Industry


Ads by TechWords

See your link here


Michael R. Farnum's picture
Michael R. Farnum

Hitting the Security Nerve

To sign or not to sign? That is the Credit Card Fraud question?

Do you sign the back of your credit card? I don't. Really, there's no real reason for the signature anymore. Case in point, I was travelling back home from Dallas yesterday, and I stopped at a Wendy's in Ennis, Texas to grab some lunch. I walk to the counter, and the cashier's asked, "Will you be dining in today?" All right, you have just annoyed me, dude. This isn't the Four Seasons, so drop the fakeness.

 

Anyway, I gave the guy my order, and then handed him my credit card for payment. He looked at the back of the card to check my signature (which almost never happens - this plays to the point I am making), and he saw that I have no signature on the card. Instead, I write on my card "Check TX Driver's License". So he asked for my ID, and I showed it to him.

 

After he had swiped the card and handed it back to me, he asked, "Might I suggest that you sign your card?" Again, the fakeness of this guy was practically making me want to jump the counter and smack him (I have not had much sleep this week). Not to mention that the last thing I want is unsolicited advice from some snot-nose college freshman sitting behind a counter at a fast-food joint when I have had less than five hours of sleep in the last two days. I kind of growled to him that it made no sense to do this since a credit card thief would be able to forge my signature if it was on the back of the card. His response was, "I guarantee you the signature will match if you don't sign the card."

 

So I growled a little louder and told him that if people do their job like he had, then they will check the signature on the card when I hand it to them, and they will have to check my driver's license to verify that the card is actually mine. His look clearly told me that he had not thought the issue all the way through, and I think my demeanor at that point shut him up as well.

 

But of course, this is the point and the real reason I don't sign my cards. It is not effective as a security measure. Most people don't check the card (as much as this twerp annoyed me, at least he was doing his job). Most fast food joints don't even need a signature as long as it is under $20. And when was the last time you had to sign a credit card receipt at a gas station? So why even have the signature there in the first place? It really serves no purpose.

 

So today, out of curiosity, I decided to do some Googling on the issue. The first thing I found was from this article. Here's an excerpt:

So, the question is: is this the correct advice to reduce credit card fraud? Should you -- or should you not -- sign your credit cards?

 

To answer this question, we called the fraud departments at MasterCard, Visa and American Express.

 

All three advised that you definitely SHOULD sign your card.

 

MasterCard told us that this idea -- not to sign your card -- is an urban legend that sounds sensible, but is not a good idea.

 

American Express warned us that merchants are not supposed to accept your credit cards if they aren't signed. Visa agreed -- in fact, they said that the merchant is instructed to not finish the transaction until you sign your card!

 

So, not signing your credit card is an example of a very popular urban legend that is false. And we stand by our original advice -- sign your credit cards immediately when you receive them.

Ummmm, so you went to credit card companies to try to prove this is a scam, and they basically said "it's not a good idea", but they gave you NO supporting evidence to prove the point, and you just took them at their word? Interesting. Did you think to ask a security expert their advice? Nope.

 

Then I found the following comments intersting from this article:

The reason is that the signature isn't there solely so that store employees can verify who you are. Instead, your signature on the back of the card also demonstrates that you've agreed to the terms of the contract with the credit card company. If the card isn't signed, then technically you're never entered into a legal agreement with Visa, Mastercard, or whomever, and you shouldn't be using the card.

 

So I guess I've been the victim of misinformation. I wonder how many other people are wandering around with "SEE ID" on the back of their cards, arguing with all the poor cashiers who tell them that the cards have to be signed?

First, to answer your question, not many, because almost no one checks the cards! Second, why were you the victim of misinformation? If people did check the signatures, then it makes total sense NOT to have the signature on there for people to forge. And third, credit card companies can easily say that activating the card over the phone or the web is tacit agreement to the terms. I would have no problem with that.

 

Of course, one could argue that if the signature is not effective, it doesn't really matter if yoou sign or not. However, being a proponent of layered security, I am still not going to sign just in case a thief steals my card and happens to run across another conscientious (but annoying) Wendy's cashier.

What People Are Saying

Information

I review getting good idea and view that written here about life lock they always protect the people and monitor them full time, if you getting more knowledge visit this site, it is updated and quality site I hope you getting good knowledge. http://www.identitytheftprotectionlock.com/

I think the bottom line is

I think the bottom line is the liability. If your signature is on the card, you are protected from fraudulent charges and the company will absorb the loss. If you haven't signed, then you absorb the loss yourself. I don't care in which case fraud is more likely, I care about whether I am protected or not.

knowone looks at my card.

knowone looks at my card. only once in all the times that ive used my credit card has someone looked and that was at circuit city. i wrote "THIS CARD IS STOLEN" on the back of my card and still knowone has ever bothered to look or care. its like the clerks working for low pay and dealing with bs all day just have a hazy glare over there eyes like they just dont care anymore

My back ground is in Fraud

My back ground is in Fraud Prevention for merchants as well as consumers. Let me give you some free advice. Most fraud perpetrators do not forge signatures, in fact they are interested in skimming cards and then making their own credit cards with either their name or they steal an identity. I would also recommend not to place "see ID" on the front or back of your credit card. It is very easy to make a driver license with your name on it. Some credit card companies keep an image of your signature on file and this is compared to receipts. I would check with your credit card issuer.

I too use middle initial on

I too use middle initial on all signatures, but not on back of any cards, for the same reason as 'YourNameHere'. I also put a very small piece of tape with a bogus PIN number on the rear of card. I make sure it is ALMOST unreadable (Is that a 4 or 9? 1 or 7?, 6 or 8?, etc). If card is ever stolen, and crooks see the 'PIN', they most likely will visit an ATM first - they'll think what a dummy this person is. But ATM should eat the card and not return it after a few incorrect PIN entries.

ALl the Post Offices in

ALl the Post Offices in central Ohio have signs posted that they will not accept unsigned credit cards.

To Sign or Not To Sign...

Actually, the Post Office's contract with the credit card company (First Merchant Data Services, I think) requires the window clerks to accept only signed cards. It also says that the clerks cannot ask to see ID, regardless of what the back of the credit card says, and that the card MUST be swiped, the card number cannot be keyed in. The problem is in trying to enforce the rules. The swiping rule is easy because the Tranz 380 terminals will not accept a card number being keyed in.

But like all other merchants, the clerks are overworked because of staffing cuts, and usually don't bother comparing the signature or even requiring the card be signed.

Besides, they're too busy trying to make sure the mystery shopper doesn't catch them forgetting to ask one of those dozen questions they have to recite by rote!

I had to do it for too many years... glad to be out of the straitjacket.

How many clerks that have

How many clerks that have asked to see your ID actually look at you to see if your picture is on the ID? Most of them just look at the ID name, look at the card name and hand them both back. Sure the names will match if I stole the wallet that held both of them.

Lando makes a better point. Vendors that archive all your purchasing history, card number, and personal information for data mining are much more of a threat to your credit report than any pickpocket will be. How many times have you gone to Amazon.com and had them fill out your credit card info for you?

Well, just about all my

Well, just about all my comments were mentioned ahead of me. Legal is legal. You have to take it up with the card companies if you wish to violate their conditions. (I didn't say if it was right or wrong, just the talking about the legal aspects of it.)

My 'beef' is with those merchants who use a credit card merchant account that print out the ENTIRE card number! Why bother copying the card when the receipt (that they keep) shows all your card numbers?

A direct violation of the PCI initiative. How many of you check the receipt, yours and theirs, to see if your entire account number is printed out?

IMHO, that's a worse security breach than signing your card. Check your receipts!

I handle credit card

I handle credit card purchases for a small non-profit. My understanding is that after June 1 of 2006, anyone using machines that print the full credit card number of the customer receipt is setting themselves up for a large fine from the credit card companies.

They aren't supposed to do that anymore.