FNB NFC cards

[Rusty0]

Will require pin and thinking may require insertion of card for chip&pin verification.

A lot of people will question safety as it's wireless but really it does some basic checks before authorising much like the chip only transactions in the US. i.e. validates that it is a real authentic bank card only. If you can read and then mimic the emv cryptographic key program card then u must be awesome but i don't think anyone has mimic'd one yet except where the bank was careless and did not implement it properly haha.. but then by the same token their emv card would be a security hazard too.

I guess you can collect PANs, Seq no, exp? and some other stuff but u wont know cvv and with 3d-secure(online transaction otp) it kinda slowly becoming like bank account numbers.

PS. When i see the cashier getting ready to swipe the card i usually stop them and ask why or speak to manager. I don't let them swipe because almost all the time, except e.g. pnp terminal for discovery transactions, swiping the mag strip is not needed and more indicative of potential cloning, bad trained staff or just old old terminal/pos programs. Kinda like how old e.g. Nedbank or is it Altech POS devices(old Spa stores) still print the signature piece and store cashiers ask u to sign it albeit the the transaction was approved online lmao. pisses me off that those old terminals weren't updated.

How do you know that? What info is actually transferred via NFC?

 

[xrapidx]

Oh? No pin? That is weird. I just got a new card and it's NFC enabled. Can read it with my phone - cool.
Howcome you don't need a pin?

Your phone can read your bankcard? What type of information and how does this work? Android?

Yip, I can hold my phone near your wallet and read all your NFC card info!

Yip... this sounds like a great idea... download a app that reads your card information...and has internet access.

 

[K3NS31]

How do you know that? What info is actually transferred via NFC?

Well my phone just sees some encrypted data - but that's using a generic nfc reader, not a banking app. Don't know if that makes a difference. Maybe it's not encrypted, just in a format my app doesn't understand.

 

[Brawler]

I have one.

I have tried to use it several times when I have seen compatible credit card machines but so far have been unsuccessful. People think I am trying to BS them into free stuff.

 

[Jehosefat]

Yeah, most places in SA don't seem to support it or know about it but it's very common elsewhere. (UK and Australia definitely)

 

[modern10]

Yip, Woolies at Engen in Claremont has had it for quite a while now.

 

[Colin62]

I got my card yesterday, and apparently it's got NFC. I have no clue what the readers look like. Any have a picture?

 

[rorz0r]

Interesting. I've had this card a while now. One of my colleagues has used his at Vida in standard bank. They use standard bank nfc equipped terminals but fnb cards work there too.

I used that app now and it shows quite a lot of detail...
Card number, expiry, name on card. No cvv.

 

[Sinbad]

I got my card yesterday, and apparently it's got NFC. I have no clue what the readers look like. Any have a picture?

It will have a symbol on it that looks similar to a wifi symbol.

 

[HavocXphere]

Theres no security on NFC at all.
No PIN

Not true. They do occasionally trigger pin confirmations as well.

The daily & transaction limit is effectively the security.

And the risk lies with the bank as far as I can tell, not with you.

Haven't checked, but I very much doubt this. The banks have gotten way too wise/sneaky on that front since the magstrip > EMV chip transition,

 

[HavocXphere]

I have one.

I have tried to use it several times when I have seen compatible credit card machines but so far have been unsuccessful. People think I am trying to BS them into free stuff.

After the cashier does their thing on the PC & the speedpoint goes live (i.e. the moment when you'd put the pin&chip card in)...at that moment the contactless payment logo should show on the screen of the speedpoint...if it doesn't just go for pin & chip. The sensor appears to be near the screen & have very little range so you actually need to put the card onto the screen effectively.

Fair enough, so does that mean that payments over 200 will require a pin, or that they won't use NFC?

You can't move more than the limit via NFC at all afaik. The limit differs though. The pin thing is random I think & appears to be rare - never seen it in like 30ish transactions. Also doesn't appear to be directly risk driven - used it in multiple countries without notifying the bank beforehand.
SA cards - R200
UK cards - R400
HK cards - R500
(Broadly)

 

[krycor]

Not true. They do occasionally trigger pin confirmations as well.

The daily & transaction limit is effectively the security.


Haven't checked, but I very much doubt this. The banks have gotten way too wise/sneaky on that front since the magstrip > EMV chip transition,

Exactly.. it's essentially risk rules on transaction limits etc and the bank owns this risk so not sure if they will push out NFC to all cards i.e. might be a higher value preposition customer 1st and then after its accepted everywhere risk rules & limits on top end will change and lower value customers get it with lower limits?

 

[Claymore]

I was a little surprised when I discovered that BlackBerry World will use NFC on bank cards. I had to update my credit card details, it said it allowed it, touched the card to the phone, and ll the credit card details were uploaded except for the CVV number.

 

[krycor]

How do you know that? What info is actually transferred via NFC?

Been shown in this forum before, can't remember which thread though.. but look below.

Interesting. I've had this card a while now. One of my colleagues has used his at Vida in standard bank. They use standard bank nfc equipped terminals but fnb cards work there too.

I used that app now and it shows quite a lot of detail...
Card number, expiry, name on card. No cvv.
View attachment 297148

What i wonder about is how much of this info is really needed to be exposed.