Slashdot Mirror


MasterCard Has Finally Realized That Signatures Are Obsolete and Stupid (fastcompany.com)

An anonymous reader shares a report: For years, credit card companies have relied on an illegible squiggly line as the frontline of defense against credit card fraud. Customers are forced to use a pen (how retro!) to scrawl their signature on bills at restaurants and sign digitally at cash registers -- as if somehow in the age of chips, PINs, biometrics, and online fraud alerts, a line on a page is still a great tool against fraud prevention. Personally, I have been known to sign on the dotted line with a doodle of a piece of tofu and no one has ever stopped me, because signatures mean very little in this digital age. Companies are finally seeing the light. Starting in April 2018, MasterCard cardholders will no longer be required to sign their name when they purchase something using their debit or credit cards. The company has been moving away from requiring signatures for a few years now, with only about 80% of purchases (typically over a certain dollar amount) requiring a signature these days. MasterCard did some digging, though, and per its press release, realized that most of their customers "believe it would be easier to pay and that checkout lines would move faster if they didn't need to sign when making a purchase."

344 comments

  1. Uh huh... by Anonymous Coward · · Score: 5, Informative

    Your signature is just an acknowledgement of payment it is not fraud control.

    1. Re:Uh huh... by Darinbob · · Score: 5, Interesting

      It was also used as "proof" if there was a dispute. For the same reason people sign legal documents. A PIN is in no way comparable. It is not intended to be an asbolute authentication, but to prevent or stop casual theft or fraud.

      I had a credit card for several years that had my signature and photo on the front, so that it could be compared to my face and signature. I liked using that one, I rarely had to dig out additional forms of ID with my picture.

      My friend would not sign his card, but instead write "please ask for photo ID". That way a signature was never used as authentication. Not foolproof, as he said sometimes cashiers never even loook at the back of the card to do any form of verification (probably because people have gotten used to treating these things like cash).

    2. Re:Uh huh... by jwhyche · · Score: 4, Insightful

      I've never had a signature on a card be legible for more than a month or two. I can pull out my debit card and the signature will be almost as good as blank.

      --
      I read at +2. If your post doesn't reach that level I will not see or respond to it.
    3. Re:Uh huh... by Anonymous Coward · · Score: 5, Interesting

      Having worked retail... I would argue no one checks it, because the customers keep trying to do their own thing relentlessly.

      We were trained to NOT accept "Please Ask for Photo ID" and every other weird combination they came up with. But customers would insist on that, or insist on not putting anything on the back of their cards, or would even use their spouse's card, or their friend's card, or or or or or or... Meanwhile... You have a line building up behind the precious snowflake with the exception and everyone screaming at you "What's the big deal?"

      So you finally just start waving everyone through.

      Don't get me wrong, I'm sure some people always waved them through. But there's no right answer when you're trying, because it seemed like every single individual had some damn exception they're trying to push on you.

    4. Re: Uh huh... by Anonymous Coward · · Score: 1

      Yup. Signatures aren't stupid, but I think the poster is.

    5. Re:Uh huh... by Dixie_Flatline · · Score: 2

      Back when we still signed things in Canada, like barbarians:

      I went to the police station to have a background check done for a name change. On their counter, they had some notices you could read while you were waiting, and one of them was to not put a signature on your card, but instead put 'ask for ID'. Seemed to make sense, so I did.

      That worked for a while, but one day when I was buying something at Future Shop (which was later taken over by Best Buy), they said that they wouldn't accept anything without a signature on the back. So I signed the card right in front of them, then signed the slip. I complained that this is how the police said to do it, but they claimed it was corporate policy. Obviously, I immediately complained (over the phone—god, this was so long ago) and the customer service person I called said that it WASN'T against their policy and everything should've been fine.

      ANYWAY, all that to say that the signature-as-authentication thing was incredibly stupid, since they'd happily watch you undermine a better authentication right in front of them.

      Chip and pin is better. The only time I get my credit card number stolen is when I drive into the USA and have to swipe it somewhere. (Seriously, there's a very strong correlation with that, and when I talk to the credit card companies while asking for new cards, that's usually what they pin it on.)

    6. Re:Uh huh... by Raistlin77 · · Score: 1

      I've never signed the back of a single credit card or debit card in my possession in the last 25 years, and never once has someone refused a sale or even as much as mention that my card isn't signed. I'd say nobody has checked signatures for at least the better part of the last 3 decades.

    7. Re:Uh huh... by azadrozny · · Score: 1

      It is both. By signing, you acknowledge the transaction, and the retailer verifies that your are the rightful owner of the account by comparing the signatures. There are indeed better ways to do this.

    8. Re:Uh huh... by Anonymous Coward · · Score: 1

      Is he one of those idiots that writes "please ask for photo ID" but does not also hand over his photo ID at the same time and instead waits for the cashier to follow his illegitimate hand-written instructions written on the back of the card before he offers his ID? Those types of people serve no purpose but to make life unnecessarily difficult.

    9. Re:Uh huh... by Desler · · Score: 1

      retailer verifies that your are the rightful owner of the account by comparing the signatures

      Good joke. Never once seen any retailer that has done this let alone that some random cashier is not a handwriting expert.

    10. Re:Uh huh... by Anonymous Coward · · Score: 1

      I've never signed the back of a single credit card or debit card in my possession in the last 25 years, and never once has someone refused a sale or even as much as mention that my card isn't signed.

      Because they're retail employees and don't want a disagreement with an asshole like you to jeopardize their jobs. The card isn't valid unless you sign it, so they should have declined to accept it.

    11. Re:Uh huh... by Quirkz · · Score: 3, Interesting

      I've had a couple tell me my card wasn't signed. (I tend to write "See ID" but it wore off.)

      I had one insane individual who insisted they couldn't complete the sale if the card didn't have a signature on it because the card signature had to match the slip signature. She would not accept "See ID" or cross-check my ID. So she made me sign the card while standing in front of her, and then compared the signature I just put on the card with the signature I just put on the slip. What would that prove? I do not know. But I did it, and then smudged it off before putting the card back in my wallet.

      I have had many, many, many cashiers flip over the card, stare at the strip (either blank or with "See ID" on it) and then flip it back over and hand it to me. I don't know if it's an old reflex that lost its purpose and became ritual, or if they're just putting on a pose for the camera.

      I've had a few ask to see ID. Some seem to do it for all purchases, often asking or apologizing before they've even really looked at the card. A few actually read the card and then ask. I always thank the latter for being diligent.

    12. Re:Uh huh... by superdave80 · · Score: 2

      It was also used as "proof" if there was a dispute.

      Too bad it isn't even useful for that. I had a strange charge show up on my American Express card a few years ago. I sent in a dispute request. I received back a letter saying that the charge was legit due to the vendor providing a signed receipt as proof. In the letter was a copy of the receipt, and not only was it not my signature... IT WASN'T EVEN MY NAME! Nobody had bothered to due the most basic check of what name was signed to the receipt, let alone whether or not it matched my signature. The signature is absolutely worthless and a waste of time at this point. Everything is too automated.

    13. Re:Uh huh... by superdave80 · · Score: 2

      My favorite is the one time that a cashier said, "Oh, there is no signature on your card". So I signed it right there in front of her, and then she was OK with accepting my card at that point.

    14. Re:Uh huh... by Anonymous Coward · · Score: 0

      And they also use the fingerprints you leave on the receipt signed, if needed, to prove who actually was present during the transaction (in cases where large transactions are disputed)

      This just means that for MC, it is cheaper to take the risk of losing a dispute due to lack of fingerprint on the receipt. Probably because the 300 cameras that caught your face in and out of the place already are sufficient to replace the fingerprint.

    15. Re:Uh huh... by tonywong · · Score: 2

      A bank teller tried to screw me around with this before. I had a card that was old so my signature was faded. I needed to do a transaction on the business account and she refused my card saying it was not signed.

      I got in an heated discussion with her saying it is signed, you can see it, it's only faded. She said she could not see it and refused me service again. I got out of the line up and signed the card at the next teller station and got back in line.

      Got the same teller and she refused me *again*, I guess because she wanted to be right. At that point the manager came over and asked what was wrong. After looking at my signature and looking at the account, the manager got all ashen-faced because the business did millions with them each year, but I was only in a t-shirt and jeans and did not regularly come in. But I was one of the signing authorities for the account.

      They then let my transaction through. Wasted an hour of my day, over a lousy signature.

    16. Re:Uh huh... by Raistlin77 · · Score: 1

      I'm guessing you're the asshole that refuses to accept unsigned cards, and that you have experience getting fired because you refused a sale over it?

      Im not an asshole, I just don't see the value in providing easy access to my signature which could then be used to forge important documents where it is actually necessary.

    17. Re:Uh huh... by Anonymous Coward · · Score: 1

      Bullshit. A PIN code is there to protect the BANK. It makes YOU less secure than a signature. Even with a chip and PIN, all it takes is someone on the sly at a convenience store or restaurant to have access to camera to get your PIN and then misdirect to get your card and there is nothing you can do beyond that point. I refuse to use a PIN code anywhere there is camera watching me and in any place where there is even a remote doubt that a skimmer could be placed. With a signature I could always dispute that was me that signed. Not so with a PIN code.

    18. Re:Uh huh... by Pascoea · · Score: 1

      The only exception to this that I've seen is at the Post Office, up until a couple years ago they would not accept a credit card that didn't have a valid signature on it. And they checked it religiously.

    19. Re:Uh huh... by Wycliffe · · Score: 1

      The only place I've ever had not accept "SEE ID" was the US post office. They were very helpful though. They put a piece of clear tape on the back of the card, had me sign the clear tape and then removed the scotch tape for me. I was somewhat flabbergasted.

    20. Re:Uh huh... by Anonymous Coward · · Score: 1

      My friend would not sign his card, but instead write "please ask for photo ID". That way a signature was never used as authentication. Not foolproof, as he said sometimes cashiers never even loook at the back of the card to do any form of verification (probably because people have gotten used to treating these things like cash).

      Your friend is an idiot.

      The signature on the back of the card isn't intended to match your signature on the receipt. Flip a credit card over and read what it actually says: "authorized signature: not valid unless signed." By writing "please ask for photo ID" your friend is either using an invalid card (because it isn't signed) or saying that their signature is literally "please ask for photo ID."

      Even then, do you know whose responsibility it is to make sure the signatures match?

      If you guessed "literally no one" you'd be right!

      Conceptually you sign the back of the card to say you agree with the cardholder agreement, and you sign the receipt to agree that you intend to pay that transaction. And that's it.

      There's no need for the two signatures to look the same, there's no checking to make sure they match, there's no requirement for an ID.

      If all this sounds horribly insecure - you're right! It is!

    21. Re:Uh huh... by Anonymous Coward · · Score: 0

      My signature is a solid rectangle. I just color in the box, I the signature line I draw a rectangle and color it in, electronic signatures I just fill in the the whole box.

    22. Re: Uh huh... by Anonymous Coward · · Score: 0

      I do the same thing, except I use the background color.

    23. Re:Uh huh... by Anonymous Coward · · Score: 0

      My son used to sign as "Osama Bin Laden" with never a challenge. My scrawl is completely indecipherable, not intentional just bad handwriting. A friend of mine was challenged for not having signed his card and made to sign it before it would be accepted. (Like the signature on the receipt wouldn't match???)

    24. Re: Uh huh... by Brockmire · · Score: 1

      Wah, wah, fucking crybaby doesn't want to do their job. Every customer has an exception? Fuck off, drama queen.

    25. Re: Uh huh... by Brockmire · · Score: 1

      An hour for three simple arguments? Find a new bank. When other banks treat you unfairly, they'll be faster about it.

    26. Re:Uh huh... by Dorianny · · Score: 1

      That's strange. You should have definitely called AMEX back and asked them to rematch the signature. Before EMV chips it became standard practice in NYC clubs to make a copy of a photo-id and have the staff make sure the signature on the slip matched the ID because charge-back fraud had become so common that clubs were loosing thousands a month in disputed charges by people intentionally signing the slip incorrectly. It is stupid to match against the signature on the card as the bank never sees that signature and doesn't have it on file. Staff would get so frustrated when they'd have to print copy after copy of a receipt because some drunk guy drank can't sign (or pretending to) his name anymore. AMEX was the most hated by managers as they were the most stringent in the dispute process. Some went as far as to stop accepting them

    27. Re:Uh huh... by nasch · · Score: 1

      Then what happened? Did you give up, or point out the error?

    28. Re:Uh huh... by MachineShedFred · · Score: 1

      The headline kind of made me wonder what the hell they're on about - the Chip + Pin standard that is used everywhere else (e.g. not in the US) is formally known as EMV - Europay, Mastercard, Visa.

      If Mastercard was so much a partner in developing Chip + Pin in order to be right there in the name, how are they now having the grand revelation that signatures are stupid and worthless for fraud prevention? By the time anyone actually looks at the signature, the fraud already happened days ago, and everyone knows it.

      The real deal here is that somebody somewhere decided that US consumers couldn't be bothered with PIN numbers, except we've already been using them for debit cards for decades. The whole chip card rollout in the US has been botched front to back - no PIN as a (crap, but better than nothing) form of authentication, slow af chip terminals that take 5x the amount of time to perform the transaction, deadline timetables for the retailers to put the crap terminals in place without having any chip cards actually issued to anybody, etc.

      It's time to either give everyone a PIN and scrap this signature nonsense, or skip EMV altogether and move to the next thing, be it encrypted RFID / NFC or whatever. And when you design it, have actual tech people in the room that aren't thinking 10 years ago like bank tech usually is.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    29. Re:Uh huh... by jnork · · Score: 2

      I'm one of your "precious snowflakes."

      I don't sign the back of my card because if somebody steals my card with the signature, they now not only have my card, but they also have my signature. You may not care. It's not your money. It's my money. I care.

      Also, did your store train you in handwriting analysis? How can you be sure the person who signs the receipt is the same one who signed the card? How good are you, really, at determining that? How much time are you willing to take to analyze the signature to be sure? Maybe the guy stole the card, then learned to fake the signature.

      By writing "please ask for ID" I can also prevent our hypothetical thief from simply putting his own signature on the card, which would presumably match his own signature on the receipt. No amount of handwriting expertise would foil that.

      I'm fascinated to know which store requires me to sign my card and will not otherwise accept my custom, because I want to avoid that store. They're trying to make me compromise my financial security for a reason that does absolutely nothing to help theirs. Not interested.

      You can sneer contemptuously at me for wanting to protect my resources all you want, but if you haven't considered that there may be more than one side to this issue, then your opinion means nothing to me. This isn't me trying to play some sort of game with my individuality. But if that's how you insist on seeing it, well, more power to you. I won't be changing your mind. You're free to feel smug in your blanket of superiority.

      Thanks for playing!

      --
      Cleverly disguised as a responsible adult.
    30. Re:Uh huh... by gweihir · · Score: 1

      Indeed. Incidentally, even that "doodle of Tofu" indicates you accept the receipt. It may require a witness-statement to prove it, but your acceptance is there.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    31. Re:Uh huh... by Xenx · · Score: 1, Interesting

      I'm guessing you're the asshole that refuses to accept unsigned cards, and that you have experience getting fired because you refused a sale over it?

      Im not an asshole, I just don't see the value in providing easy access to my signature which could then be used to forge important documents where it is actually necessary.

      The card isn't valid unless signed. Strictly speaking, you then have a choice to either sign the card or not use it. The AC is in the right, you're in the wrong. People aren't assholes for doing their job correctly. People are assholes for giving them grief, for doing their job correctly. That being said, you are like most people... including me. That is, except I wouldn't be a dick about it if someone said something.

    32. Re: Uh huh... by Anonymous Coward · · Score: 0

      You probably leave the mattress tags on too. My "invalid" cards have worked fine for many years, which tells me the are perfectly valid.

      That the banks are getting rid of signatures on receipts shows just what they think the usefulness if signatures as a fraud prevention measure is.

      Good riddance

    33. Re: Uh huh... by Anonymous Coward · · Score: 0

      No "they" don't use fingerprints and MC isn't involved in disputes.

    34. Re:Uh huh... by JohnFen · · Score: 2

      I've been asked to sign the back of cards again because the signature became illegible.

      On the other hand, when I "sign" for purchases using the card, I just draw a horizontal line. Nobody's ever questioned it.

    35. Re:Uh huh... by Desler · · Score: 2

      And how exactly would you know that the signature on the card was the card’s owner or not anyway?

    36. Re:Uh huh... by belg4mit · · Score: 1

      Cover with a piece of scotch tape after signing.

      --
      Were that I say, pancakes?
    37. Re: Uh huh... by Anonymous Coward · · Score: 0

      That's because it isn't really a fraud prevention measure you fucking moron. It never was. It's about the stores and the credit card company. Here's a quote from NPR on the issue.

      "Well, the signing might seem like it's for your benefit, like somehow it's a security device that's going to protect you, but it's not. It has nothing to do with you. It has everything to do with who's liable if there is ultimately fraud, if someone else is using your card. It goes like this. If the store can produce a signed receipt, and when the bank says, this is a fraudulent charge, then the bank will have to turn around and eat the cost. But if there is no signed receipt, then the store has to eat the cost."

    38. Re:Uh huh... by Anonymous Coward · · Score: 0

      No, it does not mean anything, because "Your" can be anybody and "signature" is just a random scribble, that means nothing.
      Wake the fuck up.

    39. Re: Uh huh... by Anonymous Coward · · Score: 0

      What stops the store from signing the receipt?

    40. Re: Uh huh... by bistromath007 · · Score: 1

      Being a stickler about rules you know are extremely outmoded makes you an asshole. It starts with bureaucratic nonsense, but it's the same process as "just following orders."

    41. Re: Uh huh... by Anonymous Coward · · Score: 0

      Why would you pull the mattress tag off? It has worthwhile information about what the mattress is made of that might prove valuable if you need to clean it.

    42. Re: Uh huh... by Anonymous Coward · · Score: 0

      You're an idiot. The signed card is a little archaic, but it's hardly an unreasonable expectation and it's a part of the agreement between you the store and the payment processor.

      Failing to sign it means that you probably aren't authorized by the issuer to use the card as the activation process ends with signing the card.

    43. Re: Uh huh... by Anonymous Coward · · Score: 0

      If they do it once, probably nobody will notice, but if they do it often enough to be caught there'd be prison and fines related to the fraud.

    44. Re: Uh huh... by bistromath007 · · Score: 1

      And yet if you swipe it, it works just fine. It's almost as though social conventions inappropriate to the technology being used amount to junk data that encourages people to be lazy. Weird.

    45. Re:Uh huh... by gnunick · · Score: 1

      I don't sign the back of my card because if somebody steals my card with the signature, they now not only have my card, but they also have my signature.

      That's silly. Why would you put your real signature on the back of your card?

      If you're going to "sign" it, just put some swoops and squiggles--then make more (similar) swoops and squiggles when you're asked to sign a slip. Those cashiers trying to stick to the rules wouldn't mind. They've just been trained to ensure the swoops and squiggles are roughly similar, anyway (and of course, the vast majority don't even do that).

      That said, for many years I've had "Please ask for ID" in place of the signature.

      I did have someone refuse to accept that once. I was incredulous. I forget the details--where it was, if I left, or just paid cash (as I prefer to do anyway, for small amounts).

      I do have maybe half a dozen people a year apologetically ask for my ID, and I always commend their diligence. Seriously, I don't want them comparing swoops and squiggles. I want them to look at the face on my ID, make sure it's at least roughly similar to the one attached to my goddamned head, and make sure the names are the same. That's what matters.

      --
      I have no special gift, I am only passionately curious. --Albert Einstein
    46. Re: Uh huh... by Anonymous Coward · · Score: 0

      So instead the their just gins up a fake ID to use with your card. It's not like retail employees are trained on analyzing out of state IDs. You sound like someone who has never worked a blue collar job in your life

    47. Re: Uh huh... by Anonymous Coward · · Score: 0

      That's because the card isn't supposed to be run if you haven't signed the back because if you haven't signed the back, it means you haven't agreed to the terms that the card is issued under including any changes that may have been made when the new copy was issued.

      Just because you're too full of yourself to care doesn't make it any different. The right thing would be for the people running the cards to take a look and not run it without a real looking signature.

    48. Re: Uh huh... by bistromath007 · · Score: 1

      What's a "real-looking signature?" You can't claim it's common sense, because common sense is very clearly "signatures are a joke, don't bother." So, you have to define that more rigorously in a way that somehow ignores the fact that signatures are trivial to forge, difficult to verify, and still somehow meaningfully an indicator that the cardholder has read the entirety of the latest version of their card's terms and conditions, even though they have no hope of understanding them without degrees in law and finance.

      Signatures persist in formal applications for the same reason we allow clickwrap contracts: we all know that this part of the law protects only the deepest pockets. Signatures are only taken seriously by Boomers.

    49. Re:Uh huh... by jwhyche · · Score: 2

      Tape will work. I almost only use the thing at gas pumps and drive through fast food. Everyone else I pay with my phone.

      --
      I read at +2. If your post doesn't reach that level I will not see or respond to it.
    50. Re:Uh huh... by doccus · · Score: 1

      Your signature is just an acknowledgement of payment it is not fraud control.

      Nobody's told the cashiers that, yet! Although it has actually been some time since a frumpy and overweeight cashier would peer at me through her horn rimmed glasses, then look at the signature, then look at me again, then studiously look at the signature again, and me again, and after a few more times of this ask me "Is this you?" Seriously!

    51. Re: Uh huh... by dbarrycoyle · · Score: 1

      Yup. Iâ(TM)ve been making squiggles, drawing stick figures on skateboards, and smiley faces for my Visa purchases for a couple years now. Zero issues.

    52. Re:Uh huh... by Anonymous Coward · · Score: 0

      I work a cash register on the weekends.

      I always flip the card over to see which edge has the mag stripe. The fronts are so busy on some cards I don't even try to figure them out. I don't care about the signature. My own signature never matches twice. Who am I to say what is or is not a close enough match???

      Fraud? That's between the card owner and the bank. Sorry, but I'm no authority on what is or is not valid procedure. There's no memo, no flyer, no formal announcement from the banking system other than what I may or may not happen to read in the news. If the card works, we run it. All I can do is make sure the swipe goes through.

    53. Re: Uh huh... by Xenx · · Score: 1

      No, common sense would be reading the line on the card and seeing it says the card isn't valid without a signature. Anything other than that, is you deciding your way is better. It might be, but your way isn't the correct way. As for "real-looking," I doubt too many people's names are "See ID."

      Just to say again, for me... I don't see the signatures on the card as necessary. I just don't think people are assholes for doing their job.

    54. Re:Uh huh... by tmortn · · Score: 1

      Same here... pretty much only have folks that actually ask around the end of year holiday shopping season.

      --
      I don't ask you to be me. I only ask you not expect me to be you.
    55. Re:Uh huh... by Anonymous Coward · · Score: 0

      It was also used as "proof" if there was a dispute. For the same reason people sign legal documents. A PIN is in no way comparable. It is not intended to be an asbolute authentication, but to prevent or stop casual theft or fraud.

      Which is precisely why companies like MasterCard don't want signatures any more. The way they've written their terms, if someone uses your PIN, it is presumed to have been you or someone you gave your PIN to; and they are no longer liable for fraudulent charges.

      MasterCard doesn't give a fuck about you, your money, or your financial security. They just want to know their asses are covered in case their own incompetence fails to prevent fraudulent usage.

      For them it's a win-win ... people get the perception of simplicity, and they get to indemnify themselves from any liability in case you get hacked.

      MasterCard stands to benefit financially if a mechanism like a signature goes away, because if it's ever disputed they can just say "you card, your PIN, ergo you, and we hold you accountable for paying it".
        They simply have nothing to benefit from hanging onto one of the last things which allows you to challenge something and not have to pay for it.

      And if a merchant, or their own servers, are hacked .. well, as long as you have to pay they're not out anything. And they can basically say their own incompetence or systemic flaws in the system aren't their fault.

      Make no mistake, MasterCard is doing this because they have nothing to lose, and one way they have financial risk is removed. Because they don't give a fuck about you, just money.

      Stop thinking of these companies as giving a shit about you, and remember they only care about their bottom line. Removing the ways you can refute charges just ensures that isn't disrupted.

    56. Re:Uh huh... by Anonymous Coward · · Score: 0

      Man you guys.

      Sign your cards. Never show ID to any cashier unless they need it lawfully, if you are purchasing tobacco or alcohol products. They should never need your ID as long as your cards are signed. If your cards do not appear to be signed, they can require ID and also require you to sign your card before accepting it.

      Cashiers are the most likely people to be copying and reusing your card information for their own purposes in any establishment. Not the only ones, not absolutely all the time, but definitely the most likely. Do what you can to prevent that from happening, see the above paragraph.

      Complain about "oh we're so far behind Europe" all you want. This is how things currently are, don't keep stepping in the dog shit.

    57. Re:Uh huh... by Anonymous Coward · · Score: 0

      Congratulations. You found a way to make your signature intact for the 1 of 250 establishments that bother to check signatures for plastic. Bravo. Bra - freekin- vo.

      I wrote "see ID" on my first CC in 1998. I can count on one hand how many places have actually ASKED for my ID.

    58. Re: Uh huh... by bistromath007 · · Score: 1

      If you think your job is to do exactly what the directions say like a robot, then you will be the first replaced with a robot, and that's what you deserve.

    59. Re:Uh huh... by ncc74656 · · Score: 1

      My friend would not sign his card, but instead write "please ask for photo ID".

      Note that there's a line of text under the signature strip on all of your cards. It usually says something to the effect of "card invalid without signature." Merchants would have been well within their rights to reject your friend's card for missing a signature. Back when I wore the blue shirt and khakis on a daily basis, those were our instructions. If it was empty, you could just go ahead and sign it, but if it said "see ID" or something similar, it was to be rejected.

      --
      20 January 2017: the End of an Error.
    60. Re: Uh huh... by Xenx · · Score: 1

      You'll find, in general, most people like to keep their job. If the employer says to check everyone, they'll probably check. If not, they won't.

    61. Re:Uh huh... by K10W · · Score: 1

      I've never had a signature on a card be legible for more than a month or two. I can pull out my debit card and the signature will be almost as good as blank.

      I find sharpies or similar permanent markers don't work but everything I've signed with my dialy use pen filled with Noodlers prime of the commons has lasted. Takes a few min to dry on a card but once it did it never came off but it did turn blue over time. Obviously I wouldn't change whatever ink you use just for signing a card but if you have to sign a lot of official stuff it may be worth a look anyway since it is a bulletproof and tamperproof thus I use it in things where throw away pens are not allowed.

    62. Re:Uh huh... by RockDoctor · · Score: 1

      Takes a few min

      Heretic!

      BURN the heretic! With fire!

      In this modern day and age, the very idea of thinking about waiting for even a second for the most important of transactions is an un-thought. It cannot be permitted.The sky will fall without instant gratification.

      Instant-cooking dehydrated babies are our new product line - 9 months of growing replicated in just 30 seconds once you add boiling water.

      --
      Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
    63. Re:Uh huh... by belg4mit · · Score: 1

      I also write SEE ID, and guess what? It gets smudged just as easily as a signature.
      Tape, however, prevents that. Kindly consider engaging your mind before commenting.

      --
      Were that I say, pancakes?
    64. Re:Uh huh... by superdave80 · · Score: 1

      I called them up and argued with them that it clearly wasn't my signature, and the guy apologized and removed the charge. But the fact that no human ever even looked at the receipt before that annoyed the heck out of me.

  2. Must be a US thing by Anonymous Coward · · Score: 5, Insightful

    I have never signed anything when I've paid by card, be it MasterCard or Visa. Heck, I haven't even signed the back of my cards, nobody looks there anyway.

    1. Re:Must be a US thing by dgatwood · · Score: 5, Informative

      Yes, it's basically a U.S. thing at this point. The signature requirement is one reason that U.S. travelers have a hard time buying gasoline while traveling in Europe; none of the pumps will take their cards because they're either magstripe/signature-required or chip-without-pin, rather than chip-and-pin as used in most of the rest of the world.

      The irony is that they don't actually look at the signatures, as far as I can tell, which makes it almost useless.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    2. Re:Must be a US thing by Anonymous Coward · · Score: 1

      Yeah, it's a US thing. I've only ever had to sign when I visit the US.

    3. Re:Must be a US thing by gnick · · Score: 1

      Using the same MasterCard here in the U.S.:
      * I use a PIN at the grocery store. I often withdraw cash from the self-check.
      * I enter my zip code when buying gas. I have accidentally entered the wrong one without being denied.
      * They just swipe and give it back at drive-thrus.
      * At other registers, it's a mixed bag whether they ask me to sign or not at the register. Typically not.
      Clearly we can conduct business without signatures. I've never been in a situation where a receipt signature mattered.

      --
      He's getting rather old, but he's a good mouse.
    4. Re:Must be a US thing by Anonymous Coward · · Score: 0

      No. At least in Argentina, and other south american countries we sign as well, and we are on the oposite side of the continent. The owner of a restaurant once told me signature is only useful if the client tells the credit card company not to pay, and the sign is the only way for the comerce to prove that the client actually bought something and it is a real transaction, not a scam. Without signature they wouldn't get their money.

    5. Re:Must be a US thing by Bengie · · Score: 1

      Just recently I was grocery shopping when I was told that I now have to enter my pin because I'm using MasterCard. I rather liked this because before I could just swipe for anything under $50 or so. I asked the cashier and they said MasterCard just recently started requiring that all payments must use the pin, but Visa and others have not yet required.

    6. Re:Must be a US thing by gnick · · Score: 1

      Oh, and online.
      * Online I enter the credit card number, expiration date, and the 3-digit code on the back. I sometimes pre-pay for food this way that I go pick up from the restaurant and have never been asked to sign or for my card.

      --
      He's getting rather old, but he's a good mouse.
    7. Re:Must be a US thing by OrangeTide · · Score: 1

      Foreigners visiting the US have to go inside to pay for gas because our gas pumps required the billing ZIP code when paying by credit card. So be aware and pick the less sketchy looking places to fill up because you're going to be forced to go inside to pay.

      --
      “Common sense is not so common.” — Voltaire
    8. Re:Must be a US thing by Anonymous Coward · · Score: 0

      I used my credit card in Europe with no problems (except at the McDonalds in the airport).

    9. Re:Must be a US thing by Lanforod · · Score: 5, Interesting

      Foreigners visiting the US have to go inside to pay for gas because our gas pumps required the billing ZIP code when paying by credit card. So be aware and pick the less sketchy looking places to fill up because you're going to be forced to go inside to pay.

      For Canadians there is a trick to that: just use the 3 numbers in your Postal Code, plus 00. EG: postal code V1Z 2A3, use zip 12300. I tried that a few months back at dozens of stations, works great. Not sure about other countries though.

    10. Re:Must be a US thing by Anonymous Coward · · Score: 1

      I have lived in the US for decades and have never ever seen a gasoline pump that needed a signature. Every card I have ever owned or have known of in the US could bypass the signature requirement by choosing to run the transaction with a pin instead. Every point of sale provides that option.

      This is just a pattern of anti-US sentiment that does not conform with the real world.

    11. Re:Must be a US thing by phantomfive · · Score: 1

      I haven't signed my credit card for the last decade (if I lose my card, do I really want to give them my signature too?), and in that time only one person has asked to see my signature.

      --
      "First they came for the slanderers and i said nothing."
    12. Re:Must be a US thing by Bender+Unit+22 · · Score: 1

      I have the same problem when traveling in the US, I can't pay at at pump anywhere, I know a Conoco station where usually travel where I can pay at the pump so I go there when I am in the neighborhood. It is so annoying.
      A few times it does work to type in a random ZIP code.
      So I researched the problems and had hopes that the problems would be over since a colleague said that he could pay at the pump at all Shell stations on their road trip.
      I believe that once they get around to use the chip on my card, it will be better, but that seems to have been delayed. :(

      https://usa.visa.com/visa-ever...

    13. Re:Must be a US thing by Darinbob · · Score: 1

      They used to look. Even less than 10 years ago it used to be regular to verify signature. Now days it seems to have been changed, and credit cards are treated like cash. Ie, if someone lifts one from your wallet, there's a good chance they can spend up to the limit before you can report and get the card blocked. The rampant fraud also means if there is no signature it's much easier to dispute the charges (which is why cashiers need to be trained to always check it).

    14. Re:Must be a US thing by h4ck7h3p14n37 · · Score: 5, Informative

      The signatures are there so transactions can be audited after the fact. In theory when you dispute a transaction they can compare the signature on the transaction against your verified signature. Signatures aren't used to stop the fraudulent transaction from occurring in the first place.

    15. Re: Must be a US thing by Anonymous Coward · · Score: 0

      I used to work for Best Buy in Maryland. If you didn't check for ID and the card turned out to be stolen, then you the cashier took blame. We had to check IDs every transaction. This was 12 or so years ago tho.

    16. Re:Must be a US thing by dgatwood · · Score: 1

      Me, too. But it failed outdoors at every gas station. I always had to go inside.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    17. Re: Must be a US thing by rob.philip · · Score: 1

      What country are you in?

    18. Re:Must be a US thing by freeze128 · · Score: 1

      European gas stations don't accept cash?

    19. Re:Must be a US thing by Anonymous Coward · · Score: 0

      I've tried using my postal code, but it doesn't work (iäm from north Europe, not gonna specify). Certain gas stations have accepted my cards, but in recent years it's become so flakey that i just go inside and pay there. Shell and the 76 stations have been pretty good, Chevrons stopped working when trying to pay inside aswell for some reason, but i don't remember a single time my cards worked on the pump in California. NY and NC they were working atleast years ago, i think maybe WA or OR it has worked.

    20. Re:Must be a US thing by whoever57 · · Score: 2

      You have a credit card in the USA with a PIN? Or is it really a debit card?

      --
      The real "Libtards" are the Libertarians!
    21. Re: Must be a US thing by rob.philip · · Score: 1

      A lot of European gas stations are unmanned

    22. Re:Must be a US thing by gnick · · Score: 2

      Yes. The "credit card" I was talking about is a chipped debit card that, when I'm prompted "Is this a debit card?", works without a PIN when I say "No." The PIN is always required at the grocery store regardless of whether I'm requesting cash.

      --
      He's getting rather old, but he's a good mouse.
    23. Re:Must be a US thing by fred6666 · · Score: 2

      Not only we need to go inside, but we need to guess how much it's going to cost to fill the tank.

    24. Re:Must be a US thing by Anonymous Coward · · Score: 0

      Yes, it's basically a U.S. thing at this point. The signature requirement is one reason that U.S. travelers have a hard time buying gasoline while traveling in Europe; none of the pumps will take their cards because they're either magstripe/signature-required or chip-without-pin

      We've had pay-at-the-pump service stations for decades here in the states which accept your credit card and have never asked for a signature.

    25. Re:Must be a US thing by Anonymous Coward · · Score: 0

      The signature was never there for confirming identity of the card holder, yes it can somewhat be used for that, but forging signatures isn't all that hard.

      The real requirement of the signature is that it is basically your signature on a contract that you are going to pay back the loan.

      Stores are not supposed to accept unsigned cards or "see id" cards because you have not agreed to the terms of the loan by signing the back of the card.

      And signature on the receipt is your promise to pay it back. Yeah its all old and quaint, but that's really what it is.

    26. Re:Must be a US thing by Anonymous Coward · · Score: 1

      USA credit cards do have PINs if your card lets you make cash advances. You are almost never supplied with this PIN, you have to call your credit card company to get it. Thankfully they do that or i'm sure more people would make use of those cash advances which is just about the dumbest thing you can do.

    27. Re:Must be a US thing by Anonymous Coward · · Score: 0

      What "Verified" signature? I have never signed any paperwork and sent it back to the CC as part of getting the card that they have a signature "on file". At best they might be getting copies of the signature when you sign at a digital signature pad. However i like most people usually just scribble crap on them. You usually cant do a proper recognizable signature on them anyways. The digitizer is always too low res to get fine detail of a signature, or broken

    28. Re: Must be a US thing by Anonymous Coward · · Score: 0

      You are talking about debit cards, not credit cards

    29. Re:Must be a US thing by Applehu+Akbar · · Score: 1

      I have found that our newfangled chip-and-sign cards are perfectly acceptable in even the most low-tech parts of the developing world, such as Yorkshire. You may get a puzzled look from someone who has not seen one before, but chip-and-sign works with their readers.

    30. Re:Must be a US thing by Jaime2 · · Score: 1

      My corporate card that I use for work has a PIN. It's credit only, but, sometimes (usually at major retailers) it asks me for a PIN.

    31. Re:Must be a US thing by Anonymous Coward · · Score: 0

      I have found that our newfangled chip-and-sign cards are perfectly acceptable in even the most low-tech parts of the developing world, such as Yorkshire. You may get a puzzled look from someone who has not seen one before, but chip-and-sign works with their readers.

      Well, yes, but this is only because they need the infusion of currency to the local economy, so they're willing to cater to people who come from a nation where the retailers dictate what type of technology the consumers use. Used to be in Yorkshire and other third-world locales they'd just take an imprint, but many cards now don't even have embossed numbers.

    32. Re:Must be a US thing by Anonymous Coward · · Score: 0

      I also believe if an invalid credit card is presented, which is what an unsigned credit card is. Stores are within their right to cut your credit card up right there in front of you. Technically you using the card unsigned is fraud

    33. Re:Must be a US thing by mobby_6kl · · Score: 1

      Which was great when I was filling up a rental Focus I never drove before. Had to ask the attendant what she it could take.

      Also at another pump I got away with random garbage for ZIP code. I'm actually not even sure it was ever billed to me, at least it I don't remember seeing it in the statement a few days later...

    34. Re:Must be a US thing by thegarbz · · Score: 1

      Express ones don't. But really why would you carry cash in Europe? I've had the same "emergency" 20euro note in my wallet for the past 6 months.

    35. Re:Must be a US thing by Anonymous Coward · · Score: 1

      The signatures are there so transactions can be audited after the fact. In theory when you dispute a transaction they can compare the signature on the transaction against your verified signature. Signatures aren't used to stop the fraudulent transaction from occurring in the first place.

      If you're disputing a transaction I would have thought there would be two possibilities -
      1. You're honest,in which case the signature probably won't match but may have been forged well enough to look real
      2. You're dishonest, in which case presumably you'll have made sure the signature doesn't match up, but I guess you could have done it correctly as a double bluff

      I'm not sure what anyone would get out of comparing signatures on that basis.

    36. Re:Must be a US thing by angel'o'sphere · · Score: 2

      In Germany you usually still use signature.
      In France PIN. Since a few years my ATM PIN for my credit card works in France (did not work a few years ago)

      In Spain Signature *AND* passport.
      In Denmark I used signature, on the channel Islands signature, too.

      No idea about other countries.

      --
      Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
    37. Re:Must be a US thing by CrimsonAvenger · · Score: 1

      I stopped carrying "emergency" cash, oh, five or six years ago. I think my wife still keeps a twenty in her purse, just in case, but I haven't asked in years....

      And haven't been anyplace I couldn't use a credit card in all that time....

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    38. Re:Must be a US thing by pnutjam · · Score: 1

      usually you can overpay and it will just refund the extra to your card, or only charge the amount you pumped, not sure which. I've never tried it, but i have driven away without pumping (yeah, dumbass) and the purchase went back to my card.

    39. Re:Must be a US thing by jbr439 · · Score: 1

      That trick has worked for me as well in the past. Haven't tried it in the last few years, so can't say how current it is.

    40. Re:Must be a US thing by TaliesinWI · · Score: 1

      No you don't. When you prepay inside they're only authorizing the card for that amount. The card doesn't get charged until you finish pumping. So if you prepay $50 and only pump $40, you're fine. The extra $10 might get "held" for a bit on the card, but you'll never see it on the statement, it's just credit limit you can't use until it falls off. Checking into a hotel works exactly the same way, and no one has a problem doing that...

    41. Re:Must be a US thing by thegarbz · · Score: 1

      I do travel to a German country town for work quite often. The reason I still have the 20 was a left over from 6 months ago when I got my corporate VISA. It replaced the frigging useless American Express we had which quite often forced me to have a bit of emergency cash.

    42. Re: Must be a US thing by Brockmire · · Score: 1

      Actually, you're wanted on charges of gas theft.

    43. Re: Must be a US thing by IcyWolfy · · Score: 1

      I couldn't buy any train tickets with my US card because they only took chip-and-pin credit cards. No means for Signatures or mag-stripes.

    44. Re:Must be a US thing by Anonymous Coward · · Score: 0

      No you don't. You give them your credit card, say you want to "fill up on number 4", go pump gas, then go back in and they run your card. Yes, you have to go in twice, but you're on vacation to what's the rush?

    45. Re:Must be a US thing by Anonymous Coward · · Score: 0

      Over half are unattended. The ones attended are expensive.

    46. Re:Must be a US thing by Anonymous Coward · · Score: 0

      Yep US thing.

      In a lot of things the USA is years behind the rest of the civilised world.

      Its been ages since I have had to pull my card out of my wallet even with NFC payment i just put my wallet against the reader. Been doing that for years, so who needs Apple Pay/Google pay.

    47. Re: Must be a US thing by Anonymous Coward · · Score: 0

      You're in a rush because you're about to drop the car off and you're trying to make s flight?

      And you should never let your card out of your sight. That's how it gets copied.

    48. Re: Must be a US thing by Anonymous Coward · · Score: 0

      BS

    49. Re:Must be a US thing by WorBlux · · Score: 1

      Sometimes all zeros will work. If there isn't a straightforward way for the database to case to code, then it just writes in zeros.

    50. Re:Must be a US thing by Anonymous Coward · · Score: 0

      I remember a couple of decades back when I worked for a company that made those card at pump machines, American Express required us to accept cards without any PIN. So if you travel with American Express you are probably OK. Apparently they studied things and decided that additional profit from making cards easier to use outweighed the loss from the rare cases of fraud.

    51. Re:Must be a US thing by Anonymous Coward · · Score: 0

      Yes, it's basically a U.S. thing at this point.

      Lately I've been just drawing a line, unless maybe it is a big purchase. Can anyone think of a legit reason to actually take the time to make a legible signature for stuff like groceries?

      I say toss the signature, and go to a pin like everyone else. You could even pin all your credit cards the same, and require it changed once a year. Sure someone could hack a credit card company and get your pin, but by then they have your number too.

      A pin is at least meaningful 2-factor authentication. A few bad tries requires at least a phone call and all that. You could also have some other kind of two factor authentication, though pin is the easiest since it can't be stolen by stealing your wallet. The only other thing that comes to mind is some kind of implantable rfid or similar, but I think I'll pass on that forever. The last thing we need is people getting fingers cut off for their rfid chip.

      I suppose you might be able to do something with biometrics, such a picture or similar, but at that point you might as well just have the cashier check your ID and press a key.

    52. Re: Must be a US thing by erikmartino477 · · Score: 1

      Try online, that should work.

    53. Re:Must be a US thing by Anonymous Coward · · Score: 0

      Why? Do you have to pay in advance or something?

    54. Re:Must be a US thing by Anonymous Coward · · Score: 0

      Which works out fine until the payment system is down due to power outage or internet interruption.

    55. Re:Must be a US thing by david-bo · · Score: 1

      You are from Sweden or Finland since Ä on your keyboard is next to '.

    56. Re:Must be a US thing by Anonymous Coward · · Score: 0

      ...and all cash registers stop working

    57. Re:Must be a US thing by Anonymous Coward · · Score: 0

      In India, the act of signing became obsolete a few years ago after PIN gained currency (the signature stuff didn't last too long by the way). I guess it was just the problem of getting people used to an extra step and spend some extra time to complete a transaction -- something that they were not used to for years.

    58. Re:Must be a US thing by Anonymous Coward · · Score: 0

      Since a few years my ATM PIN for my credit card works in France (did not work a few years ago)

      You must be German. Germany is the only country where my (European but not German) bank card sometimes fails. It used to be far more common, though, but it has happened to me this year.

    59. Re:Must be a US thing by Anonymous Coward · · Score: 0

      That's because you're an untrustworthy lot who steal everything not bolted down. In the UK we're trusted to fill our car *before* paying...

    60. Re:Must be a US thing by Anonymous Coward · · Score: 0

      Sure they do, but in Europe you can just fill up and then pay inside afterwards.

    61. Re:Must be a US thing by McGregorMortis · · Score: 1

      Really? That's cool.

      I got so pissed off this summer RVing around the US. Over half the gas pumps would ask for the PIN, and I'd have to go inside. And of those, at half the places I had to charge a large amount, and then go back in after to get a credit for what I didn't use.

      And then, in stores, being asked to physically sign a credit card slip. With an actual pen, like a bloody caveman.

    62. Re:Must be a US thing by Anonymous Coward · · Score: 0

      Mine (US) is chip and pin, but overseas the cashiers/machines usually make me sign something anyway. Possibly their systems don't communicate out to US banks?

  3. Been chip and PIN for years now by Anonymous Coward · · Score: 1

    I don't remember signing for a credit card statement in YEARS. I think the only country I have heard that is still using signatures is the United States. Oddly they are also the only country I know that doesn't have straight up debit cards with no credit card company as a pre-processor.

    I think both Visa and MasterCard have known for a long time that signatures doesn't a good way to prevent fraud from happening there just hasn't been much traction in letting the change happen.

    1. Re:Been chip and PIN for years now by kelemvor4 · · Score: 2

      I don't remember signing for a credit card statement in YEARS. I think the only country I have heard that is still using signatures is the United States. Oddly they are also the only country I know that doesn't have straight up debit cards with no credit card company as a pre-processor.

      I think both Visa and MasterCard have known for a long time that signatures doesn't a good way to prevent fraud from happening there just hasn't been much traction in letting the change happen.

      I do it all the time. I signed the credit card thingy after paying for dinner last night. I don't know how you've avoided it, it's not like it's optional unless you selected debit and used chip+pin.

    2. Re:Been chip and PIN for years now by gnick · · Score: 1

      I do it all the time. I signed the credit card thingy after paying for dinner last night.

      Restaurants are where I see it most and one of the only places where I can see sense in it. It's often rung up in your absence, so it's a chance to acknowledge the charge, plus I'd like to discourage wait staff from deciding their own tip.

      --
      He's getting rather old, but he's a good mouse.
    3. Re:Been chip and PIN for years now by Nethemas+the+Great · · Score: 1

      In this signatureless world how does one impede wait staff from writing their own tips and handing you a placebo to fill out?

      --
      Two of my imaginary friends reproduced once ... with negative results.
    4. Re:Been chip and PIN for years now by Anonymous Coward · · Score: 0

      Well there is that notion of giving everyone a credit card that is a very US thing. In European countries there's more of a notion of going in debt if you do that, and in my country there was a transition from cheques to debit cards in the 90s (for the use case of no cash at hand or arbitrary large restaurant bill) while credit is more for one-time expenses (say, redoing your kitchen or buying a car) after seeing your banker or going with the car dealership etc.'s financial services, and takes the form of a bunch of A4 sheets ; or thought of as 19 percent interest rip off for desperate and weak minded people.

      tl;dr there's no "selecting debit" the card only does debit and ATM. My country went with chip+PIN in the 90s too (having a centralized state tradition also helped or enabled this, totally contrary to the about 40,000 banks and organisms and 50 states in the US. One example is the payphones were operated by a single state company in the entire territory and switched to chip cards in the early to mid 90s. sucked when you were out of mobile phone in the 2000s and coin-operated payphones didn't exist anymore. amazingly though, without a payphone card you can use the debit chip+pin card in payphones. very expensive)

    5. Re:Been chip and PIN for years now by Anonymous Coward · · Score: 0

      Restaurants are...where I can see sense in it...to discourage wait staff from deciding their own tip.

      ...how does one impede wait staff from writing their own tips...?

      With a signature?

    6. Re:Been chip and PIN for years now by Anonymous Coward · · Score: 0

      Restaurants in the civilized world have wireless chip card readers that they bring to your table. It will even calculate your tip for you, or you can enter a specific amount. You enter your pin after the total is displayed.

    7. Re:Been chip and PIN for years now by bluefoxlucid · · Score: 1

      Auditing. The two receipts say "Merchant Copy" and "Customer Copy." If you print an extra copy, that's logged.

    8. Re:Been chip and PIN for years now by Anonymous Coward · · Score: 0

      Simple. When they go to charge your hard they have the terminal there for you to enter your pin. If they can't complete the transaction until you enter your PIN they can't write their own tip. There are safety protocols in place so people can't abuse your card and this is one of them. If you are "Chip and PIN" there is far fewer ways to access your card without that and since we never give out our PINs you should be safe.

      So I have to wonder if the opinions expressed here are mostly from the USA. The God of Death, Kelemvor4, seems to be but I honestly wonder if the rest of you are.

    9. Re:Been chip and PIN for years now by Darinbob · · Score: 1

      Be careful, Chip and pin are not 100% secure iether. The machines have been hacked, cards can be stolen after learning the PIN, etc. The reason people don't check signature as much in the US anymore is because we've gotten complacent. But you can get just as complacent with PINs as well.

      I think some of this complacency by customers is because it's way to easy to dispute card charges. The stores do get penalized though, but they still remain very sloppy, and maybe that's because they just hire the cheapest and least experienced clerks that they can. The whole system is very shaky.

      I prefer cash. When I do use the card I can remember making the payment at the end of the month and quickly scan the bill for any unusual activity. If I used the card more casually instead of using cash, there would be too many listings to monitor easily.

    10. Re:Been chip and PIN for years now by Barefoot+Monkey · · Score: 1

      I don't know how you've avoided it, it's not like it's optional unless you selected debit and used chip+pin.

      How AC avoided having to give a signature? It's easy. Credit cards require PIN, not signature, unless you're in the US, and GP is not in the US.

    11. Re:Been chip and PIN for years now by Anonymous Coward · · Score: 0

      Restaurants in the civilized world have wireless chip card readers that they bring to your table. It will even calculate your tip for you, or you can enter a specific amount. You enter your pin after the total is displayed.

      In some parts of the civilized world, you don't tip. In others, tips are optional.

    12. Re: Been chip and PIN for years now by Anonymous Coward · · Score: 0

      You must be in the US. France, for example, has had chip and pin since at least 1996 or so.

    13. Re:Been chip and PIN for years now by Anonymous Coward · · Score: 0

      I have a debit only card from bank of america. Many years ago they tried to move me to a "check card" that used visa or mastercard but I insisted I didn't want it (No pin!). Ever since they have kept me on an "ATM Card" that works for debit but not credit purchases. I haven't fought that fight with any bank since, so I don't know how hard it is to get one now.

    14. Re: Been chip and PIN for years now by Anonymous Coward · · Score: 0

      In the civilised world we donâ(TM)t tip, staff gets paid a decent salary. That archaic tipping custom goes hand in hand with bribes and corruption.

    15. Re:Been chip and PIN for years now by Anonymous Coward · · Score: 0

      I don't use my credit card very often, but I don't remember ever having to put a signature. I think it is a US thing.

    16. Re:Been chip and PIN for years now by MachineShedFred · · Score: 1

      At least here in the US, there is two copies of the receipt - always take one, even if you just throw it in the next trash can you see after leaving the restaurant - the wait staff will see it's gone and if they even have half a brain will think it's probably a bad idea to try some shit if you kept your copy.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    17. Re:Been chip and PIN for years now by MachineShedFred · · Score: 1

      Credit cards only cause debt if you don't pay them off every month. I find it very convenient to use a credit card in order to get whatever gimmick bonus they've got (cash back, frequent flier miles, etc.) and then just pay it off every month so they don't get a dime of interest. Especially when the credit card company does the work of dividing up purchase categorization so I can look at a nice pie chart of my expenditures and figure if there's something out of balance.

      Credit cards don't automatically equal debt, unless you use them irresponsibly, or are looking for a way to finance a purchase larger than you could pay off in one month. But that's where the responsibility comes in.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
  4. So... chip & sign? by Anonymous Coward · · Score: 1

    Kinda makes you wish they'd bitten the bullet and done chip & PIN instead, doesn't it?

    1. Re:So... chip & sign? by Desler · · Score: 2

      They should have but then they bowed to all the companies that whined and complained even just about having to get chip readers.

    2. Re:So... chip & sign? by ctilsie242 · · Score: 2

      It took multiple acts of $DEITY to get a chip onto cards here in the US. Chip-and-PIN should have been deployed back in 2015, or else merchants would take the financial responsibility. I have yet to encounter a merchant that actually uses a PIN for the credit card side. A lot of stores still have the chip reader taped over, and one still swipes their card.

      I wish the US could join the rest of the civilized world here. Chip-and-PIN for card present transactions, and for other stuff, it would be nice to have a little e-Ink display with a button that can be used with the card's PIN to ensure security for card not present transactions, similar to how SecurID cards work.

    3. Re:So... chip & sign? by bluefoxlucid · · Score: 1

      Seriously, why even have the PIN? The PIN is useful if the card isn't in your possession--at which point you call your bank.

      It's not that it doesn't provide a layer of defense; it's that it provides a layer of defense for an extremely small attack window. You can't clone EVM because the chip is a computer with secure circuitry resistant to physical analysis and fault injection attacks--same with Yubikey-brand FIDO devices, and any other devices for which the vendor chooses a secure semiconductor supplier and secure build practices. You must physically possess the card to use it.

      Is the PIN an unnecessary burden for this supposed security? Would showing your photo ID be an unnecessary burden? Would calling the bank to voice-verify each transaction be an unnecessary burden? Someone is going to say "yes" to one of these, or "yes" to the combination of all of them; yet doing all of these, mandatory, every time, undoubtedly provides further defense.

      Does the threat model indicate that the PIN provides substantial additional security?

    4. Re:So... chip & sign? by Anonymous Coward · · Score: 0

      People lose their cards or get them stolen on a regular basis. Often, you do not notice for a little while (a day or so, until the next time you would use it), giving the thief an opportunity to use it. PIN closes that gap at basically no cost -- remembering a 4-digit number is just not a big deal.

    5. Re:So... chip & sign? by raftpeople · · Score: 1

      The reason the rest of the world went to chip and pin was because their fraud rate was high (many times that of the US). The US had one of the lowest fraud rates. After many years, chip and pin brought Europe's fraud rate down to be equal to US (maybe 2013 or something) and eventually a bit lower.

    6. Re:So... chip & sign? by dskoll · · Score: 1

      A PIN only has to provide defense over a small window. Once you realize the card is lost, you cancel it. I would want the protection a PIN would offer for those minutes or hours or even a couple of days.

    7. Re:So... chip & sign? by Anonymous Coward · · Score: 0

      [citation needed]

      This sounds very unlikely, given both how common credit card use is in the US and how much more crime there is over there.

    8. Re:So... chip & sign? by Anonymous Coward · · Score: 0

      "Does the threat model indicate that the PIN provides substantial additional security?"

      Yes it does.

    9. Re:So... chip & sign? by bluefoxlucid · · Score: 1

      Perhaps. Thing is, there's actually very little identity theft occurring by physical possession of card. Generally, losing the card without realizing it means some cashier has it, rather than a dedicated criminal; as people are generally good folks, this usually gets your bank called, or you get called, or some such thing occurs. Credit cards are also fraud insurance: they spread the cost of charges made with a lost or stolen credit card across all consumers; with this being so little, the cost to each customer is practically-nothing--unlike the sum total of card-not-present fraud, which is unfathomably large.

      Imagine if adding a $26,000 safety system to a car would save three people per year from minor injuries. Would it be worth mandating in all cars? Would it even be worth adding to your car? Why not pay $0.05/month for insurance and get a splint for that sprain instead, if it ever even happens?

    10. Re:So... chip & sign? by MachineShedFred · · Score: 1

      That's because they made a complete hash of the rollout. The credit processors required the EMV chip readers be installed at retailers by the end of 2014 (or 2015?) or else fraud liability shifted to the retailer. So that got everyone moving on getting the hardware out there, but the banks didn't bother issuing EMV chip cards until recently, and they haven't bothered with the PIN part at all. In fact, I got a message from American Express where they were all chest-out and proclaiming "chip-and-signature" as some awesome thing, when it's total bullshit.

      The chip alone only really fixes connection snooping on the merchant's network. If the reader itself (or the PC it's plugged into if it's that style of reader) is compromised, you're still fucked just the same as with magstripe, and it's all slower and more annoying.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
  5. Signature is just for legal reasons by Anonymous Coward · · Score: 4, Insightful

    At one time it was easier to demand payment if someone signed a contract, every receipt was signed to acknowledge that you agree to pay. But now the novella sized contract of ultra fine print that you automatically agree to when the credit card company sends it to you is sufficient.

    I really wish we'd go to Chip + PIN. We have the technology, and it's far more secure than the chip-only nonsense that we use in the US.

    1. Re:Signature is just for legal reasons by AvitarX · · Score: 1

      Is in person credit card fraud really that significant?

      I'd much rather they use some type of two factor auth for online stuff rather than add a PIN that shifts the burden if stolen, and provides more chances to grab my PIN and empty my bank account.

      I've had fraudulent charges 3 times in my life, every single one was done online, the PIN is useless, and likely the chip makes a minimal impact (though it does render card cloning useless in theory).

      The chip seems like a solution to a problem that wasn't really even that big of a problem.

      --
      Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
    2. Re:Signature is just for legal reasons by Anonymous Coward · · Score: 0

      The US does have Chip&PIN, most credit cards just are not issued to use a PIN and we still have a ton of magstripe only. Both my bank card and my corporate credit card (MasterCard) are Chip&PIN, I MUST use a PIN with a chip reader.

    3. Re:Signature is just for legal reasons by Desler · · Score: 2

      The only chip and pin card I’ve personally seen so far is a Target RedCard.

    4. Re:Signature is just for legal reasons by Anonymous Coward · · Score: 0

      No, the US has CHIP & SIGN, the PIN is not required for credit cards. If you're required to put in a PIN in the US, it's because the card is being used as a DEBIT card. It has nothing to do with chip&pin as it is used in the rest of the world.

      If it's used as a credit card, you just have to sign, the chip isn't even decrypted, since there's no pin.

    5. Re:Signature is just for legal reasons by Anonymous Coward · · Score: 0

      If I use a PIN with my credit card it is treated as a cash advance and has an absurdly high interest rate.

    6. Re:Signature is just for legal reasons by zlives · · Score: 2

      wonder why...

    7. Re:Signature is just for legal reasons by OrangeTide · · Score: 2

      People have bought food and gas using my stolen identity (from a state I've never visited). So in person fraud does happen. I also had someone buy a TV from Target with my card, but I don't know if it was an online or in store purchase (those details were not given to me).

      --
      “Common sense is not so common.” — Voltaire
    8. Re:Signature is just for legal reasons by parkinglot777 · · Score: 1

      I really wish we'd go to Chip + PIN. We have the technology, and it's far more secure than the chip-only nonsense that we use in the US.

      I don't use debit card and I never take cash out with my credit cards. I don't even know my PIN on my credit cards, so it is a very inconvenience way to do for me. Besides, how would I do the Chip+PIN at a restaurant or any other places where there is no self checkout/card sliding station? Do I need to go to the machine with my server and punch the PIN in myself? Or do you suggest that I give my PIN to my server? If so how would that be more secure than Chip+Signature?

    9. Re:Signature is just for legal reasons by bluefoxlucid · · Score: 1

      Why do you need two-factor online when you can do it right through the browser? The W3C has accepted some FIDO specifications such as U2F as standards to access devices which sign a digital challenge; it amazes me they didn't produce an EVM-via-browser standard so you could use a USB EVM port to connect a credit card to your computer.

      As with FIDO devices, the EVM device should indicate an attempt to use and require a physical hardware button press to acknowledge before actually sending anything to the EVM chip--no background pop-up windows silently racking up charges on your card. One charge, one button press. Alternately, they could refuse to allow more than one transaction at a time, such that running a transaction locked the device until you inserted a card, cancelled the transaction, or timed out--and then you must remove the card to begin the next transaction. That may be more-secure.

    10. Re:Signature is just for legal reasons by Anonymous Coward · · Score: 0

      That does not invalidate my point that this is just a card issue not an infrastructure one, now does it. Also the company credit card i mentioned I got a fraud block on it just after chip readers were rolled out in the US. I was on a trip and had no idea what the hell the pin was for a card i had for 5 years, so i tried to cancel the pin.

    11. Re:Signature is just for legal reasons by Anonymous Coward · · Score: 0

      I'd much rather they use some type of two factor auth for online stuff rather than add a PIN that shifts the burden if stolen, and provides more chances to grab my PIN and empty my bank account.

      I've had fraudulent charges 3 times in my life, every single one was done online, the PIN is useless, and likely the chip makes a minimal impact (though it does render card cloning useless in theory).

      The chip seems like a solution to a problem that wasn't really even that big of a problem.

      Well, you're using it wrong. The way it works here (Belgium) is: you get a card reader (with keypad and LCD) from your bank.
      To buy something online, you put your card in the reader, enter a number that the online app generated (basically a nonce) in the reader, enter the rounded money amount in the reader, and enter your pin in the reader. These numbers all get hashed by the private key inside your card's chip, and generate a new number on the LCD. That number you enter in the online form (or it does it for you if you connect the reader via USB).

      So that's basically 2-factor authentication, with your pin never being directly exposed. Hashing the amount makes sure no one can do a MITM attack and steal more than the input amount.

    12. Re:Signature is just for legal reasons by Darinbob · · Score: 1

      Credit card companies do allocate a chunk of their budget to losses from fraud. This is apparently cheaper than providing better security.

      That said, there is in-person fraud. It's just not as possible to steal as much that way. You have to use the stolen card before the card is reported stolen is all. Wallets do get stolen, and when they are the thief will try to use that card before the cash. Plenty of places won't check the name or signature or ask for ID when a credit card is used. You can even pay for gas without anyone else being present (you may be asked for a zip code, but if you stole the wallet you likely know the zip code or can guess it).

    13. Re:Signature is just for legal reasons by Waffle+Iron · · Score: 2

      A growing number of restaurants do have card readers at each table.

      This can be a big advantage because many waiters seem to think that the final round trip of picking up your card, processing and returning it is their lowest priority task. With a card reader, you can sometimes avoid an extra 10 minutes or more of waiting around after the end of your meal.

    14. Re: Signature is just for legal reasons by Anonymous Coward · · Score: 0

      Typically, yes, but some credit cards are issued with chip+pin, some even with it as the top priority method.

      https://www.flyertalk.com/forum/credit-card-programs/1815689-usa-emv-cards-availability-q-chip-pin-signature-2017-a.html

    15. Re:Signature is just for legal reasons by Anonymous Coward · · Score: 0

      I really really don't want to go Chip+PIN because then they say "you must have given away your pin" even when there's no good reason to believe it. Try for somebody lifted the pin with a high-speed camera.

    16. Re:Signature is just for legal reasons by RatherBeAnonymous · · Score: 1

      Restaurants will have to invest in wireless card readers the servers carry to the tables. The technology has existed for over a decade. The first time I saw it was in Europe in '05.

    17. Re:Signature is just for legal reasons by angel'o'sphere · · Score: 1

      The server usually brings a remote device where you stick in your card and then enter the PIN.

      --
      Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
    18. Re:Signature is just for legal reasons by Anonymous Coward · · Score: 0

      What I've witnessed for about a decade : the server brings a card reader to your table and you do chip+PIN on it.
      Before there were mobile card readers well you went to the restaurant's bar/counter and paid there (that's where they have a cash register). No big deal / we didn't think much of it, moving your ass to there was/is a normal thing since you use a "special" computerized payment method. You can have small chat in the seconds it takes to process the payment, typically with the owner if that's a small restaurant.
      But as I said you can pay at a mobile reader brought at your table.

      In my country the notion of giving a card to someone else is alien, even more giving it to someone who will run to the other side of the restaurant with it . Your card, you put it into the reader. If you're at a cash register (like a supermarket, tobacco store or somewhere like McDonalds) the cashier operates the cash register and the reader is a small independent (connected with some serial cable) thing on your side of the counter with keypad, LCD (monochrome text lit by a couple green LED) and a slit to insert the card in.

    19. Re:Signature is just for legal reasons by Anonymous Coward · · Score: 0

      In about 1994 there was a French dumb terminal with a debit card reader. It's the Magis version of Minitel
      http://www.minitel.us/terminals/magis

    20. Re:Signature is just for legal reasons by tepples · · Score: 1

      it amazes me they didn't produce an EVM-via-browser standard so you could use a USB EVM port to connect a credit card to your computer.

      That means you'd have to buy a computer in order to use a card. Or would the smart card reader also have USB OTG, USB type C, and Lightning plugs for use with an iPhone, Android phone, iPad, or Android tablet?

    21. Re:Signature is just for legal reasons by Anonymous Coward · · Score: 0

      You enter it in the terminal the waiter brings you, after you stick the card in. Have you never been in a restaurant the last twenty years?

    22. Re:Signature is just for legal reasons by AvitarX · · Score: 1

      Oh cool, so I can't make an online purchase from my phone while out and about?

      Seems like a great system.

      --
      Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
    23. Re:Signature is just for legal reasons by AvitarX · · Score: 1

      Sure, that was what, $200 or so stolen?

      The last time mine was stolen someone got $3000 in concert tickets (website hack I believe , because they used my fake birthday I often use).

      And the chip blocks cloning, so the only in person fraud is stolen card, which makes it pretty easy to catch anyway.

      It sounds like the chip prevents what happened to you.

      --
      Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
    24. Re:Signature is just for legal reasons by bluefoxlucid · · Score: 1

      Why wouldn't it? There are Type-C to micro-USB and Type-C to USB plugs. Just put a Type-C port on the device and have the appropriate cable.

      There are EVM chip readers for smart phones as well, although most people don't pay through their smart phone--plenty of people pay using their smart phone, and you could still set up a Google Wallet and Android Pay type account: you'd have to call your bank to have the new trust set up, the same as you do today.

  6. That's not what the signature is for by grasshoppa · · Score: 5, Informative

    It's for verification of purchase after the fact, not to prevent fraudulent purchases at the time of transaction.

    Mind you, it's still kinda stupid because if someone is planning on disputing a charge they can just fuck up their signature at time of transaction BUT it's worth the clarification.

    --
    Mod me down with all of your hatred and your journey towards the dark side will be complete!
    1. Re:That's not what the signature is for by Anonymous Coward · · Score: 3, Informative

      You are signing a legal document that says you agree to the charges...

    2. Re:That's not what the signature is for by Anonymous Coward · · Score: 0

      I scribble every time. I can't remember the last time I've ever actually signed my name on that line.

      I'm going to start signing Donald J. Trump.

    3. Re:That's not what the signature is for by Anonymous Coward · · Score: 0

      Doesn't matter, you can dispute any charge even without a signature. It verifies nothing. You can't sign the electronic signing pads like your paper signature (proven fact, the angle and the stylus and the touchscreen don't work the same as paper) so the signature can't be verified at all. There is no reason to do it all.

    4. Re:That's not what the signature is for by Desler · · Score: 2

      Of course the signature doesn’t verify anything. It was never meant to. The summary claim that signatures are for fraud prevention is laughably wrong.

    5. Re:That's not what the signature is for by Anonymous Coward · · Score: 0

      It can be used for verification after the fact, but it is also intended as identification. The signature can be compared to the signature on some other form of ID. A signature is, in fact, a form of biometric, so msmash's diatribe is silly. The real reason that signatures are useless is that no one makes use of them. The credit card companies are competing with cash, which doesn't require ID or a signature.

    6. Re:That's not what the signature is for by orlanz · · Score: 1

      That's not what the signature is for either. The article is just another clueless poster who doesn't know how credit cards work. It starts off just plain wrong. The signature is a very simple security measure for the SELLER to verify that you are the owner of said card at time of sale. The seller is supposed check if your signature matches what is on the card. Whether they choose to or not is up to them. The risk of the sale being disputed is on them so it is up to them to check.

      What most medium to large retailers have found out is that the time (money) spent to do that check wasn't worth the very very small cost of the disputes. MC for the longest time made the signature a requirement as part of the transaction. They themselves have had no use for it. Then they made it optional for amounts less than a dollar value.

      MC did a study and found out that no one uses the signature; it just slows down the overall process. So now they are just making it optional for all transactions. So a POS can implement a MC transaction without signature. There is actually very little news here.

    7. Re:That's not what the signature is for by Anonymous Coward · · Score: 0

      Yes, but the point is being able to provide a signed recept does not demonstrate who signed it.

      Signatures (like all biometrics) are week authentication, because they work on the assumption that because a person who doesn't invest effort in falsifying one will produce a more or less consistent output but completely ignore the fact that an attacker will be making an effort to defeat the system.

      All it proves is that somone claiming to be me authorized the transaction. If I assert whoever did so was a fraud, presenting a signature that is allegedly mine doesn't prove me wrong even if the signature passes verification as resembling mine. It fails even more severally if I am fraudulently alleging fraud as it's pretty easy to screw up my own signature when I authorize the transaction I intend to dispute later making the signature not pass verification after the fact.

    8. Re:That's not what the signature is for by Darinbob · · Score: 2

      You can always dispute the charge, but it's not always as easy or hard every time. If the signatures seem to match, then it's harder to dispute. If you are taken to small claims court, that signature can be used for or against you. Ie, if you scribble gibberish instead of a signature in an attempt to dispute the charge later, that can be used against you. It is unlikely though, most credit card companies take the loss due to fraud into account; the disputed charges usually end up with the store being the one that loses, and most stores won't bother trying to get the money back from you for a one time fraud.

    9. Re:That's not what the signature is for by skids · · Score: 1

      Yeah good luck with that. Sometime in my 30s I stopped being able to make anything even resembling my own signature. I can't for the life of me handwrite two signatures that look anything alike right under each other. And I'm from a generation that had hours and hours of penmanship drills in grammar school. I can't even imagine how diverse signatures have gotten now that handwriting is something of a weekly event rather than several times a day.

    10. Re:That's not what the signature is for by ausekilis · · Score: 1

      No... It's for drawing genitalia.

    11. Re:That's not what the signature is for by Bert64 · · Score: 1

      Whenever i've had to sign something it looks different every time...

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    12. Re:That's not what the signature is for by Tony+Isaac · · Score: 1

      The seller doesn't use the signature, unless there is a dispute. If you dispute a charge, MC may (only rarely) go to the vendor, who produces the signature. They then compare it to yours to see if it matches. That's it.

    13. Re:That's not what the signature is for by Anonymous Coward · · Score: 1

      It's bitztream the autism-hating, custom EpiPen-hating, Musk-hating, Qualcomm-hating, Firefox tabs-hating, Slashdot editors-hating Slashdot troll!

  7. Maybe finally pin required by stabiesoft · · Score: 1

    Hopefully this marks the beginning of requiring a pin for a CC transaction. As a question, at costco, the CC card can be processed before everything is scanned. I thought the transaction required the total before a chip charge could be processed. Is this not true?

    1. Re:Maybe finally pin required by Anonymous Coward · · Score: 0

      I'm still baffled why I can make purchases under $50 at a variety of places with my chip card with no PIN or other authentication method. How exactly is that more secure for me?

    2. Re:Maybe finally pin required by Anonymous Coward · · Score: 0

      QuickChip for Visa and M/Chip Fast for MasterCard allow the total to be settled after the Cryptogram is generated.

    3. Re:Maybe finally pin required by 93+Escort+Wagon · · Score: 1

      As a question, at costco, the CC card can be processed before everything is scanned. I thought the transaction required the total before a chip charge could be processed. Is this not true?

      Not just Costco - same thing at our local Fred Meyer. I wonder if they're just checking whether you're up against the card's credit limit or not?

      As an aside... I don't know why anyone would run a month-to-month balance on the Costco card, since the interest rate is quite high. I use mine when I shop there because of the cash back, but am sure to pay the whole balance before the due date.

      --
      #DeleteChrome
    4. Re:Maybe finally pin required by torkus · · Score: 1

      The swipe just reads the card. You can swipe your card at CVS/Walgreens/etc. ahead of the bill total usually too. Not so when you're using chip but that's another story.

      The machine takes your card info, holds it, then waits for the cashier to hit the complete/send to CC machine buttons - at which point that machine gets the final total, asks for your OK, and then processes the transaction.

      --
      You can get rich if you own a politician, but you have to be rich to buy one in the first place.
    5. Re:Maybe finally pin required by sexconker · · Score: 1

      It's not. It's more "convenient".

      The idea is that low value transactions should favor speed over security. I disagree completely.

    6. Re: Maybe finally pin required by Monster_user · · Score: 1

      Don't you know yet, $50 ain't worth bending over to pick up off the pavement. Should call it 50 cents.

    7. Re:Maybe finally pin required by bluefoxlucid · · Score: 1

      I'm not sure a PIN actually adds any significant additional security.

    8. Re: Maybe finally pin required by freeze128 · · Score: 1

      If $50 isn't worth protecting, then give me $50.

    9. Re:Maybe finally pin required by Darinbob · · Score: 2

      The CC is scanned for authentication. IThe transaction is not fullly processed at the time. They are finding out if the card is good and what amount of credit is remaining. That is taken into account when the cash register determines the total charge. If everything is in order then you're done (the transaction is settled later electronically). If the total you are purchasing exceeds the credit then it will be rejected and you'll be asked for payment method. This does mean that there's a period of time when you can exceed the credit limit, but that's not necessarily good for you, you still have the pay the total amount and it may affect your credit.

      Processing and authentication takes time, and most stores are very anxious to speed this all up (one reason they dislike the new chip-only cards because they were taking extra time per customer).

    10. Re: Maybe finally pin required by Anonymous Coward · · Score: 0

      They did. Most CC providers have opted to reduce the fraud coverage floor from $50 to $0.

  8. Never Checked by 0100010001010011 · · Score: 1

    I almost always sign them with a circle, square and triangle. No one in the US ever check.

    The only time I'd ever had the signature checked against my passport was when I was in Europe and they never saw the non-chipped cards.

    1. Re:Never Checked by DogDude · · Score: 1

      Retailers are supposed to check. Most don't. The retailer I work for certainly does.

      --
      I don't respond to AC's.
    2. Re:Never Checked by UnknownSoldier · · Score: 1

      > I almost always sign them with a circle, square and triangle. N

      I always sign with an X.

      Between the two of use we have the entire PlayStation button symbols. :-)

      > No one in the US ever check.

      Yup, that's my experience as well -- no one cares. Hell 99% of the time they don't even check ID. *facepalm*

    3. Re:Never Checked by cob666 · · Score: 3, Interesting

      Hell 99% of the time they don't even check ID. *facepalm*

      That's because most merchant service providers don't require that the merchant look at the customer's ID. While some networks (MasterCard, VISA, Discover, AmEx) allow the merchant to reasonably verify that the customer is the authorized card holder, some also explicitly FORBID a merchant accept a credit card that is not signed, this is why they ask you to sign the card before they can accept it.

      Many years ago, while working retail when you still had to use a 'knuckle buster' when accepting a credit card, our store was audited and we were fined for accepting an unsigned card. Merchant service providers don't seem to do things like this any longer.

      --
      Do what thou wilt shall be the whole of the Law - Aleister Crowley
    4. Re:Never Checked by jez9999 · · Score: 1

      Because it's impossible to look at a stolen signature and forge it lol.

    5. Re:Never Checked by bjdevil66 · · Score: 1

      Off-topic, but is that choice (circle, square and triangle) from the Playstation symbols, or something older? The old EA logo that was shaped like those three shapes, and The Bard's Tale on the C64 had those three shapes as a key part of a puzzle, too.

    6. Re:Never Checked by Darinbob · · Score: 1

      Retailers are very often on the hook if the charges are disputed by the customer. It depends on the agreement with the credit company; some big retailers will have a good eal, but smaller stores have no clout. So a disputed charge most likely means the small retailer is the only one losing money. So the smaller retailers should be the ones who are most likely check signatures and ask for photo ID, but it does not always seem that way.

    7. Re: Never Checked by Anonymous Coward · · Score: 0

      Checking ID is as useless as checking signatures. Fraud prevention has moved on to using analytics instead of dumb, easily tricked humans.

      I can take your credit card and 10 minutes later do a transaction with any merchant with my authentic UD and matching signature.

  9. $25.01 ... please sign... by iprayfatcashewd · · Score: 0

    The only time I have to sign for a credit card purchase is when it's over $25. That's rare since I got Amazon Prime.

    1. Re:$25.01 ... please sign... by DogDude · · Score: 2

      No worries. Amazon has a lot more than your signature on file!

      --
      I don't respond to AC's.
    2. Re:$25.01 ... please sign... by gnick · · Score: 1

      The only time I have to sign for a credit card purchase is when it's over $25. That's rare since I got Amazon Prime.

      It's really inconvenient signing those Amazon receipts. Leaves pen marks on my monitor.

      --
      He's getting rather old, but he's a good mouse.
    3. Re:$25.01 ... please sign... by Anonymous Coward · · Score: 0

      Or when you call those sex chat lines. "Please buy 5 gold to continue!"

  10. Cash by Anonymous Coward · · Score: 0

    The stupid chips also do not work well at fraud prevention. They prevent some card slimmer scams, but they only protect the card if the reader actually takes chips (and most do not), making it all security theatre. You want to prevent credit and ID theft? Use cash. Only use a card when you really, really have to.

    1. Re:Cash by SecurityGuy · · Score: 5, Insightful

      The best way to prevent ID theft is to stop pretending it's a real thing. Identity theft should be treated as not having anything to do with the consumer whose identity has been "stolen" at all. It's fraud between the criminal and the financial institution or lender. It should immediately end, as far as the consumer is concerned, with a statement that the consumer didn't open the account.

    2. Re:Cash by Anonymous Coward · · Score: 0

      if the reader actually takes chips (and most do not), making it all security theatre.

      Only in the US, plentiful everywhere else and in some countries, they all support chip.

  11. Yes, it's about time. by rickb928 · · Score: 1

    I've seen some terrible 'signatures'. The Nike Swoosh has more information. And signatures that aren't being matched, of course, are of no use in risk management.

    Biometrics will come on, since your more advanced smartphone has a reasonably functional fingerprint scanner in it, and embedding that in terminals will take, oh, maybe about 4 years. Getting EMV terminals out in force took 3 years of concerted effort. Oh, yeah, fingerprint scanning terminals will be a while.

    PINs work well where they are used - your waitress/waiter will need to bring a tablet or some POS device to your table. The In N Out I go to the most does this in the DRIVE THRU FOR GOSH SAKE, and only needs to deploy a receipt printer, not so hard. Since those Ziosk things are getting popular, you just have to repackage it so the fancier restaurants will put them out. Or just bring a Ziosk tablet when the time comes. Not so hard. The signature there is pointless also, so PIN or maybe a camera... Oh, dear.

    So long as it doesn't need new hardware, it can be done quickly. Card -present fraud is surprisingly easy to deal with anyways. Use TFA and touch the fingerprint scanner on your phone. Oh, isn't that called Android Pay? Or Apple Pay? Your bank might have an ePayment app.

    MasterCard actually isn't leading anything by doing this, it's just following the electronic card payment market...

    --
    deleting the extra space after periods so i can stay relevant, yeah.
  12. Key phrase: Customers BELIEVE by WillAffleckUW · · Score: 0

    Just because you believe something is true, doesn't make it so.

    Signatures are also useful in terms of identity theft, which is now rampant.

    --
    -- Tigger warning: This post may contain tiggers! --
    1. Re:Key phrase: Customers BELIEVE by Anonymous Coward · · Score: 1

      No, signatures are not useful in terms of identity theft. I know people who regularly sign with a square or a drawing of a tie fighter or whatever else they're in the mood for. Number of times they're told "Hey! Your signature doesn't match what we have on file, you must be stealing this person's identity!"? Zero. Because merchants never check. Similarly, if my card is stolen and someone uses it to purchase something and I say "hey bank, that isn't my purchase, and you can tell because the signature is wrong!", it won't matter -- even if I've been trying to be consistent with my signature, there's a crazy amount of variation in it from times when I'm signing on devices with really bad touchscreens. Moreover, some credit card theft is done by people who had access to my signature anyway -- if a waiter at a restaurant grabs my card number when they head off to swipe the card, they'll also get a receipt with my signature on it, in which case they can easily practice a bit and forge decent copies of it, so a good matching signature isn't proof that I bought something any more than a really bad signature is proof that I didn't.

      They're absolutely useless, and are only kept around for two reasons: security theater that tries to convince people that cards are secure, and the psychological effect on some people that if they signed for something, they are responsible for it and thus they are more likely to pay their credit card bills later.

    2. Re:Key phrase: Customers BELIEVE by sjames · · Score: 1

      Not really, no. Many people sign inconsistently in the first place. Their signature today won't be an exact match to whatever you have on file. A proper expert analysis of 2 signatures to decide if they're from the same person will cost at least $10,000. The transaction would have to be worth significantly more than that for the signature to have any value at all.

  13. The electronic "signature" pad is a bigger joke by 140Mandak262Jamuna · · Score: 4, Insightful
    So many places have an electronic pad that you sign with a stylus. That low res image less than 72 dpi is the defense against fraud? I have signed in Tamil many times and no one seemed to be bothered.

    No, the signature was needed because that allows the credit card company to charge 2% commission from the merchant. The alternative to signature was to use a pin pad. If you use pin at the point of sale, the money comes directly from your checking account, there is no "risk" and it is no longer an unsecured credit given by the credit card company to the merchant. Point of sale terminals, pin and the ATM networks charge only a maximum of 25 cents per transaction.

    It was a great marketing coup by Mastercard and Visa to create the "debit" cards, make it work in their network, and muddle the lines and demand 2% commission from the merchants. The consumers never cared about the difference. Eventually all the merchants complied and since all of them do it they were able to pass on the cost to us. So we pay 2% more on every purchase.

    Unless a big player like Google or Apple come up with in independent payment network, competing with MC and Visa there is no relief for us. They all come up with ideas and fight with each other instead of Visa/MC. There is a demand for a payment method with low transaction charges for people who dont carry a balance, who have protection of 50$ limit on liability. Till something gains traction, there is nothing to challenge the duopoly.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    1. Re:The electronic "signature" pad is a bigger joke by sconeu · · Score: 2

      Let us not forget when you have to sign with your friggin' finger at times.

      Either way, signing on a pad of some kind with a stylus or a finger doesn't look ANYTHING like my normal sig, so I kind of just sign with a "swoosh" on those.

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    2. Re:The electronic "signature" pad is a bigger joke by 93+Escort+Wagon · · Score: 1

      Yeah, I love "signing my name" on an iPad when I'm at the Apple Store. It's basically just a profile of the Rocky Mountains.

      --
      #DeleteChrome
    3. Re:The electronic "signature" pad is a bigger joke by DogDude · · Score: 1

      It was a great marketing coup by Mastercard and Visa to create the "debit" cards, make it work in their network, and muddle the lines and demand 2% commission from the merchants. The consumers never cared about the difference. Eventually all the merchants complied and since all of them do it they were able to pass on the cost to us. So we pay 2% more on every purchase.

      I'm not sure what point you're trying to make. Before debit, V/MC got 2-2.5% of all charges. With debit, like you said, they only get about $0.25/transaction (plus some more fees). Debit is significantly cheaper for merchants who do transactions that are larger than $40-$50.

      --
      I don't respond to AC's.
    4. Re:The electronic "signature" pad is a bigger joke by 140Mandak262Jamuna · · Score: 1
      Even if you use a debit card, if you sign instead of using pin number, they need to pay 2% commission.

      25 cent transaction is only for pin based transaction. The contract between Credit card company and the merchant prohibits the merchants from giving a discount for pin transactions. No discount for cash transactions, no discount for pin transactions.

      --
      sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    5. Re:The electronic "signature" pad is a bigger joke by rhazz · · Score: 1

      There is a demand for a payment method with low transaction charges for people who dont carry a balance, who have protection of 50$ limit on liability.

      Is there? If a person never carries a balance, then wouldn't they probably have the money on hand to pay for purchases without the credit step? I think most people who don't carry balances just like the rewards programs that come with the card and don't know or don't care that the ultimate result is paying higher prices anyway.

    6. Re:The electronic "signature" pad is a bigger joke by Anonymous Coward · · Score: 0

      Why in the world would anyone who could use credit choose debit instead? With credit you've got firewalled escrow. With debit you're handing over your personal bank account to the merchant, as well as to every hacker-cracker who has access to that merchant's data.

    7. Re:The electronic "signature" pad is a bigger joke by thegarbz · · Score: 1

      The consumers never cared about the difference.

      Err no. Some consumers never cared about the difference. These hybrid cards on the other hand were a huge benefit to those people who couldn't get a credit card because of age or credit related issues, or who just plain didn't want to deal with an entire different card just to do online purchases.

    8. Re:The electronic "signature" pad is a bigger joke by avandesande · · Score: 1

      The difference is when you use signature on PIN card the credit card company will handle disputes like they would a normal credit card. They aren't just stealing the 2%.

      --
      love is just extroverted narcissism
    9. Re:The electronic "signature" pad is a bigger joke by angel'o'sphere · · Score: 1

      In plenty of countries it was common to ask for a discount if you pay cash.
      E.g. in Greece .. but that where times when the card company charged 5% or more.

      --
      Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
    10. Re:The electronic "signature" pad is a bigger joke by Anonymous Coward · · Score: 0

      Before debit, V/MC got 2-2.5% of all charges.

      It gotta be more than that now. I get a straight 2.5% kickback on everything, no limit, no yearly fee, on my card. (Its a USAA VISA "limitless cashback rewards") I pay it off every month so no interest charges - the card does carry an obscene interest rate if I didn't.

    11. Re:The electronic "signature" pad is a bigger joke by Anonymous Coward · · Score: 0

      DogDude put debit in quotes for a reason, he/she/they're referring to credit cards. Most people don't really see any difference between the two, except CC don't need pins and are therefore more "convenient". (It's been very rare in the last 15 years that I've even actually had to sign for a cc purchase, even though it was technically required.)

    12. Re:The electronic "signature" pad is a bigger joke by sysrammer · · Score: 1

      Heh. That's what my sig looks like when signing on paper with a pen. On a pad, it looks like the background pattern of a captcha.

      --
      His ignorance covered the whole earth like a blanket, and there was hardly a hole in it anywhere. - Mark Twain
  14. Signature binds a contract by swm · · Score: 1

    Your signature on a CC receipt is your agreement to pay the charge.

    Clerks can check the signature on the receipt against the signature on the back of the CC as a form of verification, but that is secondary.

    1. Re:Signature binds a contract by sjames · · Score: 1

      Clerks can check the signature on the receipt against the signature on the back of the CC as a form of verification, but that is secondary.

      Only in the sense that your auto mechanic can give you a complete physical when you apply for life insurance.

  15. USPS? by spiritgreywolf · · Score: 1

    Hopefully they will inform the USPS, as having "Check ID" or something similar on the back of the card is NOT accepted by the idiots at the Post Office.

    It doesn't really happen until the US Postal Service supports it, as they seem to be the litmus test as the lowest common denominator with respect to technology. /sarcasm

    --
    Never have a philosophy which supports a lack of courage
    1. Re:USPS? by AvitarX · · Score: 3, Interesting

      Well, technically no merchant is allowed to check ID, or accept a card with check ID written.

      The USPS is simply not violating the contract they signed when getting a merchant account.

      --
      Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
    2. Re:USPS? by sremick · · Score: 4, Interesting

      Perhaps technically, but in the countless years I've done it on all my cards, I've never had a problem anywhere. Including the USPS.

      Would be nice to see the USA crawl its way a bit out of the stone ages of credit card processing compared with the rest of the world. We shop in Canada a ton and their chip systems validate cards in 1-2 seconds, their portable wireless devices at restaurants are high-tech and slick, and PINs offer far more security than a signature. At this point, needing to use a signature is a shopping/dining speedbump akin to writing a physical check... justifiably seen as archaic and idiotic given modern knowledge and technologies. I find myself apologizing to the Canadians for it more than they apologize in general.

      Took us forever to get chips while the rest of the world left us in the dust, and we're still stuck using stupid signatures. We had plenty of shame and were the laughing stock of the world well before Trump became the pinnacle of national embarrassment, but still.

    3. Re:USPS? by sl149q · · Score: 1

      1-2 seconds?

      I use Apple Pay and get my ding to say it is authorized in about a quarter of a second or less. I usually decline the receipt so I'm walking to the door in 1-2 seconds.

      Costco Canada does tap at the till and for their gas stations also do tap. That changes the time to get started pumping from minutes to seconds. I have arrived after somebody was already at the pump and started filling, got to about 10-15 liters before the other person started pumping.

    4. Re:USPS? by Anonymous Coward · · Score: 0

      No one is supposed to accept your credit card with see id written on the back of it. That is not what that space is for. You signing that space is akin to you having signed a legal contract agreeing to the terms of the loan. No signed contract(card) = not valid credit card.

      You could sign the card and still write see id under it, but with no signature it legally isn't a valid credit card.

    5. Re:USPS? by Anonymous Coward · · Score: 0

      The requirement for the card to be signed isn't from the Post Office, it stems from Visa/Mastercard merchant agreements.

    6. Re:USPS? by Anonymous Coward · · Score: 0

      I find myself apologizing to the Canadians for it more than they apologize in general.

      Don't believe you. The universe would implode upon itself if that ever happened.

    7. Re:USPS? by AvitarX · · Score: 1

      The PIN is mildly more secure.

      Stolen card fraud is such a small fraction of overall fraud as to be irrelivant.

      And as a user, it makes it harder to recover if you card and PIN are stolen.

      --
      Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
  16. The signature was never about security by tlhIngan · · Score: 5, Informative

    Signing your signature on the line or your card was never about security.

    It was about contracts.

    Signing the back of your card means you agree with the Cardholder Agreement between you and your issuer. Merchants need to check the signature of the card because if it isn't signed, or signed incorrectly, it means the bearer (i.e., who holds the credit card) does NOT agree to the terms of the agreement and thus any transaction made can be null and void.

    The cardholder agreement is that little piece of contract stating if you use the card, you agree to pay it off, interest rate, late payments, fraud, etc and all the other terms of the credit card. A merchant who does not verify your card can get screwed if you refuse to pay since you refused to agree with the agreement.

    The slip that you sign is the same deal - it basically says you the bearer agree to pay the amount shown on the slip per your card holder agreement. If you do not agree, you do not sign the slip (this is especially true if the slip is incorrect - do NOT sign it). When doing a dispute, the credit card company looks at the slip and sees if it was signed. In the old days where they had the carbon paper slips and the slider machines that go ka-thunk as you used them, tearing the slip up has the same effect.

    That's it. That's all the signatures meant.

    And if you had "See ID" or something written on your card, the merchant is actually supposed to cut up the card - it is not a valid card (no on agreed to its use so its presentation means it must be destroyed as it's use is fraudulent).

    With Chip+PIN, entering your PIN is basically agreeing to the charges, and since the PIN and everything is held securely inside the crypto processor on the smart card, it verifies you as the valid user.

    And yes, this is why "Card Not Present" transactions are far more risky - you the merchant are basically relying on the good will of the customer to uphold their end of the agreement despite not actually having a signed agreement to do so.

    1. Re:The signature was never about security by Anonymous Coward · · Score: 0

      A contract doesn't need a physical signature to be legally binding.

      Just as a contract isn't necessarily legally binding just because it has a signature.

    2. Re:The signature was never about security by Anonymous Coward · · Score: 0

      Really? Then please give me your kindney because I have here a contract saying you'll do that if asked.

    3. Re:The signature was never about security by Anonymous Coward · · Score: 0

      And if you had "See ID" or something written on your card, the merchant is actually supposed to cut up the card

      Link please? I'm genuinely curious about this. If any merchant ever tried to cut up a consumer credit card - they would be - rightfully so - sued by the consumer. Denying the card and refusing to do business with the consumer is one thing - cutting up the card is a different discussion.

      In practice its a moot point now but in theory/per the agreement between the merchant and payment processor (Visa or MC) - what are the official allowed actions here?

    4. Re:The signature was never about security by Tony+Isaac · · Score: 1

      Nope, it's not about contracts. The signature is only used for dispute resolution.

      If you dispute a charge, MC may go to the vendor with a request for the signature. They then compare the signature to the one they have on file, to see if it matches.

      That's it. The signature doesn't bind you any more than using your card online. You are agreeing to the "contract" just by using the card, the signature doesn't add anything to it.

    5. Re:The signature was never about security by naughtynaughty · · Score: 1

      Wrong, merchants are not supposed to cut up cards that say "See ID", you simply made that up.

      Visa/Mastercard has instructions for how merchants are to behave and NOTHING in those instructions tells the merchants to cut up cards that aren't signed or have "See ID" printed on them.

      Seriously, stop guessing.

  17. People seem to be missing the point... by Timothy2.0 · · Score: 1

    Of course a signature isn't a fraud *prevention* mechanism...it never was, unless the early days of credit cards saw vendors having databases of customer signatures against which to compare. The signature is there for fraud *investigation*. If you argue that your identity's been stolen, the firm investigates, pulls up the purchase slip with a signature that doesn't match yours, BINGO...they know you're not bullshitting.

    1. Re:People seem to be missing the point... by naughtynaughty · · Score: 4, Informative

      Of course a signature isn't a fraud *prevention* mechanism...it never was, unless the early days of credit cards saw vendors having databases of customer signatures against which to compare. The signature is there for fraud *investigation*. If you argue that your identity's been stolen, the firm investigates, pulls up the purchase slip with a signature that doesn't match yours, BINGO...they know you're not bullshitting.

      Why so many people persist in claiming that the signature isn't used for fraud prevention is odd.

      It's simple enough to pull up the Mastercard/Visa merchant rules and see that they explicitly use signatures as a means of verifying the person making the charge is the authorized cardholder and it has nothing to do with a future "fraud investigation".

      That a signature can also be a piece of evidence in determining, after the fact, that the purchase was made fraudulently doesn't mean the signature isn't/wasn't a fraud prevention mechanism.

      From Mastercard https://www.mastercard.us/cont...

      "Performing a Signature Comparison
      When a signature is obtained as the CVM for a Mastercard POS Transaction completed with a
      Card (but not when an Access Device is presented), the Merchant must compare the signature
      on the Transaction receipt with the signature on the Card to determine whether they appear
      to be the same.
      If the Merchant believes that the signature on the Card does not match the signature on the
      Transaction receipt, the Merchant must contact the Acquirer for instructions. "

      Why is that there? Fraud prevention

  18. PIN + signature ? by Frederic54 · · Score: 1

    As more and more stores accept chip, I pay with my chip + PIN, and often, the cashier asks me to sign a receipt too, why? Also I can pay with Android Pay and the cashier still ask for a signature, it's annoying...
    But I can go at Target and they don't ask anything if less than $40, go figure.

    --
    "Science will win because it works." - Stephen Hawking
  19. Sincerely, PopeRatzo's Mother by PopeRatzo · · Score: 2

    Next, we need to get schools to stop requiring signatures on absentee notes when kids cut school. I'm pretty sure that during junior high I wrote my mom's signature more often than she did.

    --
    You are welcome on my lawn.
  20. It's not just for verification by sootman · · Score: 1

    I heard this on the Internet so I can't say for sure if it's true, but on the other hand, the logic is sound. Can anyone verify one way or another?

    What I heard is that this is partly for use in cases of fraud. It's not so much about proving a positive as it is disproving a negative. (Or something like that.) If some random guy steals my credit card and tries to use it and gets challenged, he can always say "whoops, I found it in the parking lot, put it in my pocket, and accidentally used it instead of mine." However, no way in the world would he also accidentally sign my name instead of his own. If you're caught with someone else's card and you signed their name that is 100% proof of fraudulent intent.

    Anyway, that's what I've heard. Does anyone know for sure?

    That said, I can see why they'd dump the signing requirement. I'm sure the above would only be a factor in a tiny number of fraud cases, and even in those, the signature is probably an illegible scrawl 98% of the time. (And probably 99.5% with electronic signing devices.)

    --
    Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
  21. What's a signature? by Anonymous Coward · · Score: 0

    My signature is so bad that I bought a stack of cursive writing paper to learn how to do a proper signature.

    1. Re:What's a signature? by naughtynaughty · · Score: 1

      You should have just bought a rubber stamp instead.

      http://www.simplystamps.com/si...

      I do some genealogy research and writing back in the days when it was a practiced art ranges from beautifully almost unreadable to unattractively unreadable. It's overrated and signatures are even worse. For some they seem to become an artistic flourish, but utterly unreadable. In others just garden variety scrawls.

      Printing is far superior and schools are right to abandon teaching children how to make cursive letters.

  22. Fraud Works Both Ways by painandgreed · · Score: 5, Informative

    My father worked in credit card all his career. From most of the stories he'd tell, as much as not, the signature came up when somebody tried to decline charges. Once they find out the CC company have the signature and it looks like their signature, they admit they bought the item but were now having buyers remorse. Next comes signatures by other family who they loaned their card to with the intent of letting them buy stuff. Once faced with knowledge there is evidence that they or their agent used the card with their agreement, they stop trying to deny charges and just pay up.

    1. Re:Fraud Works Both Ways by Anonymous Coward · · Score: 1

      Works the other way, too. A non-matching signature can be a persuasive argument that the owner did not use the card. I have disputed fraudulent charges by asking for a copy of the signed invoice...which was not forthcoming, not surprisingly.

    2. Re:Fraud Works Both Ways by Anonymous Coward · · Score: 0

      I always sign everything Jon Pater.

    3. Re:Fraud Works Both Ways by naughtynaughty · · Score: 1

      Why would you dispute a charge by requesting something?

      You simply dispute a charge by saying it wasn't yours and let the bank do their job. You certainly don't dispute a charge by going to a merchant and requesting an "invoice". At least not in the US.

    4. Re:Fraud Works Both Ways by Kjella · · Score: 4, Interesting

      It's all about getting the money. Funniest story a former colleague told me, son had borrowed dad's credit card to go drink... and he started out sober and signed in his dad's name, but as the night passed he got so drunk he started signing with his own name. Son returned the card, dad disputed the mysterious charges without knowing any of this. They called back, told him he'd better have a chat with his son. Dad confronted son, son denied it and apparently dad was still not convinced because he went like "But he said he didn't do it!" and my colleague was like *facepalm*.

      They sent him copies of the slips, son finally admitted it and dad was like "But I didn't sign for this, can't I still dispute it?" and my colleague went like "Sure... no problem after all you didn't spend it. But we have more or less a written confession here plus this conversation on tape and then we'd have to report it to the police for theft of the card, fraud of the money and document fraud. Up to you." and dad went like "Uhm... I'll get back to you." The dispute was dropped, case closed at least from the credit company's side...

      --
      Live today, because you never know what tomorrow brings
    5. Re:Fraud Works Both Ways by Headw1nd · · Score: 2

      Huh, that explains a dispute I had over a fraudulent change I had with my CC company years ago. After telling them, no, a grocery store charge half the country away from where I had paid for lunch an hour earlier was not me, they sent me a copy of the signed receipt, saying essentially, "No, it totally was, here's your signature". When I responded that the weird squiggle on the receipt looked nothing like my signature, they let it go and reversed the charge. From your comment I infer that is just a step they did automatically.

  23. Electronic payment systems aren't secure anyway by Rick+Schumann · · Score: 1

    At this point in time, the whole 'signature' or 'no signature' issue is irrelevant, since electronic payment systems, from the card readers themselves all the way through to the server farms processing the data, are about as secure as a collander is capable of holding water and so far as I'm concerned you're insane if you use anything other than CASH everywhere you possibly can, limiting your risk of accounts being compromised and identity being stolen to a minimum. Instead of worrying about some little details like 'signatures' they should be spending 100% of their time determining how to secure the entire chain of electronic payment systems, end-to-end, assuming it's even possible.

    1. Re:Electronic payment systems aren't secure anyway by naughtynaughty · · Score: 1

      What is the risk of my credit card account being "compromised"?

      I can assure you that it is less than the risk of your cash being compromised.

      What identity does someone steal with my credit card? They have my name. Lots of people have my name.

      Trying to secure things 100% is a fools game.

    2. Re:Electronic payment systems aren't secure anyway by Gilgaron · · Score: 1

      My understanding is that usually the merchant is the one holding the bag of shit if the deal goes sour. Pretty easy to get fraudulent charges to go away as the customer.

    3. Re:Electronic payment systems aren't secure anyway by Rick+Schumann · · Score: 1

      You clearly and obviously either don't read actual news source (Facebook, Twitter, and other 'social media' crap doesn't count as 'real news sources' either, by the way) otherwise you'd know that EVERY MONTH there's some sort of data breach or other of electronic payment systems. Either that or you're one of those myopic, head-in-the-sand people who refuse to believe that YOUR payment information can fall into the hands of hackers and criminal organizations. Would love to be a fly on the wall if your bank accounts and/or credit card(s) get drained because of a hardware card skimmer, a software exploit that does the same thing as a hardware card skimmer, or the payment systems in general of some company (or group of companies) gets hacked. Oh and by the way I've had my payment information stolen before and narrowly avoided having my bank account drained which is why I now pay CASH for everything I do in person and limit electronic funds transfers to as little as possible, I recommend EVERYONE do the same until such time as ALL companies that provide payment services for credit cards and debit cards take their security more seriously and we don't hear about these sorts of breaches more than maybe once a YEAR. Continue to be careless all you want but don't pretend you're smarter than I am.

    4. Re:Electronic payment systems aren't secure anyway by Rick+Schumann · · Score: 1

      Why the EVER-LOVING FUCK should I take the chance!?

    5. Re:Electronic payment systems aren't secure anyway by naughtynaughty · · Score: 1

      Do you take the chance that your cash will be lost or stolen while you are walking around?

      Here is the number of times I've lost money due to someone stealing my credit card info: ZERO
      Here is the number of times I've had my cash lost or stolen: Much bigger than zero

    6. Re:Electronic payment systems aren't secure anyway by naughtynaughty · · Score: 1

      I've never had a credit card compromised due to a breach in a way that impacted me. I have had my bank from time to time tell me they were sending me a new card because my card might have been compromised.

      I've never lost a single penny due to a credit card theft.
      I can't say the same about cash, people lose wallets and purses all the time. No big deal if you just have credit cards in it. Call the bank, cards will be cancelled, new cards mailed out and any fraudulent charges cancelled. What about your cash in the wallet? Gone.

      I'm certainly not as paranoid as you and I do enjoy my substantial cash back rewards from using my credit cards instead of cash.

      Having your bank account drained has nothing to do with credit cards and nobody "drains" a credit card as a credit card is a credit line not a cash balance.

    7. Re:Electronic payment systems aren't secure anyway by Rick+Schumann · · Score: 1
      *facepalm*

      Buddy, I've heard these arguments about a MILLION times now, and they still hold water about as well as a collander.

      I'm in my 50's. Number of times I've been mugged and had my wallet stolen: PRECISELY ZERO.
      Number of times I've had somewhere I've used plastic to pay experience a 'data breach': ABOUT HALF A DOZEN, and that's in the LAST TWELVE MONTHS. I've had to have my bank cancel the aforementioned plastic and re-issue a replacement with a totally different number on it.

      I've never had anything bad happen to me, so it can't be possible for anything bad to EVER happen!

      That's the totally flawed excuse for LOGIC you and everyone like you is using! Are you young and dumb, or are you just plain dumb? There are data breaches going on CONSTANTLY in the last year or two and there's no end to it in sight. How many times do you pull the trigger in this game of financial Russian Roulette before you get shot in the head? Take your pick, buddy: Run a SMALL chance of someone mugging you (oh and by the way, where the hell do you live or walk around that you're getting mugged???) and taking a few bucks from your wallet (oh and by the way if you're actually so dumb as to be walking around places where you're going to get mugged, THEY ARE GOING TO DO IT REGARDLESS OF WHAT'S IN YOUR WALLET, YOU MOOK!) or would your rather run a CONSTANT risk of cybercriminals MUGGING YOUR BANK ACCOUNTS AND YOUR ENTIRE LIFE!? Face it buddy, I'm being smart, you're being dumb, and I'm not even going to pretend to be nice about that, those are the facts.

    8. Re:Electronic payment systems aren't secure anyway by Rick+Schumann · · Score: 1
      Oh look another idiot operating under the following flawed excuse for 'logic':

      Nothing bad has ever happened to me, therefore nothing bad can EVER happen to me!

      Enjoy your game of Russian Roulette, especially the part where your financial life and identity get SHOT IN THE HEAD. You're taking CONSTANT chances and IGNORING taking any real precautions, expecting someone else to protect you. THAT IS CHILDISH THINKING (mommy and daddy will protect me!). Grow up and take some proactive responsibility for your life, idiot.

    9. Re:Electronic payment systems aren't secure anyway by Gilgaron · · Score: 1

      Because there is essentially no risk, and multiple benefits. It takes longer to switch your autobilling to the new CC number than it does to address the fraud.

  24. So what will they use instead for security? by Anonymous Coward · · Score: 0

    Nothing? The "secret" number that is printed on the card?

    I know why I don't use physical credit cards. I destroy them as soon as I get them. I only ever use credit card numbers online, when there's no alternative.

  25. Still faster that chip readers by Anonymous Coward · · Score: 0

    I can sign much faster than it takes to wait on the chip readers. The better security slows down check out lines much more than the old ways. I agree that the signatures don't provide much in security, especially when no one looks at them. The contention that they're slow is where I'll disagree.

  26. Signature is not used for authentication by pak9rabid · · Score: 1

    From what I understand, the signature that some places require when making purchases with a credit card isn't used for authentication, but is used as a legal agreement to promise that you'll actually honor the payment, and not try to cancel/dispute the charge later on.

  27. Signature is valuable by mysidia · · Score: 1

    You're just misunderstanding it.... It's not "stolen card prevention" --- it is a form of transaction Non-Repudiation.

    If you actually signed it; you can't very well turn around and claim the charge was unauthorized, so there's that deterrent.

    It would be more useful if they actually authenticated that the signature was your handwriting, AND verify that the customer signs it
    while being watched to ensure they don't just trace over a copy.

    1. Re:Signature is valuable by sjames · · Score: 1

      I can use the magic phrase "That's not my signature". If you want to prove it is, it will cost you at least $10,000 for an expert.

    2. Re:Signature is valuable by mysidia · · Score: 1

      I can use the magic phrase "That's not my signature".

      They'll send it to friend computer for analysis and the handwriting check, and when the computer says they have confirmed it legitimate,
      you'll pay 20000 credits, and be held in detention for fraudulent unauthorized charge report.
      See nobody will question friend computer's findings, because the act of doubting the computer is treason in and of itself.

    3. Re:Signature is valuable by sjames · · Score: 1

      But in real life, the computer has no clue. The old "the infallible computer says" line died in the '80s once home computers started becoming common.

  28. That's how they've avoided paying for fraud by Solandri · · Score: 2

    By requiring a signature, they make the merchant liable for fraud. In case of a fraudulent transaction, they can claim the merchant didn't verify the signature matched the signature on the card, and thus it's the merchant's fault. They do a chargeback. The merchant is out the money and the item(s), and thus the merchant has paid for the fraud. Online sales work the same way - the website asks for your billing address and phone number not because they want to sell it to marketers (though they probably do that too), but because that's the only way credit card companies have set it up so merchants can "confirm" you're authorized to use the card. If the merchant fails to confirm all these facts and the transaction is fraudulent, the credit card company can just do a chargeback and make the merchant pay for the fraud.

    Once you move to a real secure card system like Chip and PIN, the merchant is out of the picture. If the transaction went through when it wasn't supposed to, then it's the credit card company's fault and they have to pay for the fraud. If the transaction went through because the cardholder shared their PIN with someone else, then it's the card holder's fault and they have to pay for the fraud. The merchant is no longer liable. And the credit card companies have to make a choice between pissing off their customer (cardholder) or paying for the fraud themselves.. By keeping the merchant liable for as long as possible, they've been able to avoid this hard choice simply by shifting blame and the cost of fraud onto the merchant.

    1. Re:That's how they've avoided paying for fraud by Anonymous Coward · · Score: 0

      Which is why they are pushing paywave now - to move the risk back to the retailer.

  29. Chip and PIN by ardmhacha · · Score: 1

    Chip and PIN is standard in UK and Ireland and has been for a few years now.

  30. customer demand by bugs2squash · · Score: 1

    I'm sure it is mostly to give the average joe customer a warm and fuzzy feeling that something is being done to validate who he is, its value in calming nerves far outweighs its value in preventing fraud

    --
    Nullius in verba
  31. Misleading by Anonymous Coward · · Score: 0

    This is misleading. MasterCard realised that signatures are stupid decades ago when they started developing the EMV chips, and by 12 years ago had succeeded in getting merchants to stop accepting magstrip/signature card payments in much of the world by forcing them to accept liability for any transaction that's not verified with a PIN. Yes, MasterCard was among those pushing hard to get everyone using PINs. In fact, I haven't even seen a non-chipped card since about 15 years ago.

    Perhaps the author forgot to consider that it's a particular country, not credit card company, that's been clinging to signatures (despite its populace wanting to catch up with the rest of the world).

  32. signatures have always been worthless. by No+Longer+an+AC · · Score: 1

    It's amusing that the author goes to the trouble of doodling a piece of tofu. I realized my signature was worthless the first time I encountered an electronic signature pad. I tried to sign my name and it didn't look anything like my actual signature.

    Since then I have scribbled my signature. The cashiers in the stores know I'm just faking it - they don't care. I only even make a half-hearted attempt because it takes so long to read the chip in my credit card.

    The only time I even bother to try to write my signature correctly is when I'm at the bank but I don't think they care either. I don't even do it very well. It looks different - and it looks wrong to me - every time I do it. I'm so out of practice I can't even sign my name anymore.

    Many years ago I disputed every charge on my credit card that someone else had made (a long and terrible and stupid story). They reversed every charge that didn't actually have a signature (like pay-at-the-pump gas purchases). The ones that actually had a signature, even though they didn't match mine, were more problematic and I ended up having to pay for most of those.

    Even though I was stupid and it was largely my fault I still ended up dropping that credit card after paying off the bill and they're still trying to get me back as a customer over 20 years later.

    What's in my wallet? Not that credit card. I have cash and an ATM card and a different credit card.

    It's creepy how banks try to own you. That different credit card company still thanks me for being a loyal customer for 30 or so years. Yeah, I pay the bill and it usually works so I'm still a loyal customer. I actually don't have any loyalty to them at all - and the rewards points may as well be a slap in the face and only remind me of how much money I've put on my card over the years.

    The reward points can only be redeemed for cheap trinkets that I would never actually buy if I had to pay cash for them.

  33. Congrats on making it to 2007, USA! by wardrich86 · · Score: 3, Insightful

    I'm pretty sure the rest of the world has been using Chip & Pin for at least a decade now... about time the ol' US caught up!

    1. Re:Congrats on making it to 2007, USA! by Anonymous Coward · · Score: 0

      The banks need to learn one thing. TWO pins. One for the ATM and one for other purchases. That way we don't give direct cash access to somebody that stole the card.

    2. Re:Congrats on making it to 2007, USA! by mrun4982 · · Score: 1

      The article doesn't state they're switching to chip and pin. It just says they're not requiring signatures.

    3. Re:Congrats on making it to 2007, USA! by Anonymous Coward · · Score: 0

      2007? We used magstripe & pin in the 90s

  34. Enter tip manually by Comboman · · Score: 1

    Restaurants in the civilized world have wireless chip card readers that they bring to your table. It will even calculate your tip for you, or you can enter a specific amount.

    Always enter the tip manually. Every one I've ever used calculates the percentage tip on the after-tax total rather than the pre-tax total (which is the accepted standard).

    --
    Support Right To Repair Legislation.
  35. null brain comment by Anonymous Coward · · Score: 0

    You're just misunderstanding it.... It's not "stolen card prevention" --- it is a form of transaction Non-Repudiation.

    If you actually signed it; you can't very well turn around and claim the charge was unauthorized, so there's that deterrent.

    It would be more useful if they actually authenticated that the signature was your handwriting, AND verify that the customer signs it
    while being watched to ensure they don't just trace over a copy.

    Your argument sums to the null set. There are zero bits of information in your post. Why do you even bother to comment?

  36. Wut about pay-by-cheque at ring out? by Anonymous Coward · · Score: 0

    Why in this day and age do some (older) people insist on taking out their cheque book and paying by cheque?

    And on top of that, much of the time these (older) people wait until the cashier has pressed the "total" button before they take out their cheque book and start filling in the payee and amounts. ARRRRRGGGHH! Do that ahead of time if you must!

    1. Re:Wut about pay-by-cheque at ring out? by ThomasBHardy · · Score: 1

      One day it's going to be our grand kids saying "Why in this day and age do some (older) people insist on taking out their cards and paying with cards? When will they get the corporate funded implants to track their purchases. Old people suck!"

      --
      Warning: Teh poster of this messaeg is lysdexic
    2. Re:Wut about pay-by-cheque at ring out? by Anonymous Coward · · Score: 0

      I doubt there is still a single shop in the Western world that would accept a cheque. I am thirty years old and I've never seen one.

  37. Dumb Move - Smart Move by PortHaven · · Score: 1

    Signatures are useless as currently used. Smart move for MasterCard to get rid of them.

    Dumb move to get rid of them. They should be retained and exclusively used for "high value purchases". So anytime you have a sing;e item valued over say $500 or $1,000. Require the signature, and require it to be verified. This would do wonders.

    1. Re:Dumb Move - Smart Move by naughtynaughty · · Score: 1

      Signatures are useless as currently used. Smart move for MasterCard to get rid of them.

      Dumb move to get rid of them. They should be retained and exclusively used for "high value purchases". So anytime you have a sing;e item valued over say $500 or $1,000. Require the signature, and require it to be verified. This would do wonders.

      What sort of "wonders" would examining signatures on high dollar purchases do?

      Thieves know how to get around signature and ID requirements quite simply and convincingly.

  38. I've signed them with drawings for years. by ThomasBHardy · · Score: 1

    I've been drawing smiley faces, emojis, "no one checks this" and other stuff on the signature pad for years. Did you know that most of them have a line drawing limit? You can't start at one side and fill in the entire thing black. They must be storing the vector version :)

    I decided many years ago that since no one ever looks at the signature and they prove nothing unless you had me personally on camera when it was signed, that I refused to bother signing them. It's a bad feature and unworthy of the time, effort, hardware support, storage and systems built to support it.

    --
    Warning: Teh poster of this messaeg is lysdexic
  39. What happens to those signed receipts? by imcdona · · Score: 1

    I'm curious to know what happens to those signed receipts. Do the merchants send copies to the credit card companies in case of a disputed transaction?

  40. Almost 10 years since the Credit Card Prank! by Eloking · · Score: 1

    This story make me remember the Credit Card Prank (Zug Website doesn't exist anymore, I had to search into web.archive.org).

    --
    Elok
  41. US Catch Up by Anonymous Coward · · Score: 0

    Welcome to the civilised world, US. Just in time for the rest of us to be moving on from PIN to contactless.

  42. Chip-and-sign is chip-and nothing by ebh · · Score: 1

    My main credit card is chip-and-sign. When I'm asked to sign on one of those tablet things, I always write "SECURE?" I've probably done this a hundred times, and only once did the cashier say anything--and all he said was, "Come on, it's got to at least *look* like a signature."

  43. Digital signatures are foreign to many and rejecte by Chewbacon · · Score: 1

    My company accepts signed PDFs with a digital signature. Itâ(TM)s easy, itâ(TM)s tied to my unified login for email, cloud services, etc. (itâ(TM)s not an extra password to remember). and verifiable. However when an outside company wants something signed they mean they want me to scrawl on the PDF. No problem! I have a stored scrawl I can insert with just a click, center and size it up on the line. Done! Problem is anyone else can do that if they intercepted a copy of the PDF or stole my device.

    --
    Chewbacon
    The Bible is like Wikipedia: written by a bunch of people and verifiable by questionable sources.
  44. Signatures are not even the worst system by Applehu+Akbar · · Score: 1

    Things may have changed since I lived there, but in Japan everyone carries a hanko, or signature seal, around everywhere. It's a small stamp, usually made of something like marble or jade, which when used with an inked pad impresses a signature that has been carefully rendered for you by a stonecarver. Because a hanko is "something you have" rather than your muscle memory of "something you know" this system works only in a crime-free nation.

  45. SECURITY by Anonymous Coward · · Score: 0

    I specialize in Information security. I have been in the field for over 30 years so let me give all of you some inside information and some good advice.

    1.Biometrics are NOT more secure, they are less secure. The reason is this; imagine if you use a password to get into your bank or computer or a safe, but then somebody finds out your password, you simply have to change the password.

    But if they manage to steal your finger prints or DNA or retina scan (all of which just translate to a cryptic string of characters), you have no way of changing them. The best you can do is delete your account and set up a new one, throw away your safe and buy a new one.

    Never give up control over biometrics.

    2. Never give your PIN number to any store or other place you buy stuff from. it's none of their business, and if they have your card there is nothing to stop them from getting money from an ATM. The banks tell you not to give out your PIN so DON'T. if some stores require it, either pay with cash, or walk out.

    3. Look at the back of your card. You see those 3 or 4 numbers? Those are required if you do an online purchase. Write them down and lock the information in a safe at home. memorize those numbers, then use a Dremel to grind them off. Next time you give your card to the waitress in a restaurant and they write the numbers down on the front and flip it over, they will be unable to buy anything online. Best they can do it use it right then and there to buy a meal for themselves.

    Chipped cards are the best.

    6. Use cash. It's a tried and true method and provides no trace back to you.

    5. Do NOT use any kind of crypto currency. Crypto may seem great, but the blockchain has two functions. The first is cryptography of which can be done in other ways. the other is to create a ledger of every single transaction you made using it.

    This is bad because evil people can and will use it to control you or threaten you. Can you imagine what would happen to you if a Pol-pot or Hitler had such technology and they were after you? You would have no chance of running or fighting.

    Avoid crypto currencies as if your life depends on it because it really may.

  46. I always thought the verification part of the signature was minor and that using it as fraud proof was the real reason -- that whoever signed it, when caught, had unambiguously committed fraud by admitting it via signature.

    --
    (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
  47. About time. Society runs on trust. by OldMugwump · · Score: 1

    This is overdue. I often lend my credit card to other people so they can buy stuff with it. Nobody looks at the name on the card or the signature anyway - this works fine. Because society runs on trust. I trust the people I give my card to, the retailer trusts the purchaser. And in a decent society, that's OK, because criminals are rare enough that we can treat them as a special case. Yay trust.

    --
    "Shoot, a fella could have a pretty good weekend in Vegas with all that stuff."
  48. welcome to the quentin tarentino universe by Anonymous Coward · · Score: 0

    By requiring a signature, they make the merchant liable for fraud. In case of a fraudulent transaction, they can claim the merchant didn't verify the signature matched the signature on the card, and thus it's the merchant's fault.

    what a lovely fairy tale, too bad it has no basis in reality

  49. Not so quick. by Anonymous Coward · · Score: 0

    THEY may feel this way but ask their legal department and whoops. For legal reasons, the signature IS the most important step in completing a contract. Without it you will have a hard time in many cases against users of credit cards that fraudulently use their cards.

  50. The signature means nothing by barbariccow · · Score: 1

    I draw a smiley face or a line or something... the machine takes a few seconds and then says "signature confirmed." It's just a gimmick to make people believe that somehow they are protected from credit card fraud because some advanced technology somewhere would detect an invalid signature. Total FUD. And talking with others, it seems I am basically the only person in my local society who doesn't believe that the signatures are checked! Folks actually believe that the companies are using this as some sort of hyper-advanced fraud prevention. Even girlfriends when using their card to go grab milk or something have asked me, "but how are you going to fake my signature?"

    Given this, it's very surprising to me that a credit card company would willingly get rid of this myth which people believe without question or second-thought, and builds trust in their card..

  51. Why didn't the US go chip and pin? by mrun4982 · · Score: 1

    I don't understand why the US switched to chip-and-signature cards instead of the much better chip-and-pin cards like EU did. I visited Europe last month and they've got it down right. Paying at a restaurant is where it's really much better because the server never walks away with your card like they do here... thus preventing them from being able to take a picture of your card. I really wish we'd would switch to chip and pin.

    1. Re:Why didn't the US go chip and pin? by jeff4747 · · Score: 1

      Money and convenience. Chip + PIN is more expensive - requires more/different hardware. Also requires somehow dealing with "I forgot my PIN".

    2. Re:Why didn't the US go chip and pin? by Larry+Lightbulb · · Score: 1

      I've been told by a couple of banks that chip & sig is better than chip & PIN because you don't have to remember another PIN.

  52. FART by elliott666 · · Score: 1

    For the last several years I've been signing the word FART in all caps as large as I can fit on the page or screen whenever I sign for something. I figured if there was any point to that signature somebody somewhere would say something. No one ever has said peep. I've gotten a couple of laughs from the checkout people but that's it. If that doesn't show how dumb that is I don't know what will.

    That Buford's a sly one!

  53. Bad Headline - MC knows already by Imazalil · · Score: 1

    Mastercard (and Visa, Amex, absolutely everyone) already know this. And do this in every single other country on the planet* outside of the good ol' USA.

    * Ok, can't say for sure, but everywhere I've been to europe and asia for sure. I'm sure most of the "developing" world has it as well because it's much safer and quicker.

  54. MasterCard is complicity with the fraudsters by LostOne · · Score: 1

    MasterCard and their ilk (Visa, etc.) are complicit with the fraudsters. They have every interest in allowing fraudulent transactions to happen because they get a cut of the transaction from the merchant. Then they get another cut of the reversal transaction from the merchant (in the form of penalties, etc.). And if they don't, the issuing bank almost certainly does with their transactions fees. So they really aren't interested in enforcing *safe* conduct with credit cards and honest behviour on the part of merchants.

    With policies like "force billing" which allows the merchant to obtain replacement card details if they have the old ones, *even if the old card was cancelled due to fraudulent charges*, even disputing fraudlent charges doesn't stop the fraudulent charges. (Before someone jumps in with why force billing is good, I don't care. If it had proper controls on it, it might be tolerable. But it doesn't. And I'm speaking from personal experience there so don't tell me it does have such protections.)

    Hell, they won't even go after merchants that go out of their way to hide terms and conditions of "free offers" and the like (and other deceptive tactics) and merrily allow ongoing billing for subscriptions that people had no idea they were agreeing to. As long as there is a link in micro font at the bottom of a eleven mile long scrolling page, ten miles from the payment form, apparently it's all kosher in their minds. And those are the types of merchants that will most likely be the ones to employ force billing.

    --

    If it works in theory, try something else in practice.
  55. Score:-5, Pwned by Anonymous Coward · · Score: 1
  56. rewards by Anonymous Coward · · Score: 0

    I think most people who don't carry balances just like the rewards programs that come with the card and don't know or don't care that the ultimate result is paying higher prices anyway.

    That's me, but my choice is to pay those prices with or without the 2.5% kickback I get on everything I charge, and I charge everything - unless I can negotiate a better cash price. (It may be(?) against the merchant rules to give a cash discount, but I'm not about to enforce a merchant CC agreement).

  57. AVS by IcyWolfy · · Score: 1

    AVS Zip Valdiation works by concatenating numbers, and padding with 0.
    UK: LS8 22AJ => Enter 82200
    CA: T2C4L5 => 24500
    NL: 5800 => 58000

    Depending on the interface, I have seen code that implements the check (pre-verification) as 00001-99999, 00000-99999, 01001-99950, which is out of spec.
    Some client implementations, will simply require a "don't care" value, like 00000 or 99999 for no AVS, and if that is entered in the machine, it will work for the "No Zip Available" case.

    AVS Address Validation works the same way.
    123 FakeStreet = PO BOX 123 = 12 Fake St APT 3 .

    That said, AVS is -only implemeted by US, CA, and some UK card issuers. Other countries the check will return "no AVS"
    The gateway provider usually, will allow customers to enable AVS Address, AVS Zip, separately, and clearly warn, that any international cards will not undergo any AVS checks at all. And then give a separate option to require AVS success with the warning that all International issued cards, even with US billing address, will be declined.

  58. Must be an American problem by gordguide · · Score: 1

    I think the OP should have been clear that this is MasterCard USA only. I haven't signed for a card-present credit card payment or debit card payment in probably 15 years.

  59. It's never been important by Anonymous Coward · · Score: 0

    I worked at a gas station as a kid. mid '80s. Kids would bring their parent's credit card in to gas up the car and sign it "Don Ho" and it was all good. Over and over, all summer long. I remember wondering if it was going to work out ok. It always did.

  60. Mastercard US by XSportSeeker · · Score: 1

    To be clear, Mastercard in the US. Several other countries haven't been using signature for credit cards for well over a decade now.
    I dunno why US credit card issuers decided to keep antiquated systems for so long, perhaps because you guys didn't go through periods of rampant fraud and cloning as much as we did, but it's true: the last time I had to sign a credit card slip was over 10 years ago. Perhaps closer to 15.

    My current bank uses biometric vein scanner technology in their ATMs... because you know, not even chip and pin is secure these days anymore.

  61. Chip & PIN by Larry+Lightbulb · · Score: 1

    Come on America, sooner or later you need to move out of the 20th century.

    1. Re:Chip & PIN by vandamme · · Score: 1

      Hmph. What next, cheap fast internet? Flying cars? Yeah, sure.

  62. Signatures by Tenebrousedge · · Score: 1

    There is no legal requirement for one's signature to be any form of one's name. If I put "See ID" on the back of my card, I am fully prepared to argue that this is my legal signature. Also if I put "Fuck you" on there, which was the tactic of a legal student of my acquaintance with more brains than sense.

    --
    Those who advocate genocide deserve every protection afforded by law, and none afforded by common human decency.
  63. sigs by Anonymous Coward · · Score: 0

    I have been signing my credit card receipts with WHY for years. I see no reason to have them. They solve no problem and most people dont even sign them, they scribble something.

  64. CHIP+nothing by Anonymous Coward · · Score: 0

    If you read the MasterCard news article you'll find they're not doing CHIP+PIN, it's CHIP+nothing, and only in the US and Canada -- they don't say whether they'll switch to CHIP+PIN in the rest of the world or continue with the braindead CHIP+sign.

  65. Back in the day by Topwiz · · Score: 1

    Back in the late sixties the department store we went to had a camera attached to a cart that they would bring out to take pictures of anyone using a credit card.

  66. How's life in the hypocrite lane?

  67. Maybe "finally" in the USA by dskoll · · Score: 1

    But Europe and Canada and other countries have had chip-and-PIN for years. I can't remember the last time I actually had to sign a credit card slip.

  68. Can't pay with cash outside by tepples · · Score: 1

    European gas stations don't accept cash?

    Soft drink vending machines have a slot to insert bank notes (also called a "bill acceptor"). So do self checkout machines at the grocery store, change machines at the coin laundry, and fareboxes on the bus. But none of the petrol pumps I've seen has a bill acceptor.

  69. Only in the USA by Anonymous Coward · · Score: 0

    This article needs to be changed to say MasterCard in the USA has realised, because MasterCard in most of the rest of the world had already done away with signature years ago. The issue here is not MasterCard, but the primitive banking practices used in the USA until recently.

  70. Keeping signature on a card legible by PlaynBass · · Score: 1

    After I sign my card, along with a "Please ask for photo ID", I place a piece of Scotch Magic tape over it. The tape all but disappears, and the signature stays good for the life of the card.

    --
    PlaynBass
  71. Signature?? by Anonymous Coward · · Score: 0

    Which country is this? I haven't signed a credit / debit card receipt for over a decade, and I don't live in a civilized place (Brazilian here).
    Are there countries out there still using it?

  72. You folks still use signatures? by Anonymous Coward · · Score: 0

    We have chipped cards and a PIN is used in Canada for many years...

  73. About time by Anonymous Coward · · Score: 0

    Basically, this is an US issue only. Everywhere else Chip and PIN used exclusively. Signatures haven't been used in western Europe for over a decade now and our credit cards come with a magnet strip only if you plan to visit the US.

  74. Signing? You mean like writing your name? by Anonymous Coward · · Score: 0

    The only times I have to sign for a purchase made by credit card are:

    1) when the payment system is down and can't confirm my PIN
    2) at hotels (they're so 19th century sometimes)
    3) in the US (see 2)

  75. Brilliant... by iq145 · · Score: 1

    i've only been suggesting this for 7 years!