Online credit card security scam revealed

[DorsetBoy]

http://www.bbc.co.uk/news/uk-11571766

http://www.bbc.co.uk/news/uk-11571873

People who shop online are being warned to watch out for a new security scam using systems designed to look like "verified by visa" to get personal information.

That and the "Mastercard Secure Code" site are intended to provide additional security for both users and retailers, but fraudsters are quickly developing their own versions.

[zappaDPJ]

Interesting. It was never happy with sites using Verified by Visa for those very reasons so I never completed purchases if it came up. Now, because so many merchants use it, I force a password reset before entering any details. It probably wouldn't take too much to circumvent that one but I feel more secure doing it.

[kinmel]

All my online financial transactions are done while using Trusteer's Rapport software.

Some banks, such as First Direct, supply a copy to their online customers, but it can be downloaded directly from Trusteer for home use.  You can add up to 100 sites manually.

[Steve]

I've been using Rapport for a while on the the Mac,it seems to 'work' ok.

[Technical Ben]

I've no idea why they cannot put this "rapport" software in natively to the browser/pc?
This con will not work on me. I always forget my "verified by Visa" password anyway! 

[Simon]

There always seems to be a new scam near to Christmas.  I just hope the Halifax don't block my card 'as a precaution' again.

[pctech]

I always fall foul of the fraud checks around this time of year as do a lot of online shopping,

Never liked VbV or Mastercard securecode even though I run Rapport too.

The reason it'll never be integrated into the browser is trusteer make too much money licencing it, which is fair enough.

be warned though, have had a couple of experiences where its failed to kick in when launching a new browser and going to one of the banking sites and of course you get the nag to install it.

[nowster]

One problem is that these sites didn't verify themselves to you. I notice that Verified By Visa now allows the customer to specify a user-specified text that will be displayed on all their pop-ups. If the text doesn't appear, it's a rogue site.

[pctech]

Think thats always been the case.

[nowster]

Think that's always been the case.

Definitely not. It only appeared in the last year or so.

[pctech]

I moved to First Direct in March 09 and had to set this up before I could use my debit card and as part of the sign up I had to enter a phrase.