Verified by Visa

[DjSatansfury]

Its not your ATM pin, if anything it asks for its your banks security question/code/pin/number/etc. Which you'll of set yourself. And even then it wont be the whole thing (Maybe two digits out of 4?)

And if you've got a decent bank, you dont have to fanny on changing stuff, without going through their CS dept.

 

[Tom]

I tried to pay my income tax bill with my Visa card. They rejected it as the amount was too large (I didn't know whether to be annoyed or chuffed).

This, at a post office counter, on the day the tax was due.

Visa are fail IMO.

 

[rynnor]

I tried to pay my income tax bill with my Visa card. They rejected it as the amount was too large (I didn't know whether to be annoyed or chuffed).

This, at a post office counter, on the day the tax was due.

Visa are fail IMO.

You realise of course that the limit is set by your bank and not by visa right? Visa is just the network.

 

[Tom]

Shit sticks.

 

[Job]

It specifically asked me for my ATM pin, I'm not an idiot and I proceeded with false information so I could see if it went through..obviously a scam if it did.
But I got nothing back, just hang, so I'm like expecting a TRANSACTION DECLINED, but nothing, tried ring VISA which is like just losing twenty minutes of your life.
'Wah ess yor car numba?'
'We donn deal, ring dees numba'
'Who put you through here mate, we don't do that'
Explains whole fucking thing to tenth idiot...
'What's your customer number?'
'Haven't got one'
'For the love of fucking God, is it that difficult, your VBV asked me for my pin number, is this a scam or not'
They're ringing me back, probably won't answer the phone for my own sanity.

No freaking wonder the lose 100's of millions to fraud each year.

 

[Job]

Just found this, don't know the date but looks ominous

BBC News - Fraudsters 'copying online banking security'

 

[caLLous]

And you still haven't provided a link to anything that you're saying. Where it says it will ask for your PIN on the Visa site, the site you are buying from...

Everybody in this thread has said they won't ask for your PIN. As far as I'm aware the PIN would be useless in an online transaction anyway because it is checked in a cash machine or a chip and pin unit at a till against the card that is physically inside the machine. It can't check it against anything if you are buying online.

The above could be bollocks but I'd be surprised if the PIN is stored anywhere except on your card in that little chip.

 

[old.Tohtori]

Unless you're mixing pin with the verification number of CCs?

 

[Job]

RBS have verified that the correct amount was passed through the VBV system , but failed, they say it was a legitimate popup, but don't know anything about being asked for any type of PIN number, very odd, wish I had screen grabbed it.

This looks abit like it, but I did check the HTTPS link
http://www.mail-archive.com/cryptography@metzdowd.com/msg06944.html

 

[old.Tohtori]

Reason for above statement i made is that atleast here, CCs havea verification number on the back of the CC for online payments.

Easy mistake-a to make-a.

 

[caLLous]

Well yeah, that's the CVV code. Will be asked for during the online store's checkout process but not in the Verified by Visa bit.

 

[Job]

I bleedin can't find it now, but one of the VBV sites I looked at mentioned supplying your ATM pin for registration online when first registering card, I haven't registered any cards with VBV, so I at first though it was a process to do that, but balked at my ATM pin.

 

[old.Tohtori]

Well yeah, that's the CVV code. Will be asked for during the online store's checkout process but not in the Verified by Visa bit.

Ah ok, never had any "verified by vissa" dealings so wouldn't know. My bank handles all online verification on a separate system. Nice backup before i give away my money.

Wish it worked on eliminating sucky MMOs though

 

[MYstIC G]

Yes you have to provide pin for initial registration

Disagree, never seen and I've had to register cards (personal and business) with these schemes for: Barclays, HSBC & RBS / Natwest (one and the same now).

Job, go into your branch, cancel your card and order a new one.

 

[Job]

Got temporary block just in case, ordered new one.
It's not beyond imagination to think of a scam where the main part of the transaction goes through OK and seems legit, but they have phished your ATM pin and of course the card details to make a clone, this won't happen of course cos I put in 4532.... oops..hang on!

 

[rynnor]

The only way the verification code would be your pin is if you set it to that - I think your PC is probably still infected and the scammers are injecting a middle page with the false verification site on it.

 

[Kahland]

The only way the verification code would be your pin is if you set it to that - I think your PC is probably still infected and the scammers are injecting a middle page with the false verification site on it.

That would be very smart too, setting your verification code online, to be the same as your pin.

All this visa verification is some bad stuffs. Not alot of pages use it in .dk atleast, and if something looks suspicious you should just close it!.

 

[DaGaffer]

The only way the verification code would be your pin is if you set it to that - I think your PC is probably still infected and the scammers are injecting a middle page with the false verification site on it.

That would fail anyway as you need at least 6 characters for your 3Dsecure password, and I think you need letters and numbers (although its been quite a while since I set one, so I could be wrong).

As others have said, there is simply no mechanism to use your ATM PIN online, the card services don't use, the merchant services and payment gateways don't use it.

I think the lesson here, is don't buy anything online when you're pissed or stoned, as Job obviously was.

 

[adams901]

Verified by Visa activation demo

these are on the VBV website, like everyone else, i havent used my pin on any cards I have ever signed up.

 

[Job]

That would fail anyway as you need at least 6 characters for your 3Dsecure password, and I think you need letters and numbers (although its been quite a while since I set one, so I could be wrong).

As others have said, there is simply no mechanism to use your ATM PIN online, the card services don't use, the merchant services and payment gateways don't use it.

I think the lesson here, is don't buy anything online when you're pissed or stoned, as Job obviously was.

Well if you follow the link I provide to the VBV 'phishy' page,you can quite clearly see they do ask for your ATM pin in some circumstances.

 

[MYstIC G]

Well duh, of course a phishing scam page would ask you for unnecessary details, that's the whole point of the scam!

*slap*

 

[DaGaffer]

Well if you follow the link I provide to the VBV 'phishy' page,you can quite clearly see they do ask for your ATM pin in some circumstances.

Well, that was an article from 2006 and it looks like someone made a hash of the implementation. In theory, yes, you could set it up to tell users to set the password to be the same as your ATM PIN (except as I said, I don't think that would actually work now, I'll check), but it would be a. bad security, and b. pointless as there's no relationship between your ATM security and your 3DS security. I'm also pretty sure that asking for a PIN in that way wouldn't be PCI compliant.

3Dsecure is a horrible piece of crap (every implementation I've ever been involved in has hurt sales conversion and created CS calls), but its actually designed not to compromise your physical card through shared PINs etc. It was designed with a separate password for a reason; the banks originally had the idea of giving us all PIN readers for our PCs, but quickly decided the security problems were insurmountable, and 3DS was the "least worst" compromise. It would probably even be OK if the banks weren't so useless at explaining what it is to their customers.

 

[Bahumat]

Job your thread reminded me of this guy

Fonejacker - Monies - YouTube

 

[Job]

VBV verified that I had attempted a transaction using the popup I saw, the details I put in were my card number and start/finish dates, so it attached itself to my card somewhere in the ether though it failed obviously, so it was a legitimate link, but it DID ask for my ATM pin...presumably a partial scam?
Or it was all real and it's some registration script floating around, cos when I tried again it popped up an RBS VBV script (didn't fill it in).

 

[Bahumat]

Give it up Job you PIN noob

 

[Job]

Baby put to bed, except desktoplayer trojan has visited me again

 

[Zenith.UK]

Baby put to bed, except desktoplayer trojan has visited me again

Thanks for reminding me to run my monthly sweep for nasties.

<Starts MWB Anti-Malware>

 

[Job]

Kaspersky virus removal tool, it rocks

 

[caLLous]

Lol, you're not exactly a good advertisement for it if you were using it before.

 

[rynnor]

VBV verified that I had attempted a transaction using the popup I saw, the details I put in were my card number and start/finish dates, so it attached itself to my card somewhere in the ether though it failed obviously, so it was a legitimate link, but it DID ask for my ATM pin...presumably a partial scam?

The phishing page sits in the middle - it will still pass information to the real page thus Visa will see a failed transaction but anything you type is also recorded by the scammers.

You will never be asked for your PIN - thats the bottom line and if you see a request for a PIN your being scammed.

You need to install decent anti-virus software or stop using e-commerce.