If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(The Consumerist)   About that whole "enter your zip code" security thing when swiping your credit card   (consumerist.com) divider line 70
    More: Fail, Redbox, credit cards, CBS Sacramento  
•       •       •

9343 clicks; posted to Business » on 19 Oct 2013 at 8:43 AM (1 year ago)   |  Favorite    |   share:  Share on Twitter share via Email Share on Facebook   more»



70 Comments   (+0 »)
   
View Voting Results: Smartest and Funniest

First | « | 1 | 2 | » | Last | Show all
 
2013-10-19 04:01:59 PM  
Had a gas pump not let me fill up twice in a row.  Pull up, fill tank of car one, come back 8 minutes later with car two... no dice, see cashier.  Cashier was new and had a 10 person deep line.  Looked like she was about to quit.  Had to use another card.  Lost valuable reward points, precious minutes.  It was tough.  First world tough.
 
2013-10-19 06:02:38 PM  

poot_rootbeer: Zip code is being collected for credit card validation; under some circumstances, though, it's not actually used.

Also, I'd guarantee that Redbox isn't storing any card info including zip code, thy just pass it through to their payment processor. Consumerist editors talking out their asses again.


Well then you should contact Consumerist with your handy first-hand info, that not even Redbox themselves would divulge.
 
2013-10-19 06:14:53 PM  

mr_a: Gas pumps seem to catch it more than anything else


This. The last time I moved and changed my address with my bank, I found out the hard way the gas stations actually do require your real zip.
 
2013-10-19 06:21:37 PM  
Bottom Line: the more info companies have on you the more of your money they can get (in some cases,steal.)


so be careful with your personal information.  ain't Freedom great!
 
2013-10-19 09:43:26 PM  

poot_rootbeer: Zip code is being collected for credit card validation; under some circumstances, though, it's not actually used.

Also, I'd guarantee that Redbox isn't storing any card info including zip code, thy just pass it through to their payment processor. Consumerist editors talking out their asses again.


It makes perfect sense and is good software design.  It's built into the Redbox UI and passed back to Redbox's servers.  Redbox isn't paying extra to have the zip code verification,via their payment processor.  However, by acquiring it at the point of sale, they have the option of changing the back-end interface with the payment processor, without rolling out new software to physical Red Boxes.

Measure twice.  Cut once.
 
2013-10-19 09:51:43 PM  

foo monkey: poot_rootbeer: Zip code is being collected for credit card validation; under some circumstances, though, it's not actually used.

Also, I'd guarantee that Redbox isn't storing any card info including zip code, thy just pass it through to their payment processor. Consumerist editors talking out their asses again.

It makes perfect sense and is good software design.  It's built into the Redbox UI and passed back to Redbox's servers.  Redbox isn't paying extra to have the zip code verification,via their payment processor.  However, by acquiring it at the point of sale, they have the option of changing the back-end interface with the payment processor, without rolling out new software to physical Red Boxes.

Measure twice.  Cut once.


I was agreeing with you, btw.  Just wanted to elaborate a bit.  I also see that KingRamze covered the reason why Redbox doesn't use the zip.
 
2013-10-19 10:19:56 PM  

SpinStopper: I use 90125.  It always seems to work ;)


That's proof they don't check it. There is no 90125 zip code; Yes just used a part of their record catalog number for the album title. No word on any other options for the name, but I don't think it would have been much better than the Owner of a Lovely Heart.
 
2013-10-19 10:21:58 PM  
*lonely

/stupid autocorrect, fat fingers, etc.
 
2013-10-19 11:36:58 PM  

nytmare: Well then you should contact Consumerist with your handy first-hand info, that not even Redbox themselves would divulge.

 Do you honestly think there's a greater than zero chance that Redbox got to be the company it is today without having their payment systems audited and verified for PCI compliance?
 
2013-10-20 12:26:28 AM  

ZMugg: Has anyone tried entering 17921 for a zip code? That was the zip for Centralia Pa.


No, but I regularly enter 20500, if you don't know that is the zip code for the White House.
 
2013-10-20 03:21:46 AM  

sure haven't: Canadian here. Whenever I'm in the states and try to fill up- well first of all why are ALL Your gas pumps pay before you pump?? Did everyone start stealing gas or something? There isn't one single pump where I DON'T have to pay first (none that I've found anyways, so that means it isn't available anywhere ;) )

Anyways, putting my card in, it never recognizes that it's Canadian, and then asks for a zip code. I enter 90210, and it comes back with an error. Then I try to enter my postal code hoping that it'll understand the alphanumerical-ness. No dice. So I have to walk my ass inside, pay at the cash, then go out and pump gas. However you better guess right, because they won't refund your card. You have to call and get your cc company to fight them for it.

/I had a point here somewhere...


There tends to be drive-offs (driving away without paying for the gas), especially when gas prices go up. Requiring payment before pumping helps prevent that. Of course that can cause problems, much like you described.
 
2013-10-20 10:15:53 AM  

poot_rootbeer: nytmare: Well then you should contact Consumerist with your handy first-hand info, that not even Redbox themselves would divulge.
 Do you honestly think there's a greater than zero chance that Redbox got to be the company it is today without having their payment systems audited and verified for PCI compliance?


He doesn't know what PCI compliance means.
 
2013-10-20 10:21:38 AM  
Please explain for a confused foreigner the whole "debit/credit" thing...

Here we just put the card in a reader, enter the PIN and it's done. None of this pissing around with choosing credit or debit.
 
2013-10-20 10:58:04 AM  

MrHappyRotter: I can't recall the last time I got gas at a station where the machine didn't ask for my zip.

When I first started encountering those types of pumps, I thought it was a little odd.  Asking for a zip just doesn't seem like it's a high barrier of security.  More of a speed bump that might stop a minute amount of unauthorized transactions.

But as has already been stated, if you were going to try and use a stolen or lost card, more likely than not, it seems like you'd have a good idea of what the zip code(s) in the area are.  It wouldn't take many tries to figure it out.  Hell, even if you didn't know the local zip code, at most gas stations, you might even be able to figure it out from the fact that those will be the number keys with the most evidence of wear and tear.


do you live in the middle of nowhere or something? I moved less than 10 miles down the road, and changed zip codes. If I move another 10 miles, I'd probably change again.

and I shop in probably idk, a 50 mile radius. I would hope that by the 3rd time someone entered the wrong zip code, my bank would freeze my credit card.
 
2013-10-20 11:03:13 AM  
Everyone in my town of about 7,000 has the same zip code. So if I drop my credit/debit card in my hometown - you know, the place where I spend probably 98% of my time - even if the zip code authentication is working as advertised, it still does me no good.

So I'm getting a kick...
 
2013-10-20 11:12:21 AM  

PortsmouthFarker: Please explain for a confused foreigner the whole "debit/credit" thing...

Here we just put the card in a reader, enter the PIN and it's done. None of this pissing around with choosing credit or debit.


In the US banks charge merchants differently depending on if the card is used as a credit card or a debit card. Aldi, for example will not even take credit transactions, they're debit only.

My credit union has a cash-back rewards program for using the credit functionality...I got back about $100 last year for doing nothing but choosing a transaction type.
 
2013-10-20 12:07:56 PM  
There are different levels of verification on a credit card transaction and all can be provided, but not all need to pass for the company to accept the transaction. You typically get a better rate as a merchant the more that passes, but it's up to the merchant to decide if anything beyond the number and expiration need to be legit because if the transaction is reversed it's the merchant that eats the charge and associated fees. We collect number, expiration, CVV2 and full address + zip, but only the number and expiration have to actually pass validation for us to accept it. We just get a better rate on those transactions that pass more steps.

They're not lying about anything, it's not illegal and Consumerist is, as always, being completely useless to consumers.
 
2013-10-20 02:53:29 PM  
Data mining / selling info for data mining
 
2013-10-20 03:30:56 PM  
Sonic Drive In always asks for zip codes. I just hit cancel. I assumed it was for marketing purposes. Except for gas stations. Gas stations are serious business.
 
2013-10-20 06:20:34 PM  
Riddle me this: Why do systems constantly ask you if you want to use the card as debit (if it's a debit card)?

Why would someone purposefully be willing to pay an extra dollar?
 
Displayed 20 of 70 comments

First | « | 1 | 2 | » | Last | Show all

View Voting Results: Smartest and Funniest


This thread is closed to new comments.

Continue Farking
Submit a Link »






Report