Unpopular opinion: Chip-and-PIN is way better than contactless for security

I see everyone loving tap-to-pay these days, but after my card got skimmed at a gas station in Chicago last month, I switched back to inserting the chip and typing my PIN. The extra 5 seconds feels worth it when you know no one can run a $500 charge without your code.

2 comments

2 Comments

casey_harris14d ago

My buddy actually had his contactless card cloned at a train station vending machine in London last year. He only noticed because his bank flagged a bunch of tiny coffee shop charges in Belgium while he was still in England. The weird part was the vending machine looked totally normal, just a little loose around the reader. Now he keeps his cards in one of those RFID blocking sleeves and wraps it in aluminum foil when he travels. Makes me wonder if anyone actually checks those machines or if we're all just hoping for the best.

henrycooper14d ago

Have you looked into how chip readers can still be vulnerable to shimming attacks where they slide a thin device inside the terminal? That's what got me paranoid after reading about it last month. The contactless tap has its own set of problems too with relay attacks where someone can intercept the signal from your wallet. Curious if you've tested your chip card against any of those newer skimming devices they're finding at ATMs and gas pumps.