FlyerTalk Forums

FlyerTalk Forums (https://www.flyertalk.com/forum/index.php)
-   Credit Card Programs (https://www.flyertalk.com/forum/credit-card-programs-599/)
-   -   USA contactless credit/debit/transit (2014-2016) (https://www.flyertalk.com/forum/credit-card-programs/1612349-usa-contactless-credit-debit-transit-2014-2016-a.html)

RedLight2015 Feb 17, 2015 6:53 pm


Originally Posted by wco81 (Post 24369161)
What happened to the tokens being temporary and being useless after one transaction?

Yet Apple Pay gives out the DANs to merchants and the DANs can be used for fraud?

Without having the name of the account holder or the CVC?

They can't be used for fraud, but they can still be stolen because the merchant's systems are designed to save the number. The dynamic CVV is what is generated each time it is used. You can't do anything with just the DAN anyways, but the bank will still warn you if a data breach happens.

lclaman Feb 19, 2015 8:15 am

(I am the poster who experienced the Apple Pay fraud alert).

They can't be used for fraud, but they can still be stolen because the merchant's systems are designed to save the number.
Well, one of the transactions that I was alerted about by Cap1 is now showing online as a valid transaction! This transaction shows a $5 purchase at the vending company on 2/17, which I absolutely did not make. So even if a DAN can't be used elsewhere, it appears it can be re-run by the merchant, legitimately or not (in this case, not!)

AllieKat Feb 19, 2015 8:22 am


Originally Posted by lclaman (Post 24378363)
(I am the poster who experienced the Apple Pay fraud alert).
They can't be used for fraud, but they can still be stolen because the merchant's systems are designed to save the number.
Well, one of the transactions that I was alerted about by Cap1 is now showing online as a valid transaction! This transaction shows a $5 purchase at the vending company on 2/17, which I absolutely did not make. So even if a DAN can't be used elsewhere, it appears it can be re-run by the merchant, legitimately or not (in this case, not!)

That's no surprise and to be honest I wouldn't even be shocked if the data can be used elsewhere. There are a LOT of issuer implementation issues with even contact EMV chip transactions. One bank lost a large amount a few months ago by authorising EMV transactions with totally bogus cryptograms. The technology is pretty secure but it's only as secure as the issue's system's actual checking the data submitted is valid.

On another topic, I was able to request a contactless Delta card last night. We shall see if it actually exists but the request reason given online is "CONVERT TO C AND S + CONTACTLESS"

reclusive46 Feb 19, 2015 1:14 pm


Originally Posted by AllieKat (Post 24378397)
That's no surprise and to be honest I wouldn't even be shocked if the data can be used elsewhere. There are a LOT of issuer implementation issues with even contact EMV chip transactions. One bank lost a large amount a few months ago by authorising EMV transactions with totally bogus cryptograms. The technology is pretty secure but it's only as secure as the issue's system's actual checking the data submitted is valid.

On another topic, I was able to request a contactless Delta card last night. We shall see if it actually exists but the request reason given online is "CONVERT TO C AND S + CONTACTLESS"

Agreed. Issuers need to be careful with settings. On the case you mentioned though was even worse, The banks systems were down and MasterCard processed them on their behalf! Its shocking the payment network can't even get it right.

reclusive46 Feb 19, 2015 2:52 pm


Originally Posted by AllieKat (Post 24378397)

On another topic, I was able to request a contactless Delta card last night. We shall see if it actually exists but the request reason given online is "CONVERT TO C AND S + CONTACTLESS"

That looks promising anyway. When in Europe don't expect the contactless to work perfectly. While 85%+ of UK terminals (Pretty much all small businesses terminals) now take Amex contactless most in the rest of Europe do not. Although the same could be said for contact chip I suppose. One or two big retailers I know of here don't even take Amex contact chip (Just magnetic stripe).

AllieKat Feb 19, 2015 3:03 pm


Originally Posted by reclusive46 (Post 24380594)
That looks promising anyway. When in Europe don't expect the contactless to work perfectly. While 85%+ of UK terminals (Pretty much all small businesses terminals) now take Amex contactless most in the rest of Europe do not. Although the same could be said for contact chip I suppose. One or two big retailers I know of here don't even take Amex contact chip (Just magnetic stripe).

I don't think it will work. I've already been told on the Amex Community forums that they don't know what will happen but that the contactless Delta card doesn't exist so I won't be getting one.

What big retailers in the UK swipe Amex?

reclusive46 Feb 19, 2015 3:07 pm


Originally Posted by AllieKat (Post 24380658)
I don't think it will work. I've already been told on the Amex Community forums that they don't know what will happen but that the contactless Delta card doesn't exist so I won't be getting one.

What big retailers in the UK swipe Amex?

Wilkinsons and Starbucks (On some terminals) and in the KFCs that take it. Interestingly I've noticed Amex is swiped in Canada in Starbucks as well. Some Waitrose have trouble with the chips on Third party Amex cards using the different AID and it results in a swipe being done.

Wilkinson only just started taking the card (Just before Christmas), so its probably do with them not being able to update their POS terminals remotely, to take Amex chip.

AllieKat Feb 19, 2015 3:13 pm


Originally Posted by reclusive46 (Post 24380675)
Wilkinsons and Starbucks (On some terminals) and in the KFCs that take it. Interestingly I've noticed Amex is swiped in Canada in Starbucks as well. Some Waitrose have trouble with the chips on Third party Amex cards using the different AID and it results in a swipe being done.

Wilkinson only just started taking the card (Just before Christmas), so its probably do with them not being able to update their POS terminals remotely, to take Amex chip.

Interesting. I've never used my Amex at a UK Starbucks because I like earning stars. I've used it at Dutch Starbucks with no issue though (they don't accept Starbucks Cards)

reclusive46 Feb 19, 2015 3:15 pm


Originally Posted by AllieKat (Post 24380702)
Interesting. I've never used my Amex at a UK Starbucks because I like earning stars. I've used it at Dutch Starbucks with no issue though (they don't accept Starbucks Cards)

Yeah, its a bit hit and miss. I was just double checking my wallet and found a receipt for Starbucks.

http://i60.tinypic.com/inelpx.png

As you can its not even processed as fallback so they must be taking fraud liability but I doubt its much of a problem for the low value transactions they take.

jbarm Feb 19, 2015 4:03 pm


Originally Posted by jamar (Post 24364133)
My PayPass sticker came automatically with my redesigned card after it expired, but the sticker still looks like the old card, so it could be that they don't want to do it anymore.

I just made my fourth request (yes, I am persistent) for a Citi PayPass sticker.

After my first three requests I have received a total of 4 new regular credit cards with no PayPass sticker provided (I only requested the sticker, they just kept sending me a new card). CSR's and Supervisors seem stumped as to why I am not getting the PayPass sticker.

Item is not supposed to be discontinued, but difficulty in getting the PayPass sticker seems to indicate how popular it is.

Perhaps 4th time is the charm?

jb

tmiw Feb 19, 2015 10:18 pm

My LoopPay fob arrived in the mail today:

http://i.imgur.com/A1kZCxVt.jpg http://i.imgur.com/igE5lkHt.jpg http://i.imgur.com/WjZOHa4t.jpg http://i.imgur.com/j74zpAlt.jpg

I find it a bit amusing that they have a picture of a EMV supporting Verifone terminal on the back of the box. :p

Anyway, I set up one of my EMV cards with it and tried using it with my USB magstripe reader. I had a lot of trouble getting it to receive Track 1 from the fob but from what I can tell it basically uses the exact same data for both tracks as what was swiped into the thing (sans trailing whitespace in the cardholder's name). Of course, this does mean that this thing will become more useless as EMV gets turned on, but I imagine this might still be okay for stuff like loyalty/gift cards and possibly hotel keys. I half expected them to change the service code but that probably would have caused problems with declines.

BTW, you want to look for the "LoopPay" app in the App Store/Google Play, not "LoopWallet" as the box claims. I almost thought that I ended up with a useless dud in light of their recent acquisition by Samsung before I found the companion app.

AllieKat Feb 19, 2015 10:40 pm


Originally Posted by tmiw (Post 24382486)
My LoopPay fob arrived in the mail today:

http://i.imgur.com/A1kZCxVt.jpg http://i.imgur.com/igE5lkHt.jpg http://i.imgur.com/WjZOHa4t.jpg http://i.imgur.com/j74zpAlt.jpg

I find it a bit amusing that they have a picture of a EMV supporting Verifone terminal on the back of the box. :p

Anyway, I set up one of my EMV cards with it and tried using it with my USB magstripe reader. I had a lot of trouble getting it to receive Track 1 from the fob but from what I can tell it basically uses the exact same data for both tracks as what was swiped into the thing (sans trailing whitespace in the cardholder's name). Of course, this does mean that this thing will become more useless as EMV gets turned on, but I imagine this might still be okay for stuff like loyalty/gift cards and possibly hotel keys. I half expected them to change the service code but that probably would have caused problems with declines.

BTW, you want to look for the "LoopPay" app in the App Store/Google Play, not "LoopWallet" as the box claims. I almost thought that I ended up with a useless dud in light of their recent acquisition by Samsung before I found the companion app.

I got mine today too. I intended to use it for my room key and my student ID card. It will not allow either one, rendering it pointless. I'm quite upset about it.

Lyolik Feb 20, 2015 2:05 am


Originally Posted by lclaman (Post 24378363)
Well, one of the transactions that I was alerted about by Cap1 is now showing online as a valid transaction! This transaction shows a $5 purchase at the vending company on 2/17, which I absolutely did not make. So even if a DAN can't be used elsewhere, it appears it can be re-run by the merchant, legitimately or not (in this case, not!)

It is the recursive transaction only, not more. ;)
The recursive transactions are not the problem of ApplePay technology. These are the common problem of the payment technologies. You should ask the issuer to set the chargebacks for such transactions.

lclaman Feb 20, 2015 3:04 pm


Originally Posted by Lyolik (Post 24383052)
It is the recursive transaction only, not more.

Um, I have no idea what a recursive transaction is. Can someone explain?

jbarm Feb 20, 2015 7:03 pm


Originally Posted by jbarm (Post 24380992)
I just made my fourth request (yes, I am persistent) for a Citi PayPass sticker.

After my first three requests I have received a total of 4 new regular credit cards with no PayPass sticker provided (I only requested the sticker, they just kept sending me a new card). CSR's and Supervisors seem stumped as to why I am not getting the PayPass sticker.

Item is not supposed to be discontinued, but difficulty in getting the PayPass sticker seems to indicate how popular it is.

Perhaps 4th time is the charm?

jb

Just received a FedEx from Citi that was supposed to be my new PayPass sticker. Got my fifth ordinary Citi AA card instead.

Citi has either discontinued the PayPass product with the AAdvantage card in the US or their fulfillment system is seriously broken.

Update: After my fifth try the CSR informed me that Citi AA Platinum card does not come with a PayPass sticker.

Great job Citi!


All times are GMT -6. The time now is 7:17 pm.


This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.