3/6/2014 4:15 PM ET|
4 risky places to swipe your debit card
When it comes to fighting fraud, debit cards are trickier than their credit card cousins.
Would you give a thief direct access to your checking account?
No? Unfortunately, you may be doing just that by regularly using your debit card. Debit cards may look identical to credit cards, but there's one key difference: With credit cards, users who spot fraudulent charges on their bill can simply decline the charges and not pay the bill. On the other hand, debit cards draw money directly from your checking account rather than from an intermediary such as a credit card company.
Because of that, even clear-cut cases of fraud where victims are protected from liability by consumer protection laws can cause significant hardship, says Frank Abagnale, a secure-document consultant in Washington, D.C.
He cites the example of the TJX Companies Inc.'s T.J. Maxx data breach that exposed the payment information of thousands of customers in 2007. The incident resulted in $150 million in fraud losses, and much of it was pulled directly from customers' bank accounts. Although credit card users got their accounts straightened out and new cards were in the mail within a few days, the case created major problems for debit card holders, who waited an average of two to three months to get reimbursed, Abagnale says.
While debit card fraud is always a possibility, being careful where you use it can help keep your checking account balance out of the hands of criminals.
The idea that outdoor ATMs are among the most dangerous places to use a debit card seems a little bit absurd. But some ATMs present a perfect opportunity for thieves to skim users' debit cards, says Chris McGoey, a security consultant based in Los Angeles.
Skimming is the practice of capturing a bank customer's card information by running it through a machine that reads the card's magnetic strip. Those machines are often placed over the real card slots at ATMs and other card terminals.
"Any transaction you do outdoors at an open ATM is going to be higher risk exposure," McGoey says. "If the public has access to it, then someone has the ability to add skimming devices to it, position cameras on it and position themselves in a way where they could surveil it."
He says you're better off using an ATM inside a retail outlet or other high-trafficked, well-lit place.
Julie Conroy, research director at Aite Group LLC, a Boston-based financial services research firm, says even the card terminals that card users must swipe to get into ATM vestibules are being used as a skimming site by criminals. You can spot ATM skimmers by checking for ATM components that look beaten up or askew, she says.
Stealing PINs at gas stations
Gas stations are another danger zone for debit card use.
"You go to a gas station and you stick your debit card in there and you swipe it through a machine," Abagnale says. "I'm sitting across the street with a laptop and an antenna. I put a skimmer in there, and I'm picking up all the information. Before you even get home, I've debited your account."
Gas station payment terminals have many of the characteristics card fraudsters love, Conroy says.
"In a gas station, where you do have a whole bunch of pay-at-the-pump kinds of things and minimal supervision, it's pretty easy for a bad guy to put a skimming device on and put a little pinpoint camera there and compromise debit cards that way," Conroy says. Thieves often use small cameras to capture footage of debit card users entering their personal identification number, or PIN, so they can have free access to their money.
She says that even if the thief doesn't manage to get your debit card PIN from such a device, he still may be able to duplicate the card's magnetic strip and use it for "sign and swipe" Visa or MasterCard transactions.
With the high potential for fraud in pay-at-the-pump debit transactions, it might make sense to use an alternative such as cash or credit cards the next time you fill up.
The Web is a risky place
Debit cards are a convenient way to buy products online, especially for those who don't like to use credit cards. Unfortunately, the Web is one of the most dangerous places to make purchases, Conroy says.
"Online is the No. 1 place where consumers should not use their debit cards," she says. "It's susceptible at so many points. The consumer could have malware on their computer, so it could be at their endpoint that the data get compromised. It could be a man-in-the-middle attack where somebody is eavesdropping on their communications via the wireless network. And then at the other end, that data goes into a database at the merchant. As we've seen with some of the higher-profile breach events over the last year or so, that data is going to be vulnerable if (they're) not properly cared for."
Aside from the potential for hacking at many different points in a transaction, Abagnale says a fundamental problem with using debit cards online is that it's impossible to know who is handling your information.
"Buying stuff online, you have to be careful because you have to know who you're doing business with. When you buy things online, what always kills me about that is people say, 'This is a safe site,'" Abagnale says. "Who works there?"
Restaurants keeping customer data on file
"Would you care for a side of debit card fraud with that?"
Restaurant servers don't ask that question, but they might as well with the standard practice of taking customers' debit cards to run them behind closed doors.
"Any place where the card is out of hand" can increase the chances of fraud, says McGoey. "The guy comes to your table, takes your card and disappears for a while, so he or she has privacy," giving the person the opportunity to copy your card information.
Even restaurants without sit-down service can present a threat. Conroy says using debit cards to order delivery can be risky because cashiers tend to keep customer payment information on file. That may make future orders more convenient, but small businesses rarely take the steps necessary to safeguard payment information, she says.
Overall, she says, regardless of whether you use your debit card at a small restaurant or a big-box store, the possibility of fraud is always there. She cites the example of Michaels Stores Inc., which two and a half years ago saw its customers' debit card information stolen by debit card terminals doctored by thieves.
"Even if you do exercise caution ... there are still the Michaels-type incidents that will happen," Conroy says.
More from Bankrate.com
VIDEO ON MSN MONEY
Then, pray tell gentle sir, when the H. E. double L. I can use my debit card?
At a gas station you cannot
Nor ATM's you silly sot
You should not use them on Amazon.
You should not use them; now get this right
You should not use them to get a bite
They're all quite useless so it seems to say
Will all of you please go away?
Use a "dummy" card.. That's a prepaid card that has only the amount you wish to spend.
I been using one for the last 7 years.
My wife owns a nail salon, and she has had several instances where someone calls on the phone and asks about a credit card or debit card transaction. She tells them to come in to the salon and bring the card with them if they want to discuss and see the merchant copy of the transaction.
Little good it would do them anyway since the card numbers are X-ed out except for the last 4 digits. The complete transaction record is only available via the card processor and not at the merchant's site.
I like Paypal because it is safe and if something should go wrong with a transaction or if fraud is suspected they will usually resolve it for you. I have noticed that a lot of on line businesses don't use Paypal anymore which baffles me because it is safe. Why would they do away with something that isn't safe for the consumer?
Copyright © 2014 Microsoft. All rights reserved.
Fundamental company data and historical chart data provided by Morningstar Inc. Real-time index quotes and delayed quotes supplied by Morningstar Inc. Quotes delayed by up to 15 minutes, except where indicated otherwise. Fund summary, fund performance and dividend data provided by Morningstar Inc. Analyst recommendations provided by Zacks Investment Research. StockScouter data provided by Verus Analytics. IPO data provided by Hoover's Inc. Index membership data provided by Morningstar Inc.
RECENT ARTICLES ON CREDIT CARDS
CareerCast has released its list of jobs that really aren't as glamorous as they seem.