#girocard

2025-07-02

#payback und die #sparkassen machen also gemeinsame Sache.

Bezahlst Du mit der #Girocard und bist bei Payback registriert, werden Dir die Bonuspunkte gutgeschrieben.

aha.

Und wenn nicht?
Dann bekommt Payback trotzdem Deine Daten, weil die ja irgendwo abgefragt werden müssen um festzustellen, ob Du Nutzer bist.

2025-06-27

Was die #girocard da macht, weiß ich nicht. Wahrscheinlich will man damit mitteilen, dass man Lastschrift benutzt (wie bei Edeka, Netto, Lidl und Kaufland). In dem Fall wird die girocard gar nicht benutzt und man benötigt keine (gut für DKB- und ING-Kunden).

Marc-Oliver Schaakerealmos@bahn.social
2025-06-05
Kevin Karhan :verified:kkarhan@infosec.space
2025-05-19

@hisold My bank stopped issuing #girocard cards with #magstrip 10+ years ago as magstrip was phased out and #NFC was phased in as well as #PSD1 being introduced.

  • Even before that merchants rarely accepted magstrips and those who did asked for #ID as soon as purchases [i.e. fuel at a gas station) exceeded like €100 because unlike #Chip + #PIN the payment processor does not guarantee them that the payment will be accepted and the amount guaranteed.

That's the main push factor: Alongside lower processing fees and faster processing, the Chip+PIN & #NFC systems actually request a blockage of the amount and will automatically decline without incuring fees if the balance / limit is below that amount - sometimes even before the PIN has been entered (it'll just not show it until the PIN is entered so fraudsters can't just abuse this as a means to check balance.

  • There's a nice podcast with #JohnBoseak where he explains how stuff used to [and allegeldy still does] work in the #USA re: #CreditCards. Given that I worked for a #PaymentProcessor in the past this is some basic knowledge re: #security, because one needs to understand how stuff like CNP ("Card not Present") works and how the system is architected to the point that even if someone were to hack the database of said payment processor, they'd never find any CCs or the CVVs stored there at all.

It's also insightful because #fraud would be way more rampant if the card issuer, payment processor and card system operator [i.e. AMEX, VISA, MasterCard] didn't all run their own AFE [Anti-Fraud Engine] each automatically assessing risks within less than a second for every transaction.

  • That's why one can get their #CC blocked when using a #VPN and why fraudsters need the location of their victims because if I had a CC and used it regularly and someone were to try to swipe a skilled copy of that at a Walmart or Best Buy on the East Coast of the USA less than 24 hours of my last use in Germany, that would automatically get declined as fraud and the person at the cashier will call security because noone is travelling that quickly that far.

But that's just some cold OSINT based off #TechSupport and peeking behind the curtains professionally...

  • There's way more but I can't go into details on that.

Rest assured if you have a CC you can be as certain that someone tried to abuse it as I'm certain my bank blocked fraudulent money orders against my account because of AFEs working - it's just > 99% of all fraud attempts get blocked instantly and merchants rate-limited or kicked off the system when they do something suspicious.

  • Same reason why one can't frame someone for a crime by just wiring obviously illicit funds to their account: AML (Anti-Money Laundering) will catch that and unless the account holder were to ask "Where's the money/transaction?" #FinCEN et. al. won't even bother calling the account holder up simply because "oops I wired money to the wrong account. Can you please send it back?"- #scam is a well-known method to turn unsuspecting people into money launderers.

So yeah, that "#magstrip" may be just lacquer but unless it's specifically advertised otherwise only holds the CC & CVV as well as service codes [i.e. chip+pin only] to tell the terminal "Don't accept magstrip, mandate Chip+PIN"]...

  • Outside the #USA, this is the norm due to #PSD2 exceeding #PCIDSS by quite a lot!

Only underdeveloped countries like the #US still use #Magstrips and #credit and not Chip+PIN & #debit!

2025-05-05

Nutzt jemand diese girocard debit Holzkarte von der #GLSBank? Ich hab derzeit noch die alte maestro girocard ( GLS BankCard).

Ich frage, weil wir noch unser Gemeinschaftskonto bei der #comdirect habe und die zugehörige "Girocard", die scheinbar eigenlich eine Debitkarte ist, wirklich häufig nicht akzeptiert ist und bei den Debitkarten generell Probleme bekannt sind.

Wir würden gern wegwechseln, aber nur, wenn beim neuen Konto die Karte ordentlich funktioniert.

#GLS #Girocard #VisaDebit

Compliance matters!brazel@23.social
2025-04-13

Hier, psst, deutsche #ÖPNV Betreiber: Ihr installiert 3 von diesen Geräten in jedem #Bus, der Kunde hält seine #Girocard davor beim ein- und aussteigen und ihr könnt kilometergenau abrechnen. Nur so als Vorschlag.

Kevin Karhan :verified:kkarhan@infosec.space
2025-03-22

@hisold @leyrer EXAKT DAS!

Außerdem ist #Lastschrift auf #girocard mit #Ausfallgarantie wenn Chip+PIN oder NFC+PIN, d.h. Händler bekommt immer sein Geld!

Kevin Karhan :verified:kkarhan@infosec.space
2025-03-16

@dideldum @leachimus ganz einfach:

Entweder muss nen Zahlungssystem sowohl in-Person als auch online funktionieren oder es wird in beiden Märkten gekilled.

  • Außerdem nutze ich aus Prinzip keine #Banking-#Apps weil die NACHWEISLICH ALLE SHICE SIND!
Kevin Karhan :verified:kkarhan@infosec.space
2025-03-08

@alda yeah, #girocard is the big one being used, as it promised banks, payment providers and business cheaper fees.

  • Add to that the cancellation of #Maestro by most German banks and it gets further inconvenienced...
Kevin Karhan :verified:kkarhan@infosec.space
2025-03-08

@alda OFC said Credit Card systems are in fact built up of a.lot of vanue-removing middlemen between the issuer and the main payment systems provider, including regional and national sublicensees...

  • I mean, there are some national-only "comeptitiors" like #girocard but they completely fall on their face when it comes to #OnlinePayment.

And whilst #SEPA #WireTransfer is available on almost all domestic [#EU]-wide shops, #InstantSEPA (wthin 1 hour) is not always available and it can take up to 3 bank days to get transfers finalized at the recieving end.

2025-03-07

Ach du dickes Ei! #Payback Logo auf der girocard der Berliner #Sparkasse gesichtet !!!11elf
War ja schon vor längerem angesagt dass man mit der #girocard irgendwann Payback Punkte sammeln kann, aber an ein Logo hatte ich dabei gar nicht gedacht! Mal schauen wie das in #untrump Zeiten so beim allgemeinen Nutzer so ankommt? 🤔

2025-02-18

@heiseonline

Mit #Girocard?
Diese Deutsche Speziallösung die man von Banken aus den anderen 26 EU Ländern gar nicht bekommt?

Die in jeder Richtung hinter der Grenze nicht mehr funktioniert?

Die man nicht online einsetzen kann?

Kevin Karhan :verified:kkarhan@infosec.space
2025-02-10

@unseenjapan I think #pasmo and #Suica (as well as other #FeliCa-based systems like #Octopus) are really super convenient in terms of Pre-#NFC #RFIC-based #cashless #payment systems, to the point that #vPay, #PayPass and #girocard (as well as the flopped #GeldKarte) are just bad imitations of those!

Marc-Oliver Schaakerealmos@bahn.social
2025-01-20

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst