Visa Australia kills signatures by 2013
Summary: Visa Australia said today it was moving to chip and PIN technology for all of its credit cards, with signature transactions to be banned by April 2013.
Visa Australia said today it was moving to chip and PIN technology for all of its credit cards, with signature transactions to be banned by April 2013.
The move, instigated to reduce card fraud, involves working with financial institutions and retailers to upgrade over 14 million visa cards, half a million point of sale terminals, and thousands of ATMs.
From January 2010 all new Visa cards will feature smart chips, while debit and reloadable prepaid cards will be updated from January 2011. Currently around 37 per cent of Australian Visa cards are chip-enabled. 100 per cent of credit cards will be chip cards by 1 April 2013. All merchant terminals must be chip-capable by April 2012. All ATMs must be chip capable by 1 January 2011.
"These initiatives are part of a comprehensive security upgrade aimed at providing cardholders with a higher level of confidence and significantly reducing all types of card fraud including counterfeit, skimming and online fraud," Visa's general manager for Australia and New Zealand, Chris Clark said in a statement.
The upgrade will also allow banks and merchants to offer their customers more services such as contactless payments and storing rewards program information on cards.
Moving to chip and PIN was part of Visa's seven-point security agenda, which included using Verified by Visa passwords when shopping over the internet and requiring retailers to capture the three-digit cardholder verification number when processing transactions.
"While card fraud in Australia remains low by world standards, overseas criminals are becoming increasingly active in seeking out new arenas. The time is right to take advantage of the new technologies available to work across the industry, with banks and merchants, to strengthen security across the board," Clark said.
Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.
Talkback
report scam artists
And you are...?
good idea
Agreed
VISA - Chip and PIN - Ban Passwords on Internet!
Now - be consistent and stand by your security stance, statements and policies as reported here and ban use of passwords and related PC keyboard usage for Visa transactions on the Internet. Keyboard "sniffing" is now a standard part of malware "products" and SSL/https doesn't help at all in this regard.
We don't even have a signature in those cases - unbelievably risky - but Visa doesn't offer anything else!!
Let our Chip and PIN units become PINPads for our PCs via a USB/Bluetooth interface, for a start.
Be logically consistent in your information security policies and products. If it is vital for security at the merchant's site, it is FAR MORE important at home, buying off the 'Net with Visa!
Onus of pin [mis]use?
I assume they will continue to use the existing hardware to read/send the same code and pin which is already being skimmed - so what difference will a mandatory pin make. At least now they cant skim the signature. Wonder how soon it will be before Visa claim YOU lost (or allowed) the pin to be made known, and thus the transaction is still yours?
What happens when you go overseas?
The chip part is a good move though - depending on the chip, it can be much harder than the magnetic strip to skim.
Beware!
This has little to do with 'improving security' and more to do with who they can lay the blame on. They can reduce the amount of fraud THEY are held responsible for, by passing the blame on users.
Visa
Shifting the losses
A previous poster hinted at what's already happened in other countries - the Terms & Conditions putting full onus on the customer for fraudulent transactions where chip & PIN is used. This is unacceptable.
Where's the detail on what if any security requirements Visa have on merchants to ensure that Chip & PIN pads use only encrypted communication with the next device (EFTPOS terminal/etc.) - some assurance that your card and PIN details can't just be skimmed?
This type of fraud has already started in other countries (like the UK) where they have already forced the use of chip & PIN.
As soon as Visa (or anyone else) push the cost of fraud to me, they'll lose me as a customer.
I'll go back to cash if I have to. (Them being able to track my purchases is enough taking advantage of me already.)
Here Here
With a card scanner and a PC any card that is lost will be able to have the PIN read on that card which in turn will be able to be used for any transaction. Alternatively using your card at a retail outlet you could also have your card skimmed like at McDonalds in WA. For those transactions you will be totally liable under your T&C of the card.
So everyone out there please read your T&C's and refuse to move blindly to PIN on your cards. It's time Australia to push back against the banks and credit card companies so they realise that they can't try and dupe us again.
The pin is not stored on the card
Interesting stuff
Cheers,
Renai LeMay
News Editor
ZDNet.com.au