Also, the chips aren’t that much better than the stripe. It’s harder to clone the chip and much harder to do en masse, but far from impossible. On top of that, the measure that is supposed to prevent cloning from being viable is almost never actually required, that being the PIN.
It’s called “Chip and PIN” for a reason. It’s a 2FA system where one of the factors just isn’t required and the other can be readily compromised. It’s baffling how we have a functioning system for digital payments when seemingly no one is willing to properly implement and then use a secure standard.
I travelled to the US from Canada recently and was super confused when I didn’t need to enter my PIN. Was also really confused about giving away my credit card to bartenders
At least credit cards are… on credit. You can usually just stop a transaction if someone makes unauthorised use of your credit card. If this also happens with debit cards, your in more trouble. Than the money is just gone.
Also, the chips aren’t that much better than the stripe. It’s harder to clone the chip and much harder to do en masse, but far from impossible. On top of that, the measure that is supposed to prevent cloning from being viable is almost never actually required, that being the PIN.
It’s called “Chip and PIN” for a reason. It’s a 2FA system where one of the factors just isn’t required and the other can be readily compromised. It’s baffling how we have a functioning system for digital payments when seemingly no one is willing to properly implement and then use a secure standard.
I travelled to the US from Canada recently and was super confused when I didn’t need to enter my PIN. Was also really confused about giving away my credit card to bartenders
At least credit cards are… on credit. You can usually just stop a transaction if someone makes unauthorised use of your credit card. If this also happens with debit cards, your in more trouble. Than the money is just gone.
Fortunately in the US debit does generally require the PIN and always has even before chips.
Tap to pay is much safer though.