Debit and ATM cards: Risks/trade-offs
← Older revision
Revision as of 03:34, 21 December 2014
(One intermediate revision by the same user not shown)
Line 56:
Line 56:
** You may have to get international ATM support specifically activated for your debit or credit card.
** You may have to get international ATM support specifically activated for your debit or credit card.
* Make note of the '''telephone numbers and''' any Internet '''URLs''' on the back of each card you'll take, e.g., scan them or write them down. They will be '''crucial to notify your bank if any card is lost or compromised'''. Keep those notes where easily accessed, but not where they would be lost if any card is lost.
* Make note of the '''telephone numbers and''' any Internet '''URLs''' on the back of each card you'll take, e.g., scan them or write them down. They will be '''crucial to notify your bank if any card is lost or compromised'''. Keep those notes where easily accessed, but not where they would be lost if any card is lost.
−
* Travel with one primary debit or credit card as well as a backup card from a different issuer, in case you have trouble with your primary card. Clear your wallet of additional credit or debit cards -- these will only cause you more headaches if your wallet is lost or out of your control. Also, carry around only the card you will usually be using and
to
keep the backup cards in a safe location, e.g., where you are staying.
+
* Travel with one primary debit or credit card as well as a backup card from a different issuer, in case you have trouble with your primary card. Clear your wallet of additional credit or debit cards -- these will only cause you more headaches if your wallet is lost or out of your control. Also, carry around only the card you will usually be using and keep the backup cards in a safe location, e.g.,
in a safe
where you are staying.
−
* '''Be sure you know the Personal Identification Number (PIN)''' for each of your debit and credit cards in case of an emergency. Many people find they cannot access cash using their card because they forget the PIN code. However, '''never write down any PIN on or store it near the card it activates'''; you risk having your account wiped-out, with the bank questioning its liability due to your negligence
. PIN code lengths vary from country to country, but up to six digits are usually accepted anywhere on the Plus/Cirrus networks. If you have a six-digit PIN and six digits don't work, try entering just the first four numbers of your PIN, or find another ATM. If the ATM requires 6 digits and you have only 4 digits in your PIN, try entering 00 as the last two digits. If your PIN is "word-based" know its numeric equivalent. Many ATMs outside the USA have no letters to correspond with the numbers. (example: "CASH" = 2274) Change your PIN ''before'' departure if it will make your PIN digits easier to remember...but not so simple that a criminal can "guess" it by experimenting
.
+
* '''Be sure you know the Personal Identification Number (PIN)''' for each of your debit and credit cards in case of an emergency. Many people find they cannot access cash using their card because they forget the PIN code. However, '''never write down any PIN on or store it near the card it activates'''; you risk having your account wiped-out, with the bank questioning its liability due to your negligence.
−
*
In
most
countries
,
you
are
not
responsible
for
any
expenses
made
on
your
debit
and
credit
card
that
occur
after
you
report
it
lost
or
stolen.
Make
sure
you
'''report
any
loss
or
suspected
compromise
immediately'''
.
As
above,
place
your
bank
phone
numbers
and
debit/credit
card
numbers
in
a safe
place
,
e.g.,
room
safe
or
hotel
safety
deposit
box
.
+
*
*
PIN
code
lengths vary from country to country
,
but
up
to
six
digits
are
usually
accepted anywhere
on
the
Plus/Cirrus
networks.
If
you
have
a
six-digit
PIN
and
six
digits
don't
work,
try
entering
just
the
first
four numbers of your PIN,
or
find
another
ATM
.
If
the
ATM
requires
6
digits
and
you
have
only
4
digits
in
your
PIN
,
try
entering
00
as
the
last
two
digits
.
−
*
Use
of
credit
and
debit
cards
is
not
recommended
in
a
few
countries
due
to
high
potential
for
fraudulent
misuse,
e
.
g
.
Nigeria
.
Your
bank
should
be
able
to
advise
you
.
+
*
*
If
your
PIN
is
"word-based"
know
its
numeric
equivalent.
Many
ATMs
outside
the USA have no letters
to
correspond
with
the
numbers.
(example:
"CASH" = 2274) Change your PIN ''before'' departure if it will make your PIN digits easier to remember
...
but
not
so
simple
that
a
criminal can "guess" it
by
experimenting
.
+
+
By law in most countries, you are not responsible for any expenses made on your debit and credit card that occur after you report it lost or stolen. Make sure you '''report any loss or suspected compromise immediately'''. Use of credit and debit cards is not recommended in a few countries due to high potential for fraudulent misuse, e.g. Nigeria. Your bank should be able to advise you.
Most credit cards issued in [[Europe]], [[Australia]] or [[Canada]] feature a '''chip and PIN''' system, where credit cards all have a chip built in and you have to type your PIN code into a reader instead of signing a receipt. This has recently been mandated for U.S. card issuers and merchants by late 2015. Such cards and merchant/ATM card-readers are becoming increasingly seen. Some may initially operate with or without a PIN and securely generate a merchant receipt for your signature.
Most credit cards issued in [[Europe]], [[Australia]] or [[Canada]] feature a '''chip and PIN''' system, where credit cards all have a chip built in and you have to type your PIN code into a reader instead of signing a receipt. This has recently been mandated for U.S. card issuers and merchants by late 2015. Such cards and merchant/ATM card-readers are becoming increasingly seen. Some may initially operate with or without a PIN and securely generate a merchant receipt for your signature.
* All stores that display the VISA, MasterCard, or American Express logos must also accept the swipe-and-sign version of the credit cards; however, some may initially refuse to do so (be persistent, asking for the manager if necessary). However, with self-service vendors such gas pumps and ticket vending machines, you may be out of luck.
* All stores that display the VISA, MasterCard, or American Express logos must also accept the swipe-and-sign version of the credit cards; however, some may initially refuse to do so (be persistent, asking for the manager if necessary). However, with self-service vendors such gas pumps and ticket vending machines, you may be out of luck.
−
* The chips on some cards include radio frequency identification (RFID). Unfortunately, '''many RFID chips have inadequate security''', e.g., allowing a nearby wireless scanner to "read" data the card/chip holds;
that
can include personal and financial information. (This has spawned a sub-industry in RFID-protected wallets for cards and passports.) Learn from each issuer just how secure your cards are, and carry and protect them accordingly.
+
* The chips on some cards include radio frequency identification (RFID). Unfortunately, '''many RFID chips have inadequate security''', e.g., allowing a nearby wireless scanner to "read" data the card/chip holds;
it
can include personal and financial information. (This has spawned a sub-industry in RFID-protected wallets for cards and passports.) Learn from each issuer just how secure your cards are, and carry and protect them accordingly.
−
Many Visa or Mastercard debit cards (mostly issued by banks in Asia) are not embossed (no raised letters/numbers), hence they are indicated as "For Electronic Use Only." This means that they can't be used for transactions that require physically imprinting on a merchant's charge slip and/or manual authorization. Acceptance of these "Electronic Use Only" debit cards for online purchases may not be guaranteed even with sufficient funds, and may need clarification with the issuing bank. Consult the issuing bank about how to effectively use
one
.
+
Many Visa or Mastercard debit cards (mostly issued by banks in Asia) are not embossed (no raised letters/numbers), hence they are indicated as "For Electronic Use Only." This means that they can't be used for transactions that require physically imprinting on a merchant's charge slip and/or manual authorization. Acceptance of these "Electronic Use Only" debit cards for online purchases may not be guaranteed even with sufficient funds, and may need clarification with the issuing bank. Consult the issuing bank about how to effectively use
the card if going somewhere you've not yet used it
.
Some hotels and car rental companies put a funds "hold" on your credit card for a considerably larger amount than the amount of your charge. A $100 car rental can render a card with a $3000 credit limit useless if the car rental agency puts a hold on an excess amount for the full $3000. Keep track of these amounts, and try to make sure your credit limit is considerably in excess of the amount you intend to spend.
Some hotels and car rental companies put a funds "hold" on your credit card for a considerably larger amount than the amount of your charge. A $100 car rental can render a card with a $3000 credit limit useless if the car rental agency puts a hold on an excess amount for the full $3000. Keep track of these amounts, and try to make sure your credit limit is considerably in excess of the amount you intend to spend.
−
Hotels
are
often
problematic for refusing to remove a "hold" even long after
the client checks
out, even though it can take weeks for an unneeded authorization to expire on its own. Hotels that refuse cash, travelers checks or any payment medium except a credit card are to be treated with caution; they may leave you open both to hidden charges and holds which tie up your available limit unnecessarily. "Cardlock" (pay at the pump) fuel pumps will attempt authorization for at least $75-100 even when a lesser amount of fuel is requested; this can be avoided by having the attendant process a transaction manually. Restaurants are also known to process authorizations (not charges, but a brief "hold" nonetheless) for more than the purchase price as their operators feel they are entitled to a (usually 15%) tip. All of this activity may cause valid transactions to fail on low-limit cards as the money is there but tied up with unjustified holds.
+
Miscellaneous
cautions:
Some hotels may be
problematic for refusing to remove a "hold" even long after
you
check-
out, even though it can take weeks for an unneeded authorization to expire on its own. Hotels that refuse cash, travelers checks or any payment medium except a credit card are to be treated with caution; they may leave you open both to hidden charges and holds which tie up your available limit unnecessarily. "Cardlock" (pay at the pump) fuel pumps will attempt authorization for at least $75-100 even when a lesser amount of fuel is requested; this can be avoided by having the attendant process a transaction manually. Restaurants are also known to process authorizations (not charges, but a brief "hold" nonetheless) for more than the purchase price as their operators feel they are entitled to a (usually 15%) tip. All of this activity may cause valid transactions to fail on low-limit cards as the money is there but tied up with unjustified holds.
===Debit and ATM cards: Risks/trade-offs===
===Debit and ATM cards: Risks/trade-offs===
The risks for debit versus ATM cards are somewhat different and at times much greater for debit cards. The basic rationale is:
The risks for debit versus ATM cards are somewhat different and at times much greater for debit cards. The basic rationale is:
−
* If your '''ATM card or data is lost but its PIN is not compromised''', it has no value for
the other
finder/user...it cannot be used for purchases or ATM withdrawals.
+
* If your '''ATM card or data is lost but its PIN is not compromised''', it has no value for
any
finder/user...it cannot be used for purchases or ATM withdrawals.
* If your '''ATM card and its PIN are compromised''' (e.g., by a hidden card scanner and camera), total daily withdrawals are limited to an amount set by your bank or as arranged by you in-advance, e.g., for certain amounts, locations, dates or frequencies.
* If your '''ATM card and its PIN are compromised''' (e.g., by a hidden card scanner and camera), total daily withdrawals are limited to an amount set by your bank or as arranged by you in-advance, e.g., for certain amounts, locations, dates or frequencies.
** If you know or suspect they've both been compromised, notifying your bank stops all further withdrawals.
** If you know or suspect they've both been compromised, notifying your bank stops all further withdrawals.
** If you've not notified the bank, '''withdrawals can continue, but only within parameters you or your bank have set in-advance'''.
** If you've not notified the bank, '''withdrawals can continue, but only within parameters you or your bank have set in-advance'''.
* If your '''debit card is lost''', a finder can use it without a PIN to make numerous purchases as long as each is below a certain "trigger level"...often USD$100. Above that amount or after you've notified your bank, any attempted use can generate a "flag" for the bank and merchant, and the purchase ''may'' be disallowed. Criminals know this and exploit the card accordingly, e.g., using rapidly and expertly-crafted false identification to quickly make ''many'' modest purchases.
* If your '''debit card is lost''', a finder can use it without a PIN to make numerous purchases as long as each is below a certain "trigger level"...often USD$100. Above that amount or after you've notified your bank, any attempted use can generate a "flag" for the bank and merchant, and the purchase ''may'' be disallowed. Criminals know this and exploit the card accordingly, e.g., using rapidly and expertly-crafted false identification to quickly make ''many'' modest purchases.
−
* If your '''debit card and PIN are compromised''', criminal withdrawals are limited only by the present and near-future balance of the bank/checking account to which it's linked. If that account is also linked to other wealth or personal identity, criminals will exploit that in any way possible. Thousands of bank and other accounts have been wiped-out within hours after unknown compromise, often by actions in places quite distant from where the card/PIN was compromised.
+
* If your '''debit card and PIN are compromised''', criminal withdrawals are limited only by the present and near-future balance of the bank/checking account to which it's linked.
If that account is also linked to other wealth or personal identity, criminals will exploit that in any way possible. Thousands of bank and other accounts have been wiped-out within hours after unknown compromise, often by actions in places quite distant from where the card/PIN was compromised.
Accordingly, some experts suggest that frequent travelers, and those who must use ATMs in less-desirable locations, consider obtaining and using an ATM card instead of a debit card. As above, you can and need to help '''avoid trouble by notifying your bank about your travels in-advance''', and your intent to make withdrawals only in certain amounts at certain destinations on certain dates.
Accordingly, some experts suggest that frequent travelers, and those who must use ATMs in less-desirable locations, consider obtaining and using an ATM card instead of a debit card. As above, you can and need to help '''avoid trouble by notifying your bank about your travels in-advance''', and your intent to make withdrawals only in certain amounts at certain destinations on certain dates.