Comment by gambiting | Hacker News Reader

Comment by gambiting | Hacker News Reader

Parent Full thread

This guys puts a skimmer on your regular machine, no contactless needed:

https://www.youtube.com/watch?v=y83ZgzuFBSE

And the fear of contactless payments is almost funny - someone would need to go to ridiculous length to read a card via PayWave/PayPass(the card won't reply to a non-genuine key, so you would need to have an actual authorized reader or access to one), and the most you can spend is 25 pounds per transaction, and you can only do it 5 times before you have to enter the pin. In the meantime, you can anonymously buy thousands of stolen card numbers online - so why bother with contactless? I will always use it if there is an option to.

How do people use stolen card numbers without getting caught? Simply ordering things to be delivered to your home doesn't seem like something that you would get away with.

Sure, but you could have it delivered sans signature to an empty house and grab it off the step. Or bounce the money through people who click on those "I made $234k last month working from home" ads.

Brian Krebs has written a few things about ways they (try to) get away with it: http://krebsonsecurity.com/tag/money-mules/

You order it to Amazon drop off point? Or an address that you know no one lives at? Or buy online goods that you can re-sell later - bitcoins, steam/battle net accounts, any virtual currency. Drugs. I know people who had their stolen card used to pay for $200 Uber trips - once you leave the car good luck getting found out, and the driver doesn't know if your card got declined or not. I'm sure there's a thousand ways to get money out of stolen cards.

Not the same there are pics of scammers on a crowded tube trains (london) with a hand held contactless device harvesting.

Source? The contactless card will not surrender its information unless you have an actual authorized terminal, it's not like you can just read it with an NFC reader, it just doesn't work that way.

Reply on news.ycombinator.com