Security News > 2024 > August > Stolen, locked payment cards can be used with digital wallet apps

Fraudsters can add stolen payment cards to digital wallet apps and continue making online purchases even after victims' report the card stolen and the bank blocks it, computer engineers with University of Massachusetts Amherst and Pennsylvania State University have discovered.

Adding the card to a different wallet and making fraudulent purchases is made possible by the trust banks have in the digital wallet apps' security mechanisms.

Finally, the banks allow payments for subscription-based services even on lost / stolen cards so that the cardholder doesn't incur late payment fees / penalties.

As an added drawback, once stolen card numbers are saved in a fraudster's digital wallet, they are there and will continue to work even if the cardholder requests a card replacement and the bank issues a new card.

The only potential barier to adding a stolen card to a new wallet app is if the victim locks the card before that can be done.

The scientists tested the various scenarios with cards issued by major US financial institutions and three popular digital wallet apps: Apple Pay, Google Pay, and PayPal.

News URL

https://www.helpnetsecurity.com/2024/08/19/digital-wallet-stolen-card/