| | Simonwalcal said "| | pudds said "I love the tap feature, and I don't understand why anyone would want to disable it, unless they are living very close to the limit and a small loss would hurt too much.
Tap transactions for both debit and credit card are zero liability, so in a case like OP's, all of the money will be returned once they investigate the fraud. For a credit card, it's a no-brainer, since you're not on the hook for the charges, or any interest accrued. For debit, it does mean you could be down a small amount of money until the investigation is closed, but daily limits are pretty low (generally $50-200 depending on your bank), so it shouldn't be a burden for the majority of people.
Potential fraud issues from lost cards aside, the actual technology is very secure. It can't be skimmed or replayed, like a magnetic strip (it's the same as the chip, in this respect). It also doesn't require you to expose your PIN to potential snoops/thieves, meaning that if your card is stolen, a thief is only going to be able to steal the small daily limit, not go to a bank machine and drain your account.
I think people get nervous about a no-PIN transaction, without realizing there are benefits to the system beyond just convenience. (And even if there weren't, it's really, really convenient.) " |
|
|
It can't be skimmed, but it can be picked up remotely. Walking past someone with a unit in their pocket, for example. Since every card these days has it . . . they may not just get one, they could get them ALL.
Yes, it is zero liability. But I suspect there is a reason for that. Because they are easier to compromise than old school strip cards.
Personally, chip & pin all the way. " |
|
|
According to the folks at Interac, the information that could potentially be skimmed with an RFID reader is not useful to the skimmer:
http://interac.ca/en/interac-flash-security.html (see myth 1 near the bottom).
This article says the same thing:
http://globalnews.ca/news/2633347/reality-check-you-dont-need-rfid-protection-in-your-wallet/
In theory, someone could possibly use an RFID skimmer to get your card number, in the same way that someone could capture it on camera, or write it down when you pass it to them. However, the thief still wouldn't have the PIN or CVV code required to actually process a transaction.
Chip an PIN is still unquestionably the most secure option, but the way that contactless transactions are handled is still very secure: much more secure than the magnetic strip, which is very vulnerable.
In the end though, I suppose it's all about acceptable risk. The convenience is well worth to me, as I can afford to go without a small amount of money for a while if someone does manage to physically steal my card. If it weren't zero liability, I'd probably feel differently, but it is, so I'm happy to use it.