Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Security The Almighty Buck

Net Shoppers Bullied Into "Verified By Visa" Program 302

bluefoxlucid writes "According to The Register, several banks are forcing users to opt-in to the Verified by Visa optional service by locking their cards if and when they encounter a Verified by Visa participating site and fail to opt-in. Register reader Steve says, 'This seems like a strange way to implement a voluntary system. On most of the retailers' websites there is no clue that you are about to be challenged by Verified by Visa until you attempt to complete the transaction. This means that you trigger the "fraud protection" unintentionally. And when you have located a retailer who doesn't require Verified by Visa to complete a purchase, you can't because your account is on hold.' Further, '[I]n some cases resetting the password is all too easy. Fraudsters know this and go after these credentials which, once obtained, make it harder for consumers to deny responsibility for a fraudulent transaction. Phishing scams posing as Verified by Visa sites have sprung up targeting these login credentials.'"
This discussion has been archived. No new comments can be posted.

Net Shoppers Bullied Into "Verified By Visa" Program

Comments Filter:
  • by Anonymous Coward on Friday August 08, 2008 @01:21PM (#24528173)

    I notice my newegg transactions redirect through a verified by visa page at the end of the checkout transaction.

    I was never asked to opt in or provide a password or any other additional information or join anything.

    Not sure where the problem is on this side of the pond.

    Frankly, I'm cool with any additional security measures as long as I'm not forced into signing up special. And I assume all my personal info is already known by both newegg and visa.

  • Optional abuse (Score:4, Interesting)

    by gilbertopb ( 1286258 ) on Friday August 08, 2008 @01:22PM (#24528199) Homepage
    I was a costumer in my country, from a major nation bank who used these kind of "optional" verification service. If you don't accept the web service don't work to you. In this case, their site installed a java plugin and because this ALL my web urls was sent to the bank main server (!!!) to check if I was entering an "insecure site". I sent this info to the federal police and the Central Bank, and claimed as being a ilegal sniff processes and they (the bank) sent a group of lawyers to my house trying to force me to sign a paper where I must agree to won't use the site (the unique way to not install the plugin again) or migrating to Firefox with all kind of firewall (at my own effort) setings to lock the back IPs... When I read this kind of service happening, I just wander what kind of CEO that company has.
  • by spentrent ( 714542 ) on Friday August 08, 2008 @01:28PM (#24528293)

    Verified by Visa, 3D Secure, etc are GOOD for you.

    "Card not present" transactions -- and especially online payments -- are inherently risky. 3D Secure essentially makes your payments password protected.

    The dark side is that the card networks are pushing this so that they can move fraud liability from the merchants to the consumers.

  • Does Skype do this? (Score:5, Interesting)

    by ardle ( 523599 ) on Friday August 08, 2008 @01:37PM (#24528479)
    A few months ago, I tried to buy credit on the Skype website and was unable to bypass the "Verified by Visa" bit as I had in the past (it wasn't easy to do it then, either - I think it involved hitting the "back" and quickly copying a link before I was redirected to VBV again).
    I haven't been back since.
  • by iknowcss ( 937215 ) on Friday August 08, 2008 @01:38PM (#24528499) Homepage
    There isn't a good way for them to coordinate as their beloved 4chan is currently down. Never gonna run around and hurt you.
  • Verified not to work (Score:5, Interesting)

    by Fear13ss ( 917494 ) on Friday August 08, 2008 @01:44PM (#24528613)
    HAHA, Verified by Visa, such a joke... I have verified by visa on one of my accounts. I also like the thought of protecting myself where I can. So my browsing preference is Firefox + cookie whitelist + NoScript. That combination is enough to fully bypass Verified by Visa. A few months back I put in an order at NewEgg where I was challenged by the Verified by Visa system (which was not white listed for cookies or scripts) upon making the white list change to NoScript, the window refreshed and amazingly I had successfully completed the Verified by Visa Challenge (by allowing scripting on the page). Order went through without a hitch. Another satisfied customer (of NewEgg), if I was paying for Verified by Visa, I'd demand my money back.
  • by Anonymous Brave Guy ( 457657 ) on Friday August 08, 2008 @01:45PM (#24528649)

    I'm not so sure.

    I think all of my cards have switched to Mastercard now, but at least one of them was a Visa credit card until fairly recently. I came across this "Verified by Visa" thing out of the blue one day, having had no prior warning from either my card company or the merchant that I should expect it.

    So I did what any smart person does when a web browser surprisingly pops up a window they've never seen before and asks for their confidential information: I left the site immediately, cancelled that card and reset all my security details, and shopped elsewhere using a different payment method in the meantime. Both Visa and the merchant in question lost out on that one.

  • Re:Out on a limb (Score:2, Interesting)

    by The Dancing Panda ( 1321121 ) on Friday August 08, 2008 @01:53PM (#24528775)
    What exactly does buying locally help? My local economy? This is the same arguement that isolationists have against free trade, just on a smaller scale. Buying from the place that makes better things cheaper (IE: online, usually), while possibly hurting the local economy slightly on that one issue, helps the total economy even more.

    And hand made clothes? Seriously? What, do you kids wear knit sweaters everyday?
  • by gstoddart ( 321705 ) on Friday August 08, 2008 @01:56PM (#24528839) Homepage

    I've been using verified by visa for some time now, but every time I make a "large" purchase online, EVEN AFTER verifying my visa password, visa still puts a hold on my card and calls a few DAYS later if I don't call them first, asking me to verify my purchases... Tell me how useful that is?

    I had that happen to me a few months ago, but at the time I thought it was perfectly reasonable.

    I bought a digital SLR on-line (about $1200CDN). They have no history of me shopping on line (I usually don't), and a big purchase stuck out.

    The next night I was paying for dinner and the card was declined. Right away I knew I'd flagged their system and called them the next day.

    Personally, I kind of liked the fact that they're monitoring my account for atypical transactions. The alternative is much worse.

    I guess VISA and the merchants are in a tough place -- if they don't scrutinize stuff, they get defrauded. If they do, they might irritate customers as their security flags lock the account.

    Cheers

  • by Thelasko ( 1196535 ) on Friday August 08, 2008 @02:07PM (#24529015) Journal

    If Visa is going to behave badly, dump them.

    From TFA:

    "We like to support anything that aims to cut plastic fraud but Verified by Visa is flawed. MasterCard SecureCode works in much the same way and is no better," Goodwill added.

    Visa and Mastercard are a cartel. [cnn.com] If one screws over the customer, so does the other.

  • by olddotter ( 638430 ) on Friday August 08, 2008 @02:08PM (#24529027) Homepage

    BITE

    Seriously, while we live far from a legal utopia in the US, the little bits I have learned about banking laws and regulations in Europe make we amazed that those folks don't keep all their Euro's and pounds in their mattresses.

    It seems that often Europeans have no recourse against banking mistakes. But on the US side of the pond banks would rather take the losses from robbery than but in "unfriendly looking" security that might make customers feel uncomfortable. Hence they also take the loses on Fraud, identity theft, etc.

    And you wondered why your credit card charged 22% interest.

  • by cheezitmike ( 537630 ) on Friday August 08, 2008 @02:10PM (#24529055)
    "Verified by Visa" screwed up my Visa card a few months ago. My wife was purchasing airline tickets on-line and unexpectedly got to a "Verified by Visa" page during the checkout. This was the first time either of us had ever heard of or seen "Verified by Visa". Since I'm the primary cardholder, but the tickets were in her name, the Verified by Visa page denied my wife access (even though it's a joint account and we each have our own cards with our own names on them). Then our credit card account got locked for "fraud" (which I found out after calling customer service), so I couldn't even buy the tickets in my name.

    We ended up having to get a new card issued with a new number, which took a week, during which I had to make sure that nothing like Netflix auto-billed my old "locked for fraud" card number.
  • by osmodion ( 716658 ) on Friday August 08, 2008 @02:17PM (#24529211)
    I used to use disposable credit card numbers all the time. Occasionally I would give a friend without a credit card a one time use number so he could buy something online. By accident, he used the same number twice, after it was supposed to be invalid. The charge went through without a problem. These disposable numbers aren't nearly as safe as the banks make them out to be.
  • Re:Out on a limb (Score:3, Interesting)

    by roguetrick ( 1147853 ) <kazer@brIIIigands.org minus threevowels> on Friday August 08, 2008 @02:28PM (#24529399) Homepage Journal

    I do have one objection, while I hate Wal-mart for other reasons they actually pay good wages for the work(I've worked for them out of desperation for temporary work and got 9.90 an hour starting and well above minimum wage.)

    Regardless, railing against trade is just silly and misinformed, there's a reason we've been doing it for so damn long, and in general it is mutually benefiting.

  • Re:Out on a limb (Score:1, Interesting)

    by Anonymous Coward on Friday August 08, 2008 @02:33PM (#24529499)

    I think you're missed something.

    1. Wal-mart doesn't bring money into your community, it pays minimum wage and the money goes to the shareholders. A purchase at wal-mart is a geographically local purchase ... but not an economic one.

    I really hate to defend Wal-Marx, I'm gonna feel dirty after this one, but in this case I sadly feel a need to. I work at a counter, selling cell phones for much less then the cell phone stores and make much more then minimum wage. $12/hour to stand around chatting is rather nice. Hell, even the cashiers make more then minimum wage. The only ones that make that are maybe the door greeters.

    Also, we donate a lot of money to the local community and events.

    Product that would normally be thrown out because it's damaged is donated to local non-profit groups. Torn bags of diapers are donated to local womans shelters as are clothes that might have a small ink mark or something. Torn bags of pet food are donated to local ASPCA branches to distribute. These are just examples, much more is done.

    Is Wally World perfect? Hell no! Management is inept and the few good ones are moved around the store before they can fix the problems. The health care kinda sucks. The company headquarters treats you dirt. But hell, it beats working for Target (nice clean store but with a company that makes Wal-Marx look employee friendly)

  • Amex rules (Score:1, Interesting)

    by Anonymous Coward on Friday August 08, 2008 @02:52PM (#24529821)

    This is the reason I threw away my Visa and took Mastercard and Amex instead. I had my card stopped three time. Now I earn more reward points on my Amex than any card I had previously.

  • Re:Out on a limb (Score:3, Interesting)

    by DrgnDancer ( 137700 ) on Friday August 08, 2008 @03:12PM (#24530197) Homepage

    Well, assuming you're really buying locally (as in, buying locally grown, locally made products) it's reducing the carbon footprint of the purchase astronomically. Even buying from a "local" big box store helps this to some extent. Walmart and Best Buy ship their products very efficiently compared to the "Mail one box to your house" method used for online purchases. Think about it:

    1) Grown/make a item yourself- zero gas or oil used in shipment
    2) Item grown/made locally- Only fuel needed to get it from local producer to local market needed
    3) Item grown/made far away, bought at local store- fuel needed for maximum efficient shipment fro producer to store (potentially a lot)
    4) Item grown/made far away, bought online- Same as three (the stuff had to get to the warehouse), plus the fuel needed to get it from the warehouse to your door in a single items shipping container.

    It's not a perfect analogy, I might actually be saving fuel overall if I buy online directly from the manufacturer. Especially if the manufacturer is a small "local" business in a another locality, but in general buying online is the least fuel efficient way to get a product.

  • by Jah-Wren Ryel ( 80510 ) on Friday August 08, 2008 @03:37PM (#24530589)

    Personally, I kind of liked the fact that they're monitoring my account for atypical transactions. The alternative is much worse.

    No it's not. At least not for you, it is for the bank, which is why I get annoyed every time they say "for your protection" - uh, uh it is for THEIR protection and they shouldn't patronize me by lying about it.

    Absolute worst case, you end up losing $50 - that's federal law. In almost all cases, the bank waives that fee so that you owe nothing - they or the merchant that took the fraudulent transaction are on the hook. Now compare that to a situation in which you absolutely need your credit card to work and any delay or hassle could screw things up - last minute plane tickets, car repairs during an interstate road trip, paying for a night out with a girl you really want to impress, getting in a very short term sale price, etc.

    I have experienced the same thing as "smallshot" describes too many times. How stupid is it that you just authenticated with a username and password immediately before making the transaction and then they want you to authenticate over the phone using weaker credentials like billing address, the size of your last bill, etc - ALL information that anyone who has your username and password can look up the bank's website? One time I actually logged in while they were on the phone and read the information off their own website back to them because I couldn't remember the size of my last monthly bill.

  • by cshay ( 79326 ) on Friday August 08, 2008 @04:06PM (#24531063)
    ..so I don't think wriggling out of legal liability is the reason for this. This is about them cutting their losses due to theft.
  • by Anonymous Coward on Friday August 08, 2008 @04:17PM (#24531221)

    Also, I like the fact my card is clear!

    Great, and as a business owner I despise you. AMEX holds money for 2 weeks before paying me. So does Discover.

    That's why I don't take either one, publicly.

  • Re:Out on a limb (Score:2, Interesting)

    by aperion ( 1022267 ) on Friday August 08, 2008 @04:37PM (#24531537)

    If it is more efficient to buy from a "local" big box store because they ship the product very efficiently. Then wouldn't it also be better to buy produce from the local supermarket because they can ship the product very efficiently, rather than every local farmer driving to the local farmers market, or worse yet every consumer driving out to the local farm?

    The same logic of efficient shipping would apply to online stores as well, the shipping companies are probably very efficient as well. And instead every person taking a trip to the "local" big box store you have one truck delivery many boxes to many customers. Say you have 100 people who need goods, they live an average of 5 miles from the store, that's 500 miles. the local box box stores are more than 5 miles away for me. How far would 1 truck have to drive to deliver the same 100 packages? if the cars averaged 25 mpg and the truck 5 (probably better for a delivery truck) then the truck would be more efficient if it drive less than 100 miles, which IMO sounds very reasonable.

    I mean, it's not like there is one truck per customer driving all the way from the companies head quarters. They use services like UPS who's job is to ship packages, if they don't do it efficiently they loose business.

    Of course I am playing devils advocate, me and my wife try to buy most of our produce from the local farmers market (every Saturday), it's fresher, tastes better and there is a sense of community.

  • by Anonymous Coward on Friday August 08, 2008 @05:00PM (#24531805)

    Costs of recovering from a $10 000 fraud shared among a million card holders is much less painful for each card holder than the cost of recovering from a $10 000 fraud borne by a single card holder. This is a simple actuarial proposition. On top of that, because of economies of scale (in-house legal counsel, in-house anti-fraud staff, contracts with collections agencies, etc.) the odds of substantially recovering from any fraud are greater for the card issuer than for any single card holder.

    Moreover, dropping the risk into the lap of the card issuer provides an incentive for better knowing their own merchant customers.

    I think that a strong and essentially no-fault protection insurance package for cardholders would be very popular if set at a price not too far from the cost of servicing the policies for all cardholders. This is essentially what is bundled in, by statute, or by local customary business practices, in many markets around the world.

    In fact, it is popular enough in markets in which the cardholder faces a large fraud risk, that third parties (who are often partially owned by the transaction brokers or credit issuers or both) often sell explicit insurance packages at a substantial profit.

    It is the consumer (and taxpayer) who faces the ultimate cost of fraud. All costs of recovering from fraud are passed down through increased fees or taxes to cover legal costs, court fees, judgement enforcement costs, criminal investigations and prosecutions, and the loss of probably taxable wealth from the defrauded to the likely tax-evading (or overseas!) fraudsters.

    So you're right that costs are pushed downards. You are wrong in thinking that not "pseudo-socializing" the risk by putting risk on the transaction brokers and card issuers is really more economically efficient.

  • by icknay ( 96963 ) on Friday August 08, 2008 @09:49PM (#24534215)

    You said it! VbV may be imperfect but compared to the zillions of stories about identify theft etc. at least it's a technical attempt to improve the situation. Bruce Schneier has said that the key step to improving credit card payment is looping the transaction security through the banks (Visa) not the merchant, and that's what this looks like.

    I for one would pay more for a card that came with a secureID card or used my cell phone or something else for savvy consumer to confirm transactions. Even though I'm not liable for fraud ultimately, the idea of the fraud just annoys the crap out of me and I'm game to pay to make it harder for the fraudster.

  • by MikeFM ( 12491 ) on Saturday August 09, 2008 @03:53AM (#24535709) Homepage Journal

    They don't pay anyway - the merchant does. If someone buys a product on your card and you report it stolen or fraud then they charge it back to the merchant most of the time. The customer may get their money back but the merchant ends up out a product.

    Especially fun if you have a customer buy something big and then report it as fraud. "I ordered an iPod and all they sent me was this cheap knock-off!" Unless you're WalMart they get their cash back and you're out the iPod.

    I hate dealing with credit cards and PayPal. I wish the freaking government would just do the right thing and offer a usable Internet-friendly currency.

"What man has done, man can aspire to do." -- Jerry Pournelle, about space flight

Working...