16 Sep 2011 15:24:50
How's about this:
When you pay for something over the phone with a card, they 3 main things they ask for are:
Exp. date, long card number, 3 digit security code on the back.
Sometimes, they ask for:
Exp. date, start date, long card number, 3 dig code, name as it appears on the card.
In this scenario the individual taking the details now hs the complete ability to use that card on any website and spend your money. That is crazy. And you have just given them the 1 code which should be almost as private as your PI, if not for the fact that you have to reveal when you make a payment (yourself) : your 3 digit security code.
Surely this should not be the case? These codes were not always in existence, and no they are, hey are meant to be so that you can prove you are in possession of the card.
I just paid Gladstone Brookes for my PPI rebate and they asked me for those details, as have plenty of other companies, and it strikes me as very very odd.
They only technically need 3 things:
The card number, the expiry date, your name on the card. This time they didn't even ask me my name on the card.
The whole system, to me, is very flawed in terms of genuine security.
Raz
DRR