{"id":3734,"date":"2019-10-24T18:39:47","date_gmt":"2019-10-24T13:09:47","guid":{"rendered":"https:\/\/sketharaman.com\/blog\/?page_id=3734"},"modified":"2020-07-18T17:28:03","modified_gmt":"2020-07-18T11:58:03","slug":"debit-card-fraud-without-otp-cvv-i-told-my-debit-card-number-and-expiry-to-a-fraud-call-is-it-possible-to-use-money-without-cvv-https-qr-ae-twhtlk","status":"publish","type":"page","link":"https:\/\/sketharaman.com\/blog\/archive-my-content-amc360\/debit-card-fraud-without-otp-cvv-i-told-my-debit-card-number-and-expiry-to-a-fraud-call-is-it-possible-to-use-money-without-cvv-https-qr-ae-twhtlk\/","title":{"rendered":"Debit Card Fraud. Without OTP CVV. I told my debit card number and expiry to a fraud call. Is it possible to use money without CVV? https:\/\/qr.ae\/TWHTLK"},"content":{"rendered":"

Yes, it is possible to pull money from the bank account linked to your debit card with just the card # and expiry date if the fraudster processes the transaction from a jurisdication that does not mandate two factor authentication. (India mandates 2FA for online card payments by way of CVV and Mobile OTP but many countries outside India don\u2019t).<\/p>\n

That the card is a VISA can be inferred from the debit card # alone. It\u2019s not relevant that you\u2019ve disclosed the fact separately.<\/p>\n

It\u2019s not well known that a credit card or debit card transaction can be successful even if a wrong CVV is entered. Sadly the fact that you have not disclosed the CVV won\u2019t protect you.<\/p>\n

\n
\n
\n
\n
\n
\n

\"\"<\/a><\/p>\n

<\/div>\n
\n
GTM360<\/span><\/span>@GTM360<\/span><\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n<\/div>\n
\n
<\/div>\n

TIL that a credit or debit card payment can go through even if you enter a wrong CVV. You gotta wonder how safe is Card on File. https:\/\/<\/span>stripe.com\/docs\/radar\/rules#traditional-bank-checks\u00a0<\/span>\u2026<\/a> via @<\/span>stripe<\/span><\/a><\/p>\n

\n
\n
\n
\n
\n
\n
\"\"<\/div>\n<\/div>\n<\/div>\n
\n
\n

Rules | Stripe Radar<\/h2>\n

Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.<\/p>\n

stripe.com<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n
Twitter Ads info and privacy<\/span><\/a><\/div>\n<\/div>\n<\/div>\n<\/blockquote>\n<\/div>\n
\n
<\/div>\n<\/div>\n
See GTM360’s other Tweets<\/div>\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n

The caller is unlikely to use your debit card by himself or herself. The way it works, they work for crime syndicates who sell the illicitly obtained card details to the highest bidder on the dark web. The buyer of your debit card info will be the one who will eventually attempt to pull money from your bank account. That might take a few hours \/ days.<\/p>\n

You should immediately report this incident to the Bank that has issued the debit card.<\/p>\n

    \n
  1. If you have not already lost money, ask the Bank to block your debit card. This should happen quite easily.<\/li>\n
  2. In the unlikely event that you have already lost money, ask the Bank to block your debit card AND file a dispute with the Bank. I know that credit card enjoys far more fraud protection than debit card but, AFAIK, you\u2019re entitled to file a chargeback claim for at least a portion of your loss even on debit card transactions. Be prepared to be told by your Bank to contact the Merchant – the fraudster in this case – for resolution. Push back against the Bank, saying debit card enjoys fraud protection, so it\u2019s the bank\u2019s job to get the money back from the Merchant, not yours. Expect to be told by your Bank to run between the pillar and the post for a couple of weeks or months. But, eventually, if you keep pushing back consistently, you should be able to retrieve your lost money.<\/li>\n<\/ol>\n

    Best wishes.<\/p>\n

    Next time, seriously consider switching to credit card. It offers many more advantages compared to debit card, UPI, Zelle, FPS, and other bank account linked digital payment methods.\u00a0Ketharaman Swaminathan’s answer to Which is better, using a credit card or using a debit card?<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

    Yes, it is possible to pull money from the bank account linked to your debit card with just the card # and expiry date if the fraudster processes the transaction…<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":3722,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3734","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/sketharaman.com\/blog\/wp-json\/wp\/v2\/pages\/3734","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sketharaman.com\/blog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sketharaman.com\/blog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sketharaman.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sketharaman.com\/blog\/wp-json\/wp\/v2\/comments?post=3734"}],"version-history":[{"count":0,"href":"https:\/\/sketharaman.com\/blog\/wp-json\/wp\/v2\/pages\/3734\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/sketharaman.com\/blog\/wp-json\/wp\/v2\/pages\/3722"}],"wp:attachment":[{"href":"https:\/\/sketharaman.com\/blog\/wp-json\/wp\/v2\/media?parent=3734"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}