Categories: 投资理财

小心背大黑包靠近你的人

不知道坛里有多少人再用PayWave,那种支持近程NFC payment 的银行卡的人。 在超市里用那种,只要把银行卡靠近那个东西就可以付款, 台湾已近有人开发出便携支付机,就像超市的那种。 超市的需要靠近1-2cm距离才会启动,台湾人开发的是大功率,50cm以内的就会自动刷卡。

理论上讲,只要背这这个机器的人靠近你的钱包50cm, 就可以从你的卡里刷钱。

太危险了,以后要买那种可以隔绝电磁波的钱包。

https://www.redants.sg/fake-news/story20180725-1733

以下产品均可以防止盗刷


真的吗?


没paywave的飘过, 只有ATM卡和debit card


太恐怖了。。。。


果然台湾地区是。。。。。。。


不会吧!这种钱包哪里有卖?


发现商机


可怕,不带信用卡了,用SAMSUNG/APPLY PAY吧


我觉得不用怕,首先,paywave每次只能刷小于100,我用uob的卡,每笔交易都有短信提醒,如果被大黑包给偷了,第一时间就知道,信用卡从刷卡到银行清算还有几天,所以只要报警及时,不会有啥损失。其次,新加坡还是一个有秩序的社会,能申请移动pos机的,我相信是轻易跑不了的,再加上到处都有的摄像头,盗刷他人信用卡的人恐怕跑不掉。

如果实在是怕,那就用手机移动支付吧,每次需要输入密码或者指纹才可以。

最后,我还是比较怀疑这种黑科技的可能性,大黑包就算是功率强大,信号能够够得着卡,但是卡回复信息的功率还是那么小,难道大黑包的接受能力也同样强大?


现在信用卡好像都默认有paywave的功能吧,都不用激活,我的两个信用卡都可以用,在超市也经常这样刷,卡上有paywave标志的应该就可以用吧


是的 无须另外激活


是的,paywave只能每次用在消费100以下,不过不是每个银行的卡都有短信提示的


请问怎么开通短信提示?


其实我觉得这是paywave需要改进的地方,至少得有个email提示什么的。


有点儿耸人听闻,读智能卡的信息没有那么容易,尤其是这种涉及到钱的芯片。里面的信息一般都经过了加密处理,一般需要特殊的硬件设备去解密,俗称加密狗。而即便读卡成功,这笔钱也是需要经过银行转给相应的商户,这个转移过程对于使用这种刷卡偷钱的人来说风险太大了。

如果真的这么容易刷,easylink早就被刷爆了。


另外多张卡在钱包里叠在一起的时候 刷不成功的 互相干扰


嗯 有多张卡支持Paywave,应该刷不成功吧 之前地铁卡就是,好几次刷不成功才发现有个信用卡也支持ez link……


打给银行开通短信提示for every transaction > S$1

BOC的是多过500才有短信提示,如果要换成>$1还要填表格什么的巨麻烦


ezlink 的钱被刷了,很容易被发面,每天大家都在用,都在看里面剩多少钱。

但不是每个每天都在查自己卡里还剩多少钱的


那个是因为一般扫描设备的功率比较低,要节省能源。如果扫描设备功率比较高,这个自然就能分辨出来


其实不用怕,你2张pay wave 的卡放一起就好。。。。pay wave 不但方便,而且信用卡,有时候还有些小折扣,大件可以分期付款。


信号互相干扰不是功率大能解决的。。。。


错了,信号弱的时候,很难分辨,但放大后就可以看出差别。就好像用放大镜看东西, 你就能看到细小的差别


显然魔高一尺道高一丈,这样的技术攀比应该是无时不刻正在进行,希望银行和政府的技术能保持上风吧  总之想起来就好可怕


真假的,nfc是感应式,线圈的输出功率很小,所以只能贴得很近,你接收器功率再大有什么用?而且就算收到了信息应该是加密的吧,个人猜测


http://www.straitstimes.com/busi … xperts-in-singapore

楼主说的事是以前在台湾发生的,可是本地报纸早就出来辟谣了。

而且只要能证明不是你用的是被别人盗刷的,第一时间报警,你的钱是安全的。

我觉得楼主有点网上看到风就是雨了。


Contactless cards not a security risk, say experts in Singapore。

SINGAPORE – Banking figures here have reassured customers using contactless or “tap-and-go” cards, such as payWave, that there is no security risk despite a major scare in Hong Kong.

They say this type of payment is very well-protected by security measures, and that card fraud rates here are still very low.

The Hong Kong Monetary Authority (HKMA) recalled some cards last week, after news reports said contactless cards contained more personal information than was allowed. No instances of fraud were reported.

  
Demonstrations by the media there showed information, including card number, expiry date and the holder’s name, could be obtained from contactless cards issued by several banks, using near field communication (NFC) applications installed on mobile phones.

The HKMA ordered at least seven banks – including DBS Hong Kong and OCBC Wing Hang Bank – to recall cards. The reports are the latest in recent years to question contactless cards’ vulnerability to NFC skimming, or “electronic pickpocketing”.

Card numbers and expiry dates can be read from contactless cards issued in Singapore, using apps that can be downloaded for free. The worry is that the information will be used for card scams.

But contactless cards – most commonly those with the Visa payWave or MasterCard PayPass feature – have been largely fraud-free so far, Association of Banks in Singapore director Ong-Ang Ai Boon told The Straits Times.

“The overall credit card fraud rate is about 0.02 to 0.03 per cent, of which 80 to 90 per cent of the cases are card-not-present situations, usually during overseas online transactions. On this front, we advise consumers to shop online only on 3D-Secured websites.”

3D Secure refers to “three-domain” security, an online authentication protocol covering the merchant, card issuer and the Internet.

Visa country manager for Singapore and Brunei Ooi Huey Tyng said that there has been no electronic pickpocketing fraud case reported since payWave cards were rolled out in Singapore, and a mandate was introduced in Asia in April this year to ensure holder’s name transmission is not possible on newly issued contactless cards.

“(Electronic pickpocketing) is complex to execute in reality, and the data contained on the cards offers very limited potential for fraud,” Ms Ooi said.

For NFC pickpocketing to work, the phone would have to be right on top of the card, and the three-digit CVV security number would not be detected in any case.

PayWave cards are also protected by cryptographic security, which generates a different authentication code for every contactless transaction, along with VisaNet at the back-end, which analyses transactions in real time for possible fraud.

A MasterCard spokesman said its cards do not contain holder’s names in its contactless application on chips, adding that data captured by an NFC app is not enough for card forgery or online transactions.

Ms Grace Cheng, who co-founded credit card adviser GET.com, added: “Visa and MasterCard holders are also protected by a $100 cap per contactless transaction.”

In any case, HKMA’s concerns are not applicable in a local context, Mrs Ong said. “As far as we see, it is a matter of personal data protection – a matter of privacy, not security. That is a mandate by HKMA, but there is no similar requirement in Singapore yet,” she said.

When contacted, the Monetary Authority of Singapore (MAS) did not comment on whether it shares HKMA’s concerns, but stressed existing measures have proved effective. It added: “MAS will continue to monitor the situation, and if necessary, consider additional measures to protect consumers.”

No further enhancement to credit card security is being discussed, Mrs Ong said, even as the financial industry continues to work towards creating a cashless consumer economy.

Ms Cheng said: “The tap-and-go payment makes small purchases a breeze for consumers, and also helps raise business productivity by reducing customer servicing time and manpower reliance.

But while card security is tight, “we strongly recommend that consumers stay vigilant and maintain a good habit of checking their credit card statements regularly.”

早就辟谣过了。 楼主好好看!


不是搞这方面的,大概猜一下,权当娱乐。

这就相当于两个人距离远说话听不见,然后其中一个人A就拿个大喇叭,相当于大黑包,B能听见了,也能回复了,可是B并没有使用喇叭,所以A还是听不见呀。

NFC近场通信,卡发射的无线信号,2cm外就没有了,大黑包功率再大,也不能收到不存在的信号吧。


哈哈,这个比喻很搞笑。或者大黑包是千里耳能放大很微弱的信号,一般人只能听到2cm内的的,它能听到50cm内的的?


我的理解是,如果nfc发射的信号在2cm以外还是客观存在的,只是现有的读卡器处理不了那么微弱的信号,在这个前提下,增大读卡器的功率可能是可行的。如果2cm以外信号衰减到了零,也就是客观上都不存在了,那读取功率再大也不行了。


这么悬!本地有发现这类事发生了吗?


破解方法就是以后都用 Samsung pay/Apple pay好了,不要带卡出门了。。


这不是开玩笑,https://www.redants.sg/fake-news/story20180725-1733


太恐怖了


blog

Share
Published by
blog

Recent Posts

中国全面禁止虚拟货币

炒币者极度深寒:不止凉了,还冻…

4年 ago

如果在六个月投资赚取超过1%的利息

银行每个月都打电话,问我借不借…

4年 ago

想买住院保险……

如题, 29岁SC. 你好,我…

4年 ago