Banks say no security flaw in tap-and-go cards

Banks say no security flaw in tap-and-go cards

Summary: Australia's biggest banks insist there's no security flaw in tap-and-go cards, despite police blaming them for a surge in fraud.

SHARE:
2

Victoria's deputy police commissioner Lucinda Nolan labelled tap-and-go cards "absolutely crazy" on Wednesday, and urged banks to change the technology.

Police say the cards, which allow customers to make small purchases without a PIN or signature, are largely responsible for a near 30 percent surge in deception and thefts across the state in the past 12 months.

Nolan said the cards were stolen from mailboxes, handbags, and cars before being repeatedly used by thieves for days.

However, banks and credit card companies insist there's no evidence of such a link.

Australian Bankers' Association CEO Steven Munchenberg said fraud on tap-and-go cards is extremely low, and the criticism is surprising.

"The banking industry is happy to discuss police concerns, but any response has to be in proportion to the problem," he said.

Ian McKindley, Visa's risk management head, said tap-and-go cards are popular and just as secure as other cards.

"There has been no increase in the rate of fraud as a result of the introduction of contactless payments technology," he said.

Customers were also protected from having to pay for transactions made on a stolen card, he said.

MasterCard also said that it has found no increase in fraud relating to tap-and-go cards, and was surprised by the police comments.

Police believe financial institutions have to realise how bad practice can contribute to rising crime rates.

A similar pitch was made to petrol stations earlier this year in a failed bid to get them to adopt prepaid only at the pump to reduce the number of petrol drive-offs.

But Nolan said she's hopeful that negotiations with the big banks can be more successful.

"We need to make sure that they understand not only the impact on community safety they're having, but the impact on Victoria Police," she said. The push against tap-and-go cards came as Victoria Police also reported the state's overall crime rate jumped 2.7 percent in the past 12 months, largely due to assaults and drugs.

Drug offences jumped 8.8 percent, which police attribute to increased policing, while the number of assaults jumped 4 percent — but most were related to family violence incidents.

Robbery is down 18.3 percent, while property crimes have also dropped.

Topics: Security, Banking, Australia

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

2 comments
Log in or register to join the discussion
  • Banks wear blindfolds!

    One of the most happy times for the group from overseas who come here seasonally to rip off Australians is when finding wireless chip technology associated with debit/credit cards. How easy it is for them to walk close by someone in a crowd and have the details registered on scanners they actually carry for this purpose. For my part I have refused such cards and if there is no choice in the end, I have a metal business card case in which I will be forced to carry such cards.

    While it is fine for banks to say we are protected against fraud, what's to stop a $500 purchase, made fradulently, happening where said fraud came from a tap and go or pay wave credit card where the owner just walked by one of those "scammers with scanners"? If the purchase happened to be made within the area where I happened to be at that time, what proof is there that I didnt make it?Who bears the onus of proof on such cards? Where will it end? Will consumers who are actually trying to get out of paying for something they DID purchase able to then say "Wasnt me! prove it was!" to the bank and then not have to pay? Right now the PIN or the SIGNATURE are some protection for consumers AND banks. With pay wave and tap and go, there is nothing to protect either side.

    Get used to carrying your credit/debit cards in metal containers in the future!

    Oh and BTW - you think the upcoming "credit card in your phone" is any better? Do you think your mobile phone cant be hacked? If you do, you are one of the people the scammers want to get to know - INTIMATELY!
    greg-w-h
  • Banks wear blindfolds!

    One of the most happy times for the group from overseas who come here seasonally to rip off Australians is when finding wireless chip technology associated with debit/credit cards. How easy it is for them to walk close by someone in a crowd and have the details registered on scanners they actually carry for this purpose. For my part I have refused such cards and if there is no choice in the end, I have a metal business card case in which I will be forced to carry such cards.

    While it is fine for banks to say we are protected against fraud, what's to stop a $500 purchase, made fradulently, happening where said fraud came from a tap and go or pay wave credit card where the owner just walked by one of those "scammers with scanners"? If the purchase happened to be made within the area where I happened to be at that time, what proof is there that I didnt make it?Who bears the onus of proof on such cards? Where will it end? Will consumers who are actually trying to get out of paying for something they DID purchase able to then say "Wasnt me! prove it was!" to the bank and then not have to pay? Right now the PIN or the SIGNATURE are some protection for consumers AND banks. With pay wave and tap and go, there is nothing to protect either side.

    Get used to carrying your credit/debit cards in metal containers in the future!

    Oh and BTW - you think the upcoming "credit card in your phone" is any better? Do you think your mobile phone cant be hacked? If you do, you are one of the people the scammers want to get to know - INTIMATELY!
    greg-w-h