A bank card holder's mobile phone is an instrument for protecting his own and credit funds on his accounts from criminal encroachments. Information on how to withdraw money from a card without SMS confirmation is necessary to prevent their theft.
CONTENT
Three ways to steal money from a card and protection from them
When is it required to withdraw money without SMS
The desire to withdraw funds from a plastic card without confirming the operation with a code from SMS arises in two key situations:
In the first situation, the best thing to do is to immediately call the bank that issued the card, the hotline whose number is printed on the plastic.
The fact is that the card issued by the bank - it does not matter whether it is a credit card or a payment card - is its property. It belongs to the bank, and not to the person whose name is on the front, who is the holder of the card blank.
Any operation with funds in the bank account to which the card is linked, carried out without the knowledge of the holder, is a criminal offense.
The desire to withdraw your money from your payment card without confirming the transaction with a one-time SMS code arises in the following cases:
If the bank is near
If a bank branch or ATM is within transport accessibility, it will not be difficult to get money. There will be no problems how to cash out a card without SMS confirmation. In the department, it is enough to contact the cashier-operator, present the card and passport, at the ATM - insert the plastic into the card collector and enter the pin code. In both cases, the client receives cash without an SMS password, and only after the transaction is completed, an SMS notification is sent.
When visiting the office of the issuing bank, you have the opportunity to:
Please note: the presence of a bank branch, where you can go to solve problems with the availability of funds and card security, does not guarantee the safety of the client's money. For example, there are cases when money was debited from a Sberbank card without confirmation by the holder's new phone number, when the bank did not change the data in a timely manner, and the attackers gained access to the old phone number and card details.
If the bank is far away
If you lose your mobile phone tied to the card, and you are unable to personally contact the branch, you should urgently send a request to the bank to block the card in another way, choosing one of the three options:
In each option, to identify the identity of the cardholder, you need to name:
As a rule, banks accept applications for card re-issue by e-mail, but you still need to go to the nearest branch for new plastic - only some issuers send a new card by Post or deliver it by courier as Bank.
If problems with SMS-confirmation of card transactions online and, accordingly, authorization in the Internet bank or in the mobile application arose during a long stay abroad, the client can also remotely contact the bank's support service.
In case of problems with servicing plastic at ATMs and terminals in the host country, holders of cards of Gold class and higher are usually provided with an emergency cash withdrawal service.
How to disable SMS confirmation
If a bank customer is tired of SMS notifications about each card operation, they can be disabled together with SMS confirmation of transactions. To do this, you either need to call the issuer's call center from the cell phone number linked to the card, or come to the office with a passport.
Along with SMS confirmation of transactions, the ability to make purchases, payments and transfers online will be disabled. You should get rid of this service only if the card is really needed only for offline purchases and cash withdrawals.
If, when withdrawing funds from the card, the holder receives a notification on his cell phone, he can instantly react and thus help law enforcement officers solve the crime, and return the money to the bank.
Please note: for online transactions, funds are usually not debited from the card account immediately, but are temporarily frozen. So if the alarm is raised in time, the bank can cancel the operation and leave the client's money safe and sound.
How to remotely steal money from cards
Attackers invent and use quite a variety of ways to withdraw money from a card without a pin code and SMS confirmation, or with interception of a password (PIN or SMS):
Receiving funds from a card without entering a pin code
The PIN-code is provided to the cardholder only upon its issue and upon subsequent re-issues. The code is printed on a sheet, which is placed in a special sealed envelope.
Issuers recommend that this document be destroyed immediately after reading and memorizing the code. For security purposes, cards and envelopes with pin codes are stored separately even in the bank. And no bank employee has access to the database of these passwords. Cardholders should not write the code on card forms.
3 attempts to brute force the pin code are allowed. If recovery of the cipher fails, the card will be blocked for 24 hours or permanently. Perhaps a call to the call center will be able to unblock. But then you need to provide passport data and a secret word. To change the PIN code at the ATM, you will first have to specify the data of the current, forgotten, cipher. This service is not available in the personal account of Internet banking of most banks.
If the pin code is lost, and the special envelope is destroyed, then no one can restore the cipher.
In such cases, 2 options are possible, but both involve visiting a bank office with a passport, where they ask to close the account and issue all the money or reissue the form.
The latter requires time (up to 2-4 weeks) and, possibly, additional costs, since most often an unscheduled release is paid. The price of the service depends on the policy of the issuer and the class of the card.
Another way to receive money from a card without entering a pin code is to use Internet banking and transfer funds to an account from which it is possible to withdraw money. This could be a savings account or another card.
Transfer of funds and remote payment from a card without SMS
The highest possible level of protection for bank accounts is provided by 3-D Secure technology. Payment systems MasterCard, VISA and MIR use MasterCard SecureCode, Verified by VISA and MirAccept, respectively.
3-D Secure does not provide a 100% guarantee of the security of transactions, but provides for additional identification of the buyer by SMS code.
In 2019 presented new protocol version... It is assumed that with its implementation, most payment transactions will not need to be confirmed by SMS codes: during the payment process, the software will automatically assess the degree of riskiness of a particular operation, that is, the system, based on the analysis of customer data available from the issuing bank, will determine the likelihood that the account is being used by the rightful owner.
Nowadays, many, but not all, online stores support 3-D Secure. For example, Aliexpress uses its own transaction protection system. If there are no online sellers on this resource, it will pass without SMS confirmation. Then all responsibility rests with either the bank that issued the card or the buyer.
No SMS confirmation is required for payments made through PayPal. This payment system imposes all risks on the security of the transaction on the sellers.
Alternative ways to use funds on the card without SMS confirmation
An SMS password is not required when making payments with a card during a personal visit to the store, when one of the technologies is used - Apple Pay, Samsung Pay or Google Pay - if the purchase costs no more than some money. User identification in such applications is carried out using a pin code or fingerprint.
The security system will allow no more than 3 such operations per day. Transactions for amounts over some money, even when using these technologies, must be confirmed with a pin code.
You can also transfer funds from a bank card to another account, access to which is less problematic. Sometimes such transactions can be done without SMS passwords, for example, if:
How to secure your money on a bank card
To prevent the theft of funds from a bank card, follow these simple recommendations:
CONTENT
- When is it required to withdraw money without SMS
- How to disable SMS confirmation
- How to remotely steal money from cards
- Receiving funds from a card without entering a pin code
- Transfer of funds and remote payment from a card without SMS
- Alternative ways to use funds on the card without SMS confirmation
- How to secure your money on a bank card
Three ways to steal money from a card and protection from them
When is it required to withdraw money without SMS
The desire to withdraw funds from a plastic card without confirming the operation with a code from SMS arises in two key situations:
- a person has got plastic, issued in the name of another person, and the owner of a valuable find wants to use the money in the account in the same way as if he found a lost wallet with cash;
- own money is in the account of a card issued in his own name or in the name of a relative, but there is no possibility to receive an SMS.
In the first situation, the best thing to do is to immediately call the bank that issued the card, the hotline whose number is printed on the plastic.
The fact is that the card issued by the bank - it does not matter whether it is a credit card or a payment card - is its property. It belongs to the bank, and not to the person whose name is on the front, who is the holder of the card blank.
Any operation with funds in the bank account to which the card is linked, carried out without the knowledge of the holder, is a criminal offense.
The desire to withdraw your money from your payment card without confirming the transaction with a one-time SMS code arises in the following cases:
- problems with cellular communication;
- loss of the mobile number linked to the card.
If the bank is near
If a bank branch or ATM is within transport accessibility, it will not be difficult to get money. There will be no problems how to cash out a card without SMS confirmation. In the department, it is enough to contact the cashier-operator, present the card and passport, at the ATM - insert the plastic into the card collector and enter the pin code. In both cases, the client receives cash without an SMS password, and only after the transaction is completed, an SMS notification is sent.
When visiting the office of the issuing bank, you have the opportunity to:
- submit an application to change the phone number associated with the card;
- disable SMS confirmation of card transactions;
- ask to block the card;
- order a card reissue;
- declare the loss of money from the card account without the knowledge of the holder, if this has already happened.
Please note: the presence of a bank branch, where you can go to solve problems with the availability of funds and card security, does not guarantee the safety of the client's money. For example, there are cases when money was debited from a Sberbank card without confirmation by the holder's new phone number, when the bank did not change the data in a timely manner, and the attackers gained access to the old phone number and card details.
If the bank is far away
If you lose your mobile phone tied to the card, and you are unable to personally contact the branch, you should urgently send a request to the bank to block the card in another way, choosing one of the three options:
- make an online call through the website of the issuing bank;
- order a call back on the bank's website to an available cell number;
- write a letter to the e-mail address of the issuer. It is desirable that the address of the sender of the message appears in the list of personal data of the cardholder provided to the bank.
In each option, to identify the identity of the cardholder, you need to name:
- your full name;
- date of birth;
- passport data;
- secret code word.
As a rule, banks accept applications for card re-issue by e-mail, but you still need to go to the nearest branch for new plastic - only some issuers send a new card by Post or deliver it by courier as Bank.
If problems with SMS-confirmation of card transactions online and, accordingly, authorization in the Internet bank or in the mobile application arose during a long stay abroad, the client can also remotely contact the bank's support service.
In case of problems with servicing plastic at ATMs and terminals in the host country, holders of cards of Gold class and higher are usually provided with an emergency cash withdrawal service.
How to disable SMS confirmation
If a bank customer is tired of SMS notifications about each card operation, they can be disabled together with SMS confirmation of transactions. To do this, you either need to call the issuer's call center from the cell phone number linked to the card, or come to the office with a passport.
Along with SMS confirmation of transactions, the ability to make purchases, payments and transfers online will be disabled. You should get rid of this service only if the card is really needed only for offline purchases and cash withdrawals.
If, when withdrawing funds from the card, the holder receives a notification on his cell phone, he can instantly react and thus help law enforcement officers solve the crime, and return the money to the bank.
Please note: for online transactions, funds are usually not debited from the card account immediately, but are temporarily frozen. So if the alarm is raised in time, the bank can cancel the operation and leave the client's money safe and sound.
How to remotely steal money from cards
Attackers invent and use quite a variety of ways to withdraw money from a card without a pin code and SMS confirmation, or with interception of a password (PIN or SMS):
- spy programs that steal card data - number, expiration date, secret code, as well as those capable of stealing the password for entering the Internet bank and mobile application;
- “Fake” (“false”) online stores / online services that offer non-existent goods / services in order to get hold of the data of gullible buyers' cards;
- skimming - installation of readers on ATMs that intercept card data, the presence of which allows you to make duplicates of plastic and withdraw other people's money;
- phishing - the cardholder receives an e-mail supposedly from the bank with a link, upon clicking on which the person gets to the site, "mowing" under the bank's web resource. A trusting client enters a username and password from the Internet bank and a one-time SMS password - scammers immediately use them to enter a real Internet bank and empty the victim's bank accounts;
- sending SMS supposedly from a short number of the issuing bank in order to find out the confidential data of the client and his card.
Receiving funds from a card without entering a pin code
The PIN-code is provided to the cardholder only upon its issue and upon subsequent re-issues. The code is printed on a sheet, which is placed in a special sealed envelope.
Issuers recommend that this document be destroyed immediately after reading and memorizing the code. For security purposes, cards and envelopes with pin codes are stored separately even in the bank. And no bank employee has access to the database of these passwords. Cardholders should not write the code on card forms.
3 attempts to brute force the pin code are allowed. If recovery of the cipher fails, the card will be blocked for 24 hours or permanently. Perhaps a call to the call center will be able to unblock. But then you need to provide passport data and a secret word. To change the PIN code at the ATM, you will first have to specify the data of the current, forgotten, cipher. This service is not available in the personal account of Internet banking of most banks.
If the pin code is lost, and the special envelope is destroyed, then no one can restore the cipher.
In such cases, 2 options are possible, but both involve visiting a bank office with a passport, where they ask to close the account and issue all the money or reissue the form.
The latter requires time (up to 2-4 weeks) and, possibly, additional costs, since most often an unscheduled release is paid. The price of the service depends on the policy of the issuer and the class of the card.
Another way to receive money from a card without entering a pin code is to use Internet banking and transfer funds to an account from which it is possible to withdraw money. This could be a savings account or another card.
Transfer of funds and remote payment from a card without SMS
The highest possible level of protection for bank accounts is provided by 3-D Secure technology. Payment systems MasterCard, VISA and MIR use MasterCard SecureCode, Verified by VISA and MirAccept, respectively.
3-D Secure does not provide a 100% guarantee of the security of transactions, but provides for additional identification of the buyer by SMS code.
In 2019 presented new protocol version... It is assumed that with its implementation, most payment transactions will not need to be confirmed by SMS codes: during the payment process, the software will automatically assess the degree of riskiness of a particular operation, that is, the system, based on the analysis of customer data available from the issuing bank, will determine the likelihood that the account is being used by the rightful owner.
Nowadays, many, but not all, online stores support 3-D Secure. For example, Aliexpress uses its own transaction protection system. If there are no online sellers on this resource, it will pass without SMS confirmation. Then all responsibility rests with either the bank that issued the card or the buyer.
No SMS confirmation is required for payments made through PayPal. This payment system imposes all risks on the security of the transaction on the sellers.
Alternative ways to use funds on the card without SMS confirmation
An SMS password is not required when making payments with a card during a personal visit to the store, when one of the technologies is used - Apple Pay, Samsung Pay or Google Pay - if the purchase costs no more than some money. User identification in such applications is carried out using a pin code or fingerprint.
The security system will allow no more than 3 such operations per day. Transactions for amounts over some money, even when using these technologies, must be confirmed with a pin code.
You can also transfer funds from a bank card to another account, access to which is less problematic. Sometimes such transactions can be done without SMS passwords, for example, if:
- only own accounts are used;
- apply to the services of a cashier of a financial organization. For the transfer you will need a passport and a card;
- use a self-service device. In this case, you need a pin code.
How to secure your money on a bank card
To prevent the theft of funds from a bank card, follow these simple recommendations:
- keep the card carefully, and if it is lost, immediately contact the bank with a request to block it;
- keep the pin code separate from the card. It is best to write down the numbers and immediately memorize, and hide a piece of paper (notebook, notepad) with a written PIN in a secluded place;
- do not pass the card to others. If you need to pay with it in a restaurant or other institution, follow along with the employee of the institution to the POS terminal and make the payment yourself;
- so that when paying with a card in a restaurant, supermarket, at a gas station, one of the staff could not get all the card details, stealthily removing the front and back sides on a mini-camera, rewrite and remember (both!) the secret code printed on the back side, and then gently coat it with correction fluid;
- Do not tell anyone not only the secret code, but also the validity period of the card;
- never enter your PIN on web resources - online transactions are confirmed using one-time SMS passwords (using 3D-Secure technology);
- Do not tell anyone one-time SMS-codes of transactions, delete them from your mobile immediately after receiving an SMS with a notification that the operation was successful;
- do not call back or send SMS to phone numbers received in SMS about “card blocking”, “erroneous sending of money” and others, even those allegedly received from a short number of the issuing bank. Report the receipt of such an SMS to the bank and / or the police. The same applies if you receive an e-mail with such content;
- do not take a picture of the card with a smartphone and do not post it on the Internet, because on the front side of the plastic you can see data sufficient to steal money - the card number, expiration date, the name of the holder. If you really want to show off the exclusive design of the card - retouch the validity period and (preferably) part of the issue in a graphic editor;
- buy goods and services only in reliable online stores / online services, carefully check the reputation of an unfamiliar online trading platform before paying for your purchase;
- install on all devices that you use for online transactions with card accounts (computer, tablet, smartphone), software that protects against viruses and spyware. Please update this software regularly.
