Comment by hvb2
2 hours ago
But most debit cards cannot be used with just the numbers. So I can give you my debit card and you can't do anything with it.
You typically need a PIN for any decent purchase. Sure you can tap to pay but that wouldn't be a lot of money fast as it asks for a PIN above a certain amount. That problem of copying the card data is only because it's a credit card and that's all you need to make a purchase.
As to skimming, in Europe there was some active skimming going on in the early 2000s which is why I can't even recall seeing a terminal here that still issues the magnetic strip.
Maybe the terminals don't use the strip, but the cards still have them, so they can still be skimmed, and at least used online, as well as in other parts of the world that do have the magnetic readers.
I think it's possible to write the number to the strip of your cloned card with the bits set to say this is NOT a chip card, so that a terminal won't say "Use chip" -- but clearly the issuer could have the opportunity to notice it odd that the transaction is using the stripe and hopefully subject it to harsher fraud heuristics.
> But most debit cards cannot be used with just the numbers.
Every debit card I have in my wallet right now can be used anywhere a VISA is accepted using the same kind of number as a VISA card. I can go to any website that accepts VISA as payment, type in that same 16-digit number as any other kind of credit card, expiration, and CVV and essentially empty it out in a few minutes.
This has been true across many different banks. I have had ATM-only style cards issued in the past but I haven't encountered one of those in over 20 years.