[153647] in North American Network Operators' Group
Re: CVV numbers
daemon@ATHENA.MIT.EDU (Jay Ashworth)
Sat Jun 9 16:36:26 2012
Date: Sat, 9 Jun 2012 16:36:11 -0400 (EDT)
From: Jay Ashworth <jra@baylink.com>
To: NANOG <nanog@nanog.org>
In-Reply-To: <5E216124-6B0C-4828-91C9-CDBD2AD39DD7@delong.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
----- Original Message -----
> From: "Owen DeLong" <owen@delong.com>
> How does having the CVV number prove the card is in my possession?
>
> I have memorized the CVV in addition to the 16 digits of the cards I
> commonly use and routinely enter them into online ordering without
> retrieving the card.
>
> What prevents a fraudster from writing the CVV down along with the
> other card data?
Nothing, but lots of fraud scenarios don't involve a bad actor taking
physical posession of your card: magstripe skimmers and charge-slip
carbons being only 2 off-hand examples. Clearly, the percentage of fraud
it blocks is more than the amount it costs.
Cheers,
-- jra
--
Jay R. Ashworth Baylink jra@baylink.com
Designer The Things I Think RFC 2100
Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII
St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274
