Hacker News Reader

It's even worse than you think. Because even if you put a credit card to back up your payments (easier now that PayPal has a deal with VISA), and you are hoping that a passed expiration date on your card will block a transaction from happening, the company will try new dates with one year increment in the future, till eventually the transaction goes thru.

View on HN

Huh? Does your card number not change when you get a new one in the US?

Unless you specifically ask for a new number, not at all. What's even worse it that the cvv is changing (checksum with the date and card number) but the transaction can go thru without cvv submission in most cases.

what's the point of a cvv then? This seems rather odd

It's up to the merchant; since in the event of fraud they'll be the ones who get hit with the chargeback, it's up to them to decide if they want to require that extra safety or not.

For a recurring subscription, the cvv was verified at the beginning. Cvv is for verifying the card security, not vendor account management.

Reply on news.ycombinator.com