A flaw in chip and PIN threatens millions of accounts
Scientists have discovered a flaw in chip and PIN technology that could endanger millions of credit and debit cards
Scientists have discovered a flaw in chip and PIN technology that could endanger millions of credit and debit cards
It's been four years since the chip and PIN system became universal on Valentine's Day 2006, replacing the use of signatures. But now, just as we've developed our own discrete ways of punching in PIN codes, we're told the technology could be flawed.
The discovery suggests stolen cards could be used in shops and bank cash machines without needing to key in the four digit PIN.
According to researchers, thieves are attaching a small circuit
board containing a computer chip to the stolen plastic card, which can
be concealed up the sleeve.
This chip communicates with a
Celebrity news, beauty, fashion advice, and fascinating features, delivered straight to your inbox!
computer stored in the backpack worn by the criminal when using the
card at a cash-point or shop. When asked for a four-digit PIN to make a
transaction, they only need to key in random numbers.
Professor Ross Anderson, form the Cambridge University Computer Lab,
has discovered several ways to beat the thieves, but insists the
software surrounding this system should be urgently re-written.
‘We
think this is one of the biggest flaws that has ever been uncovered
against the PIN system, and I have been in this business for 25 years,'
he said.
Consumer lawyer, Stephen Mason, agrees. ‘The loopholes
in the chip and PIN system are serious and I don't think they have been
properly addressed by the banks. They really have to think about this
seriously.'
When the new PIN system came into play, it was guaranteed to reduce card fraud as thieves couldn't use the card without knowing the number. Card fraud fell initially, but then rose by 43% by the end of 2008, and is now thought to have risen even higher last year.
However, the banks trade body, the UK Cards Association, denied the discovery was anything to worry about. ‘We believe that this complicated method will never present a real threat to our customers cards,' it said.