First off: so did I. So I’ve upvoted you in solidarity. I’ve struggled to explain fraud / risk to anyone not in it. That there are Very Professional Multinational Organisations that have job boards, good benefits, call centres, and customer service all in service to commit crime? 😮💨 Moreover, fraudsters often know how financial organisation’s antifraud systems better than the financial organisations in question! ugh… I’ve derailed.
A couple things:
AFAIK attestation has little to do with tap-to-pay. (Apple|Google) Pay both use the Secure Element to prevent things like cloning. The Application Processor is mostly untrusted here.
I strongly suspect you’re underestimating the effectiveness of behavioural analysis and overestimating the effectiveness of attestation. My former employer was like Target #1 in this regard.
But, yes, I tend to agree there is a degree of If Your Bank Won’t Serve You Because You Don’t Want To Wear Clean Clothes, Switch Banks.
First off: so did I. So I’ve upvoted you in solidarity. I’ve struggled to explain fraud / risk to anyone not in it. That there are Very Professional Multinational Organisations that have job boards, good benefits, call centres, and customer service all in service to commit crime? 😮💨 Moreover, fraudsters often know how financial organisation’s antifraud systems better than the financial organisations in question! ugh… I’ve derailed.
A couple things:
But, yes, I tend to agree there is a degree of If Your Bank Won’t Serve You Because You Don’t Want To Wear Clean Clothes, Switch Banks.
score 1 · canonical