.

 

[Ceryndrion]

As has been stated previously, there are multiple ways to verify the card details, checking the CV2 code is just one of them. And by not checking the code, Amazon make ordering for you a little quicker and easier, but it opens them up for potential card fraud. Its all part of their business model.

Company that I work for, some of the smaller brands take just card number and expiry date, or card, expiry and CV2 code, but our largest brand, required card, expiry, CV2 and address data. It's all down to agreements with payment providers, and risk of fraud.

 

[kindai]

I found out years ago when someone used my credit card number to pay for porn

Did you ask for a copy of the movie to verify you hadnt seen it?

 

[ASPWLF]

Did you opt in to one-click-ordering (in other words agreeing they can hold your CVV)?

<airquotes> Someone </airquotes>

LOL

I had better things to spend my money on and was not amused to see the charge on my card.


I also had some random delivery several years later of two porn DVD's, that turned out to have been some marketing scam as apparently loads of others got the same ones* (my guess is that they sent them out to people in a certain age bracket or something, I think I posted about it on here at the time.



*I found a thread about it on MSE a few weeks later.

I have a feeling it will prompt if you change or are from a new IP address also, could be wrong.....

It's like PayPal, I can withdraw funds instantly unless I change IP then it's up to 24hr for security purposes.

Not sure about that,sometimes i am from France ,sometimes UK etc ETC VPN
Have never been asked for CVV since i set up amazon account
Same for Paypal
That said All purchases always go to my home address

If you go get his card you'll have the CVV too.



Go and try it. Log into your online banking and try to see your card details. I bet it doesn't show your card details anywhere.

I just paid for my bike insurance and they said they don't take the cvv code anymore either.

That makes no sense, since the vast majority of home users are likely to be on a dynamic IP

Amazon prompt you to re-enter the credit/debit card details if you try to change the delivery address.

They sure do. If you try and buy a gift card they ask you to enter the card details again also.

I placed an order with just eat, I had 2 cards on the account, mine and the mrs. I accidentally used my mrs card and entered my CVV number, it went through fine much to her annoyance.

Yes and no ....

Home ISP's will typically give you a 7 day lease on the IP address and as its fairly rare that a customer will spend a whole 7 days without using the internet the IP can effectively become permanent as it will just get rolled over to the same device when the lease expires. Often its only when someone is away on holiday and switched everything off that they come back to a new IP.

Source: I've been working in this area for more years than I care to admit.

Will it not just ask for the CVV upon payment/checkout? I don't use Amazon but other sites that remember my card details do that.

As has been stated previously, there are multiple ways to verify the card details, checking the CV2 code is just one of them. And by not checking the code, Amazon make ordering for you a little quicker and easier, but it opens them up for potential card fraud. Its all part of their business model.

Company that I work for, some of the smaller brands take just card number and expiry date, or card, expiry and CV2 code, but our largest brand, required card, expiry, CV2 and address data. It's all down to agreements with payment providers, and risk of fraud.

Did you ask for a copy of the movie to verify you hadnt seen it?

No it dont ask

so as i said i only recnetly bought a lot of stuff off amzonz XD aka pc parts aka 1060 XD

anyway

i also bought some E gift cards for chirstmas and stuff while i was there[ you can set the date to deliver on xmas so why not? ]

anyway i added my card all i asks for is number, name on card and makes me fill in my addresss

OK SO what if i drop my card or someone at a checkout gets a picture or somthing or a scanner on the atm > someone can goto amazon type my number on card also put my name BOOM BITCHES GOT MEH MOENY ?

for real though wtf? so what would happen then ? of course the bank might refund me maybe.. what does amazon do? i guess nothing right beacuse its my fault for dropping it LMFAO ?? but still for real


like say if someone at my college a bully bullies me and gets my card and goes to amazon [ llets pretend i didint know it was him btw XD ]

and i notice [ Transaction of £2000 from amazon.co.uk EGift voucher]

WTF THEN ! ? it just dont make sence to me beacuse like idk would i get the 2k back ? or would they say its my fault for losing the card? or can amazon track the amazon e gift cards and save me ?


i just dont understand it really

 

[PiKe]

You strike me as overly paranoid, also bullied to get your debit card? Are you 12?

When you first add a card to Amazon you have to add all the details including CVV number so your scenario where someone takes a picture of the front of the card is null and void.

Skimming cards at an ATM is a very real risk, it happens, you just have to be aware of it and check the slot, always cover your pin as they would need that if the card is skimmed as the CVV isn't stored in the cards chip.

This has gone off tangent now anyway as the original concern was about Amazon storing card details.