On Sep 14, 5:48*pm, Roland Perry wrote:

But the conversation has to include the card number (or it could be any
card in the reader). The "yes" is so easy to fake in these circumstances
it's a meaningless question for the bank at the other end to be asking.

The bank can issue a key to encrypt, and it can be encrypted by the
card reader and sent back. That's how the card readers work in the
case of the ones issued by banks for online banking, albeit there's a
human typing the code and PIN into the keypad and typing the generated
key back into the website.

Yes, it'd need to transmit the card number as well, but that's no
different to keying it!

A skimming device, anyway.

That's what I meant - skim the stripe, obtain the PIN then use the
generated card abroad where there is no C&P. I think that's the bulk
of these scams.

Personally, I wish banks would issue two cards - one chip, one
magstripe, the former for UK use, the latter not - then this fraud
would be wiped out completely.

It is usual throughout the world for tolls, parking charges etc to be
at the customer's expense.

Not a blank cheque though.

No, though if the only place to wait was a paid-for car park, you'd no
doubt have to pay that. But it is definitely usual for these "kiss
and ride" fees and the likes to be on top.

Neil