Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In EU all banks have to implement 3D Card Secure - when making an online payment over a certain amount, or of an unusual type the vendors website redirects you to your bank's website where you have to authenticate the payment(usually provide an SMS code or answer some security questions).


In Finland you get a tiny card filled with single use pin codes. It's pretty secure. Unfortunately, if your card is skimmed, the scammers will just -- for example -- associate it with an Uber account and sell the account. Because non-EU companies don't use 3D-secure there's nothing stopping them. I have tried asking for non 3D-secure transactions to be blocked, (I believe when a vendor doesn't offer it I can always find an alternative) but no such luck. (Obviously you can get the money back, but I'd like to avoid the inconvenience and the fact the scammers get money for nothing.)


> In Finland you get a tiny card filled with single use pin codes. It's pretty secure.

Nordea Bank Finland ceased providing code cards earlier this year. Logging on to online banking even warns that the code card you already have may stop working soon. Everything has moved to the mobile app or, available as a special order for the elderly and luddites, an electronic keypad.


SMS, yuck. Something else we need to get past, and banks are so slow in embracing new security technologies.


>or answer some security questions

Will be phased out soon due to regulation (PSD2) as it doesn't meet the requirement for 2 factors.

Some banks also allow you to confirm the transaction inside their mobile app, which is pretty convenient.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: