Harvesting high value foreign currency transactions from EMV contactless cards without the PIN

M. Emms; B. Arief; L. Freitas; Joseph Hannon; M. A. Van

Corpus ID: 46234723

Harvesting high value foreign currency transactions from EMV contactless cards without the PIN

@inproceedings{Emms2014HarvestingHV,
  title={Harvesting high value foreign currency transactions from EMV contactless cards without the PIN},
  author={M. Emms and B. Arief and L. Freitas and Joseph Hannon and M. A. Van},
  year={2014}
}

M. Emms, B. Arief, +2 authors M. A. Van

Published 2014

Business

In this paper we present an attack which allows fraudulent transactions to be collected from EMV contactless credit and debit cards without the knowledge of the cardholder. The attack exploits a previously unreported vulnerability in EMV protocol, which allows EMV contactless cards to approve unlimited value transactions without the cardholder's PIN when the transaction is carried out in a foreign currency. For example, we have found that Visa credit cards will approve foreign currency… CONTINUE READING