Re:Hands on with Apple Pay Competitor CurrentC
by Veratyr on Thursday November 05, 2015 @12:12PM
(#10514563)
That's true but it's still possible to make a completely unauthenticated $4000 purchase with a physically stolen US credit card.
I didn't mention this earlier but NFC payments over $100 generally only require a PIN be entered but this is a relatively (to signatures) painless process and comes with the benefit of requiring something not printed on the credit card.
For small payments, NFC is faster. For large payments, NFC (at least as implemented in Australia, with PIN), is significantly more secure.
Re:Hands on with Apple Pay Competitor CurrentC
by mikeash on Thursday November 05, 2015 @12:25PM
(#10514644)
That certainly does sound better for fraud, but that's just a policy choice, not anything inherent to NFC or EMV. NFC could be without limits (I think that's how it is in the US) and EMV could require a PIN (as is typically the case in Europe).
It would be interesting to see the breakdown of different types of credit card fraud. How much fraud is physically stolen card versus copied card versus online purchases? I have no real idea myself.
I totally agree with you that NFC wins for convenience and speed. I just don't see much of a security advantage, and it looks to me like EMV should substantially reduce in-person fraud, since you won't be able to copy them the way you can copy magnetic stripes. The card companies seem to think this way, at least: the way they're pushing EMV isn't to require it, but simply to say that if you don't have it and you participate in a fraudulent transaction, you're liable for it.