According to three Swiss security researchers, the contactless payment functionality of Visa cards presents a security flaw.
It would suffice to place a first phone on the Visa card and a second, connected to the first phone in wifi and serving as a decoy, on the bank card terminal to be able to make a payment without code, without contact and without limit of amount.
Contactless and limitless payments
This is the observation made by three Swiss security researchers of the Swiss Federal Institute of Technology Zurich (ETH Zurich), David Basin, Ralf Sasse and Jorge Toro, demonstrating that someone getting their hands on a Visa card could make contactless, limitless payments.
Concretely, today, contactless payments are limited to 50 €. Above this amount, you must then enter their secret code which each beneficiary is the recipient of or use their fingerprint. An authentication system that would be vulnerable, according to the researchers.
https://www.youtube.com/watch?v=JyUsMLxCCt8
They have, in fact, succeeded in demonstrating that it is possible to break the € 50 limit for contactless card payment for Visa. Via a developed Android application, they managed to make unauthenticated payments with a Visa card, while making the payment terminal believe that the authentication was performed on a smartphone.
More than 44 million Visa in circulation
If no detailed information has been revealed about the discovery, the researchers explain that they have already warned Visa. More than 44 million Visa cards are in circulation.
–
