Answers

James B.

Vice president, custom media at NetWorld Alliance

see all my questions

How safe do you feel when using a debit or credit card?

I'm conducting research on consumer attitudes toward electronic transactions, and would value your input. Here is a link to a brief, 6-question survey (they're multiple choice, so the whole thing will take less than a minute):

http://www.surveymonkey.com/s.aspx?sm=Og7PIeCV9FDPv_2fIcGrDStQ_3d_3d

Thanks in advance - I appreciate your input.

posted April 29, 2008 in Information Security | Closed

Share This Question

Share This

Answers (13)

David L.

Director of Marketing at Keywest Technology

see all my answers

Very safe. My Visa 5-star credit and MasterCard debit card do not hold me accountable for unauthorized usage.

posted April 29, 2008

Marco K.

Creative UX guy, frontend dev. Maker- hacker geek father of two pretty girls. On the lookout for a new career challenge.

see all my answers

Best Answers in: Using LinkedIn (12), Web Development (6), Professional Networking (4), Starting Up (4), Software Development (4), E-Commerce (3), Computers and Software (3), Business Development (2), Small Business (2), Blogging (2), Customer Service (1), Job Search (1), Venture Capital and Private Equity (1), Staffing and Recruiting (1), Property Law (1), Advertising (1), Internet Marketing (1), Viral Marketing (1), Search Marketing (1), Organizational Development (1), Project Management (1), Retirement and Estate Planning (1), Wealth Management (1), Market Research and Definition (1), Positioning (1), Computer Networking (1), Databases (1), Information Storage (1)

Safe, I did get burned before, but if you keep an eye on your stuff, think about who you give your card to....

posted April 29, 2008

Todd L.

Director of Internal Audit at Tennessee Board of Probation and Parole

see all my answers

Best Answers in: Certification and Licenses (1), Government Services (1), Compensation and Benefits (1), Offshoring and Outsourcing (1), Advertising (1), Personal Debt Management (1), Ethics (1), Enterprise Software (1)

I recognize the risks of many payment types. Carrying large amounts of cash entails a risk of loss from robbery. Debit card transactions may be limited by the amount in the related account. Credit card transactions have ongoing risks.

David Little's vendor may not hold him directly responsible, but there are costs involved and the vendor can't sustain losses in perpetuity, so costs are passed along in other ways, such as increased annual card fees, increased merchant transaction fees, increased customer interest rates, etc.

posted April 29, 2008

Joe C.

Small Business Maven

see all my answers

Best Answers in: Using LinkedIn (6), Risk Management (3), Personnel Policies (3), Accounting (2), Career Management (2), Professional Networking (2), Customer Service (1), Regulation and Compliance (1), Staffing and Recruiting (1), Contracts (1), Finance and Securities Law (1), Employment and Labor Law (1), Public Relations (1), Customer Relationship Management (1), Change Management (1), Nonprofit Management (1), Small Business (1), Starting Up (1), Information Security (1)

James:

These are two very different questions -- Debit or Credit. As you know they are regulated by two very different laws -- so called Regulation E (Electronic Fund Transfer Act) and the Fair Credit Reporting Act, respectively.

I am very comfortable using credit cards because in fact, I am using some else's money to conduct the transaction.

I am not comfortable using debit cards, because I am using my own money. If fraud is committed, the money is withdrawn directly from my account, unlike a credit card.

Debit Cards are great for use in cash machines, but other than that, we suggest that consumers leave them at home or appropriately secured on their person. Use credit cards for all other retail and e-commerce transactions.

Joe Campana
campana@jcampana.com
www.jcampana.com

posted April 29, 2008

Rick B.

Network Design Specialist ll at Windstream

see all my answers

Best Answers in: Computer Networking (1), Using LinkedIn (1)

I use my debit card for ATM transactions and my credit cards for all other transactions..
I have a special one that has a low credit limit for most web transactions.
Do diligence is important and I follow up by checking my receipts.

posted April 29, 2008

Tom F.

--------------------

see all my answers

Define safety as things that harm me. If that happens then perfectly safe for credit cards and unsafe for debit cards. Credit cards protect consumers from fraudulent purchases. Debit cards do not. Credit card security is enabled through increasingly stringent merchant security via the PCI Data Security Standard. There is no such mechanism for debit cards.

All in all I feel safer purchasing with my credit card (online and/or as a point of presence transaction) than I do walking around with cash. Debit cards are yesterday's news.

Links:

Tom F. also suggests this expert on this topic:

Clarification added April 30, 2008:

*EDIT* define safety as things that can't personally harm me

posted April 30, 2008

Karen H.

Geography Clerk, NPC, US Census Bureau, Jeffersonville, Indiana

see all my answers

I would be happy to take the survey.Good Luck James!

Clarification added April 30, 2008:

Overall I feel safe, but try to stick with the same vendors who I have done business with before. Only trusted sights online. I dont respond to randon solicitations.

posted April 30, 2008

Lynn W.

virtualization since Jan68, online at home since Mar70

see all my answers

Best Answers in: Financial Regulation (5), Information Security (5), Economics (4), Government Policy (3), Equity Markets (3), Risk Management (2), Blogging (2), Enterprise Software (2), Budgeting (1), Mergers and Acquisitions (1), Sales Techniques (1), Planning (1), Bond Markets (1), Derivatives Markets (1), Hedge Funds (1), Career Management (1), Computer Networking (1), Information Storage (1), Telecommunications (1), Web Development (1)

In general debit had been considered much more secure than credit since it included two-factor authentication (something you have and something you know).

credit has had a history of all sort of problems being single factor authentication. early on, attackers would just guess valid account numbers. Effectively exp. date has acted as countermeasure to account number guessing. something similar started out with counterfeit magstripes ... and special codes were added to magstripes as countermeasure to account number guessing.

lots of transaction harvesting started showing up ... where the crooks recorded all the information needed for counterfeit/fraudulent transactions. debit was relative immune from this since the PIN was never available. Somewhat as a result ... there has been a lot of increased security processes to protect transaction information harvesting (since it only involved single factor ... didn't have the advantage that debit had with two-factor authentication).

As market moved away from credit and more and more to debit ... "signature debit" was introduced ... i.e. being able to use debit card w/o requiring PIN. Almost overnight this exposed "signature debit" to the history of credit vulnerabilities (account guessing, harvesting, etc).

Stats have been that credit & signature debit (single factor authentication) fraud is 15 times higher than PIN-debit (two factor authentication).

PIN-debit is vulnerable to advancing technologies (by crooks). Assumption that two factor authentication being more secure is based on the different factors having independent vulnerabilities. Newer generation of attacks involving modifying end-point devices to "skim" both the transaction information and the PIN at a single time (invalidating the assumption about two-factor authentication being more secure). PIN-debit is still more secure than signature-debit & credit ... since the major breaches that have been in the news have been about large repositories of transaction information (where the PIN isn't available, security assumption about multi-factor authentication is still valid)

lots of past posts about "harvesting" vulnerability
http://www.garlic.com/~lynn/subintegrity.html#harvest

There is some tension between the merchants and the financial industry. The financial industry interchange-charges to merchants for the "higher fraud" items (credit & signature debit) are significantly higher than for PIN-deibt. For some merchants, the credit/signature-debit interchange fees are their largest expense (larger than labor, etc).

lots of past posts mentioning fraud, threats, vulnerabilities, explosts
http://www.garlic.com/~lynn/subintegrity.html#fraud

Links:

posted April 30, 2008

Ray M.

Energy expert, educator, award winning sculptor

see all my answers

Best Answers in: Career Management (16), Ethics (16), Change Management (13), Using LinkedIn (12), Education and Schools (10), Manufacturing (10), Government Policy (7), Business Development (7), Mentoring (6), Personnel Policies (6), Economics (5), Small Business (5), Public Relations (4), Organizational Development (4), Equity Markets (4), Energy and Development (4), Accounting (3), Government Services (3), Exporting/Importing (3), Planning (3), Project Management (3), Engineering (3), Product Design (3), Commercial Real Estate (2), Facilities Management (2), Regulation and Compliance (2), Certification and Licenses (2), Job Search (2), International Law (2), Internationalization and Localization (2), Offshoring and Outsourcing (2), Treaties, Agreements and Organizations (2), Criminal Law (2), Events Marketing (2), Lead Generation (2), Business Analytics (2), Nonprofit Management (2), Personal Investing (2), Professional Networking (2), Starting Up (2), Green Business (2), Blogging (2), E-Commerce (2), Wireless (2), Purchasing (1), Business Dining and Entertainment (1), Event Marketing and Promotions (1), Budgeting (1), Corporate Debt (1), Corporate Taxes (1), Compensation and Benefits (1), Staffing and Recruiting (1), Corporate Law (1), Advertising (1), Graphic Design (1), Sales Techniques (1), Writing and Editing (1), Corporate Governance (1), Labor Relations (1), Bond Markets (1), Commodity Markets (1), Option Markets (1), Nonprofit Fundraising (1), Social Enterpreneurship (1), Inventory Management (1), Quality Management and Standards (1), Supply Chain Management (1), Industrial Design (1), Professional Organizations (1), Enterprise Software (1), Computers and Software (1), Telecommunications (1), Software Development (1)

Safe, so far.......................

posted April 30, 2008

Scott D.

Development Officer at Louisville Public Media

see all my answers

Very safe. I use a debit card almost exclusively. I am not responsible for fraudelent purchases, only purchase online from reputable companies, etc. I have never had a problem.

posted April 30, 2008

Remi O.

IS Auditor at United Technologies

see all my answers

Best Answers in: Corporate Governance (1), Information Security (1)

As long as I remember to sign my card, I feel more confident carrying my cards vs. cash. And now with implementation of PCI DSS, and ATM regulations, I feel safer than ever.

posted April 30, 2008

Brad L.

President, TablePay Solutions®

see all my answers

It depends on the circumstances. I personally do not let anyone take my card at a restaurant. I walk my card up to the POS system with the server and swipe it myself after what happened to me (see www.noskimmers.com newsroom section to learn my story). An article came out in Nations Restaurant News & stated that 70% of all skimming cases occur in restaurants. Believe it or not, it s safer to input your card on the web vs. giving it to a server in a restaurant!

Links:

posted May 1, 2008

Daniel D.

IT Security at Tucson Electric Power

see all my answers

Best Answers in: Computers and Software (1)

I'm not the average debit/credit card user, but as long as the card doesn't have an RFID, I feel very safe to use it. Then again I know how to check for stripping devices and make sure my card isn't out of sight when a transaction is made.

posted May 2, 2008