Study: Hackers Can Guess All Your Visa Card Numbers in 6 Seconds

Photo by wk1003mike / Shutterstock.com

A new study has given us another reason to review credit card bills and bank statements closely.

Hackers can correctly guess every number on your debit or credit card — including the expiration date and security code — in as few as six seconds, according to researchers at Newcastle University in England.

While Visa has disputed the findings, the researchers say your risk is highest this time of year because many shoppers buy gifts online.

The vulnerabilities that enable hackers to correctly guess card numbers are particular to Visa cards, according to the study. The researchers conducted experiments involving MasterCard and Visa. They found MasterCard was not vulnerable in the same way.

Their findings were recently published in the journal IEEE Security & Privacy.

The Institute of Electrical and Electronics Engineers, or IEEE, is a nonprofit organization that describes itself as “the world’s largest technical professional organization dedicated to advancing technology for the benefit of humanity.”

The study found that hackers use a technique known as a “distributed guessing attack” to successfully guess your card numbers. This method involves using multiple websites that accept debit or credit card payments to make guesses.

Two weaknesses make this attack possible, according to lead study author Mohammed Aamir Ali, a doctoral student in Newcastle University’s School of Computing Science:

  1. Currently, the online payment system does not detect when multiple invalid payment requests — resulting from a hacker’s unsuccessful guesses — are distributed across different websites. This allows a hacker to make unlimited guesses for each of the three card data fields: card number, expiration date and security code.
  2. Different websites ask for different card data fields to validate online purchases. For example, some ask for all three fields, while others ask only for the card number and expiration date.

Ali says it’s the combination of these two weaknesses that makes it “frighteningly easy for attackers to generate all the card details one field at a time.”

Putting that another way, he concludes:

“So even starting with no details at all other than the first six digits — which tell you the bank and card type and so are the same for every card from a single provider — a hacker can obtain the three essential pieces of information to make an online purchase within as little as six seconds.”

Fortunately, the researchers note, simple steps like monitoring statements and balances regularly can help consumers guard against distributed guessing attacks.

Visa notes other safeguards in a statement provided to Money Talks News on Thursday:

“The research does not take into account the multiple layers of fraud prevention that exist within the payments system, each of which must be met in order to make a transaction possible in the real world. …

Visa also offers enhanced security using Verified by Visa (based on the 3DSecure standard) which offers improved security for e-commerce transactions. … Where a merchant chooses not to use Verified by Visa for a card not present transaction, they will assume the risk for fraud. …”

To learn about how Verified by Visa works, visit Visa’s consumer webpage on the topic. To learn about other safeguards Visa provides for cardholders, visit its “Security + support” page.

For more tips, check out “7 Ways to Guard Your Wallet — and Identity — When Shopping Online.”

What’s your reaction to this news? Share your thoughts below or on Facebook.

Disclosure: The information you read here is always objective. However, we sometimes receive compensation when you click links within our stories.

Read Next
5 Memberships That Offer Car Insurance Discounts
5 Memberships That Offer Car Insurance Discounts

These discounts may save you hundreds — even thousands — of dollars a year.

20 Generic Brands That Amazon Created
20 Generic Brands That Amazon Created

Amazon’s growing collection of private brands offers everything from toilet paper and coffee to motor oil and clothing.

15 Great Amazon Finds You Can Buy for Less Than $5
15 Great Amazon Finds You Can Buy for Less Than $5

These products offer big value at a small price.

8 Things You Can Buy for $1 or Less on Amazon
8 Things You Can Buy for $1 or Less on Amazon

They say you get what you pay for — but not always. Sometimes, you can uncover a good deal at a great price.

These 13 States Tax Social Security Income
These 13 States Tax Social Security Income

Uncle Sam is not the only one looking for a piece of your retirement income. Is your state on this list?

View this page without ads

Help us produce more money-saving articles and videos by subscribing to a membership.

Get Started

Most Popular
7 Kirkland Signature Items to Avoid at Costco
7 Kirkland Signature Items to Avoid at Costco

Even if it seems you save a bundle buying Costco’s Kirkland Signature brand products, they may not be the bargain they appear to be.

How to Buy Gas At Costco Without a Membership
How to Buy Gas At Costco Without a Membership

The warehouse club often has some of the cheapest gas in town. Here’s how you can get it as a nonmember.

10 Things to Stop Buying If You Want a Clutter-Free Home
10 Things to Stop Buying If You Want a Clutter-Free Home

If you like to keep things simple, avoid these purchases.

If You Find This Thrift Shopping, Buy It
If You Find This Thrift Shopping, Buy It

Vacuums from this brand can last a half-century, if not longer — and they’re hot on the resale market.

A Simple Way to Silence Robocalls Today
A Simple Way to Silence Robocalls Today

A few steps can keep your phone from ringing when a spammer calls.

This Company Makes the Best Tires in America
This Company Makes the Best Tires in America

Driver satisfaction with tires is at an all-time high, but one brand stands out.

This Health Issue Can Hint at Dementia Years in Advance
This Health Issue Can Hint at Dementia Years in Advance

One type of pain is especially associated with cognitive decline.

Can I Switch to Spousal Social Security Benefits When My Ex Dies?
Can I Switch to Spousal Social Security Benefits When My Ex Dies?

Knowing when to claim can help you maximize benefits.

Medicare Will Not Cover These 6 Medical Costs
Medicare Will Not Cover These 6 Medical Costs

Don’t let these health care expenses catch you off guard in retirement.

8 Things You Should Always Buy on Amazon
8 Things You Should Always Buy on Amazon

The giant retailer shines when it comes to these things, from basics to hard-to-find specialty goods.

5 Ways to Get Amazon Prime for Free
5 Ways to Get Amazon Prime for Free

Hesitant to drop $119 a year on an Amazon Prime membership? Here’s how to get it for free.

12 Deep Discounts Available on Amazon This Friday
12 Deep Discounts Available on Amazon This Friday

These items are steeply discounted — but the deals won’t last long.

5 Ways to Fill Your Pantry With Free Food
5 Ways to Fill Your Pantry With Free Food

Anyone can take advantage of these resources.

3 Ways to Get Microsoft Office for Free
3 Ways to Get Microsoft Office for Free

With a little ingenuity, you can cut Office costs to zero.

6 Reasons You Should Stop Hiding Cash at Home
6 Reasons You Should Stop Hiding Cash at Home

Stashing money around the house is anything but harmless.

5 States With the Worst Health Care for Retirees
5 States With the Worst Health Care for Retirees

All of these states are located in the same region of the nation.

36 Things That Will Be Obsolete Soon
36 Things That Will Be Obsolete Soon

The writing is on the wall for dozens of things we have grown up with.

5 Products You Should Never Buy Generic
5 Products You Should Never Buy Generic

Sometimes the brand-name version is clearly superior.

This Cellphone Carrier Has the Worst Network Quality, Customers Say
This Cellphone Carrier Has the Worst Network Quality, Customers Say

One major wireless provider stands out for the least reliable call, messaging and data services.

View More Articles

View this page without ads

Help us produce more money-saving articles and videos by subscribing to a membership.

Get Started

Add a Comment

Our Policy: We welcome relevant and respectful comments in order to foster healthy and informative discussions. All other comments may be removed. Comments with links are automatically held for moderation.