Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Mastercard delivering cards with OTP device included - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Mastercard delivering cards with OTP device included

I live in a country where credit and debit card fraud is pretty high and unfortunately banks have not provided secure means to avoid credit and debit card cloning. In USA, I have seen OTP devices to access online banking, but credit cards are pretty much the same. I learned that Mastercard will provide credit cards with OTP included. This is great news because will decrease bank fraud a lot.

More information at

-- Manuel Humberto Santander Peláez  |  | | msantand at isc dot sans dot org   

Manuel Humberto Santander Pelaacuteez

195 Posts
ISC Handler
Jun 15th 2010
The crooks are certainly getting better. I signed up for an American Express card on Sunday, June 6th as part of a Costco membership. The card arrived at my home on Saturday, June 12th. At 9:40 PM last night, Monday June 14th, I got a "fraud alert" email from American Express. Yes, it was genuine and they've already cancelled by new card and are sending out a replacement.

It probably wasn't too tough for them to find, though. The bad charge was for $42.90 from "Bibit Internet Payments". Googling that firm shows lots of people complaining about bad charges from them, some for the precise amount that hit my card. Can you spell "inside job"? :-)
My bank just sent me my first VISA with the chip built into it... It'll probably be another 5 years before I get to see one of these.
Visa is issuing them too...

Sign Up for Free or Log In to start participating in the conversation!