violet wrote: Easier because the card can be duplicated you mean?
The account number is great to have to send money to you. Otherwise it's pretty much useless other than to verify that you are a bank customer. Can't skim an account number.
Spigzy wrote:I agree with you on this one though, does seem a high risk, particularly in this country where people can't even keep a 4-digit PIN to themselves & family members are all too keen to rob their own brothers & sisters at the sight of a couple of zeros on a balance.
You would think they could execute all their forward thinking into resolving account numbers from phone numbers. No, too easy and safe, better have the card number entered. Haha, I think the display even shows typed numbers like the eCash code prompt.
slavedog wrote:Although what can you do with the card number if you do not have a) the 3 digit security code on the back of the card, b) the cardholder's smart phone and c) the cardholders PIN code to verify a transaction?
You can annoy the hell out of someone who thought their card would work for their holiday.
You can abuse the underlying functionality of the machine by feeding it a list of potential card numbers and receiving feedback to determine which ones are valid and who they belong to. Normally stolen credit cards are verified by attempting to perform very small transactions (cents). If the payment is accepted the criminal marks the card as valid.
You can use the card number to verify identity on various online services to hijack someone's email or other services paid for with the card.
You can potentially impersonate the card holder when talking to bank support.