Richard's Kingdom

Credit-card companies claim their 3D-Secure system – branded as Verified by Visa and Mastercard SecureCode – provides an extra layer of security against online fraud. Back in November I suggested that, rather than protecting consumers, the extra security appears to benefit banks and merchants by pushing fraud liability onto card-holders. Now Ross Anderson and Steven [...]

As far as phishing schemes go they don’t come better than Verified by Visa. Fortunately it isn’t actually a scam. However it so closely resembles the perfect online con that this detail makes little practical difference. What’s more it’s turning customers away from merchants who employ the system. If you use a credit card online [...]