ATMs or EFTPOS machines can be tampered with to copy the magnetic strip on your card and record the PIN you enter. Fraudsters can then create a counterfeit card and withdraw cash from your account.
Many phishing emails try to get you to click a button or link that takes you to a familiar-looking fraudulent site to enter your account information. Phishing emails may also prompt you to click a link or download a file containing spyware, which hackers can use to export your card details and other information.
But like credit cards, debit cards are vulnerable to rip-off artists. And debit card fraud is particularly scary because thieves can withdraw money directly from your checking account. Here's how debit fraud happens and how to protect yourself.
Fraudsters can get ahold of your card details in a few different ways—one of them being through an ATM card skimming device. Nefarious parties can also gain access to old bank statements or debit cards, or direct you to make a payment on a fraudulent website that collects your details.
Fraudsters can still use your debit card even if they don't have the card itself. They don't even need your PIN—just your card number. If you've used your debit card for an off-line transaction (a transaction without your PIN), your receipt will show your full debit card number.
Remember: Neither a lock or freeze can protect your current accounts from scammers. It can only stop anyone from opening new accounts or lines of credit in your name. To protect your bank account, credit card, and other financial accounts, consider a credit monitoring service.
But if someone has accessed your credit card or debit card information online and they are trying to make a purchase, retailers won't allow those purchases to go through if they don't also have your card's CVV number. For all Visa, MasterCard, and Discover credit and debit cards, your CVV number is three digits.
Debit card fraud occurs when a thief accesses your card or PIN number and makes unauthorized transactions. The easiest way to spot debit card fraud is to sign up for online banking and monitor your account for suspicious activity.
How to spot it: Check your credit card or bank statement when you get it. Look for purchases or withdrawals you didn't make. Bonus advice: Sign up to get text or email alerts from your credit card or bank whenever there's a new transaction. This could help you spot unauthorized or fraudulent activity on your account.
Using card skimmers or shimmers
Thieves install skimmers on ATMs, gas pumps, and other publicly available card readers. Shimmers are the natural evolution of card skimmers. But instead of stealing data from your card's magnetic strip, they go inside the reader and steal your chip information.
If the transactions are verified as unauthorized, the money is usually refunded to you within three business days. After you report a compromised debit card, the bank may close your checking account and issue you a new debit card to use going forward.
Can You Track Someone Who Used Your Credit Card Online? No. However, if you report the fraud in a timely manner, the bank or card issuer will open an investigation. Banks have a system for investigating credit card fraud, including some standard procedures.
Card details – card number, card holder name, date of birth and address - are stolen, often from online databases or through email scams, then sold and used on the internet, or over the phone. This is often called 'card-not-present' fraud.
If someone has used your card in a store or online, you're covered under the Payment Services Regulations. The regulations state you must be refunded immediately if you've had money taken from your account without your permission.
Skimming happens when there is a false device installed illegally onto an ATM to steal card data by the users of the ATM machine. The PIN number for the card can also be stolen with the use of a key-logging device placed over the key pad or installing an unauthorized camera to spy on the PIN being typed in.
The bottom line. From a legal perspective, credit cards generally provide more protection against fraudulent activity. But, there are ways to mimic some of these protections with a debit or prepaid card. Deciding which is best for you will help protect your money whether you're spending online or swiping in store.
Is it possible for someone to use your debit or credit card with just the card number and the CVV? Yes, this type of fraud is known as "card-not-present" fraud, as the thief does not have possession of the physical card.
You must not confuse CVV in ATM cards with the ATM PIN (Personal Identification Number). You need not enter the CVV at ATMs for cash withdrawals, balance checks, PIN changes, etc. But, you need CVV for online payments or swiping cards. On the other hand, ATM transactions require an ATM PIN.
Handing over your CVV for purchases completed offline is risky, because it gives someone the opportunity to steal that information. With your CVV code, they would have everything they need to make fraudulent online transactions in your name. When making in-person purchases, do not give out your CVV code.
If you notice any suspicious activity on your card or realize your card is lost or stolen, then call your issuer immediately to suspend your account and issue you a new card with a new number. Some card issuers allow you to do this through their app, too. You can also ask about your liability.
The bottom line
Locking a credit card prevents anyone from making new purchases on your credit card, and you can use credit card locks to keep your account safe, prevent impulse shopping or stick to a monthly budget. In most cases, getting a card lock in place only stops new purchases.
If I have a pending transaction when I freeze my card, will the transaction be paid? Yes. Transactions which have already been authorised will clear. It is only from the point that the lock is put in place that a initiated transaction will be declined.