Profile

Location

Ilkley

Member since

2006

Writes about

Trevor's blog archive

2010 (1)

Trevor Jenkins

Director at Maylands Consulting Ltd

Message Posts: 1 Comments: 7

Bio 20 plus years experience of the card payments industry, primarily in ATMs. Set up the LINK ATM network in UK, oversaw growth from nothing to 40,000 ATMs, 220m transactions per month. Subsequently, self-employed card payments consultant but also worked for two independent ATM deployers and prepaid Career History Director - Maylands Consulting, General Manager - Calypso Europe, Integration Manager - Cardpoint, General Manager EMEA - Lexcel Solutions Inc, General Manager - LINK Interchange Network, Consultant - PA Management Consultants, MA from Cambridge University

Blogs

Cardholder Identification for Credit Cards in Canada, USA

16 Feb 2010

I have been trying to research the requirement for additional cardholder identification for cardholders with UK-issued credit cards using POS terminals in Canada and the USA. I have sometimes been asked for additional identification in Canada, but never in the USA. In the USA my signature is seldom checked thoroughly. I haven't been able to fin...

See all Trevor's blogs

Trevor is Commenting on

CVV codes lifted in Vision Direct breach

Vision Direct say the data was not extracted from the VE database but captured as customers typed the data into the web site. This could be done by a Javascript keylogger running on the web site activated by a fake Google Analytics script. Vision Direct also say that they hold no payment card data, which is held at their payment providers. Sounds like this is not a PCI-type breach.

19 Nov 2018 Reply Read article

Researchers reveal chip and PIN hack

The second chip passed through the EMV commands and data between the terminal and genuine chip apart from the command to the chip to verify the PIN. The terminal generated the VERIFY command correctly but the second chip intercepted this command without forwarding it to the genuine chip. The second chip automatically responded with SW1 SW2='9000' whatever PIN was entered to indicate to advise the terminal that PIN verification was successful. The PIN was not exposed in the fraud. This attack would not be successful in an online environment where the PIN is verified by the issuer. It would not be successful with Combined Data Authentication (CDA) cards and one would hope that US issuers are not sending out Static Data Authentication (SDA) cards. If these had been Chip and Signature cards, the fraudsters would not have had to go to all the trouble of transplanting chips from one card to another and attaching second chips. They could have simply used the stolen cards and signed for the transactions confident that the signature would not be checked thoroughly by the retailer.

21 Oct 2015 Reply Read article

US cybercrime czar falls victim to skimmers

Perhaps she will now press for the USA to move to EMV chip cards?

06 Sep 2011 Reply Read article

London ATM crooks jailed

Nor does EMV

29 Oct 2010 Reply Read article