Study: Hackers Can Guess All Your Visa Card Numbers in 6 Seconds

Photo by wk1003mike / Shutterstock.com

A new study has given us another reason to review credit card bills and bank statements closely.

Hackers can correctly guess every number on your debit or credit card — including the expiration date and security code — in as few as six seconds, according to researchers at Newcastle University in England.

While Visa has disputed the findings, the researchers say your risk is highest this time of year because many shoppers buy gifts online.

The vulnerabilities that enable hackers to correctly guess card numbers are particular to Visa cards, according to the study. The researchers conducted experiments involving MasterCard and Visa. They found MasterCard was not vulnerable in the same way.

Their findings were recently published in the journal IEEE Security & Privacy.

The Institute of Electrical and Electronics Engineers, or IEEE, is a nonprofit organization that describes itself as “the world’s largest technical professional organization dedicated to advancing technology for the benefit of humanity.”

The study found that hackers use a technique known as a “distributed guessing attack” to successfully guess your card numbers. This method involves using multiple websites that accept debit or credit card payments to make guesses.

Two weaknesses make this attack possible, according to lead study author Mohammed Aamir Ali, a doctoral student in Newcastle University’s School of Computing Science:

  1. Currently, the online payment system does not detect when multiple invalid payment requests — resulting from a hacker’s unsuccessful guesses — are distributed across different websites. This allows a hacker to make unlimited guesses for each of the three card data fields: card number, expiration date and security code.
  2. Different websites ask for different card data fields to validate online purchases. For example, some ask for all three fields, while others ask only for the card number and expiration date.

Ali says it’s the combination of these two weaknesses that makes it “frighteningly easy for attackers to generate all the card details one field at a time.”

Putting that another way, he concludes:

“So even starting with no details at all other than the first six digits — which tell you the bank and card type and so are the same for every card from a single provider — a hacker can obtain the three essential pieces of information to make an online purchase within as little as six seconds.”

Fortunately, the researchers note, simple steps like monitoring statements and balances regularly can help consumers guard against distributed guessing attacks.

Visa notes other safeguards in a statement provided to Money Talks News on Thursday:

“The research does not take into account the multiple layers of fraud prevention that exist within the payments system, each of which must be met in order to make a transaction possible in the real world. …

Visa also offers enhanced security using Verified by Visa (based on the 3DSecure standard) which offers improved security for e-commerce transactions. … Where a merchant chooses not to use Verified by Visa for a card not present transaction, they will assume the risk for fraud. …”

To learn about how Verified by Visa works, visit Visa’s consumer webpage on the topic. To learn about other safeguards Visa provides for cardholders, visit its “Security + support” page.

For more tips, check out “7 Ways to Guard Your Wallet — and Identity — When Shopping Online.”

What’s your reaction to this news? Share your thoughts below or on Facebook.

How to earn $30 in less than 30 seconds

Earn extra money by using Rakuten (formerly known as Ebates) — a site that gets you cash back at more than 2,500 stores. As a bonus for joining Rakuten between now and Aug. 6, 2020, you'll earn $30 when you spend at least $30 shopping online through Rakuten within the first 90 days. Start earning cash back and claim a free $30 bonus today.

Read Next
5 Monthly Bills You Can Easily Negotiate Down
5 Monthly Bills You Can Easily Negotiate Down

Here’s how to bring down recurring expenses and save hundreds — or even thousands — of dollars each year.

6 Types of People Who Can’t Count on Social Security
6 Types of People Who Can’t Count on Social Security

If you fall into one of these groups, don’t assume that you will receive benefits.

Have You Heard of This Best Place to Retire in 2020?
Have You Heard of This Best Place to Retire in 2020?

The best place to retire in America is one you likely are not familiar with.

7 Ways to Save Money Without Trying
7 Ways to Save Money Without Trying

Saving money doesn’t always mean drudgery and sacrifice. These tools make it easy — sometimes even fun.

7 Reasons You Should Change Careers After Age 50
7 Reasons You Should Change Careers After Age 50

Many older workers have the energy and experience to make a successful career change.

View this page without ads

Help us produce more money-saving articles and videos by subscribing to a membership.

Get Started

Most Popular
Will I Get My Ex-Husband’s Social Security When He Dies?
Will I Get My Ex-Husband’s Social Security When He Dies?

Two factors determine how much money is coming to you.

7 Ways to Boost Your Credit Score Fast
7 Ways to Boost Your Credit Score Fast

Your financial security might soon depend upon the strength of your credit score.

20 Things That Are Actually Worth Stockpiling
20 Things That Are Actually Worth Stockpiling

You probably don’t need a year’s supply of toilet paper to survive an outbreak, but consider stocking up on these items.

5 Household Disinfectants That Can Destroy the Coronavirus
5 Household Disinfectants That Can Destroy the Coronavirus

You likely already have some of these products at home.

22 Things You Should Always Buy at a Dollar Store
22 Things You Should Always Buy at a Dollar Store

The dollar store has great bargains on these purchases.

6 Reasons I Will Never Trust Suze Orman
6 Reasons I Will Never Trust Suze Orman

Beware: The self-proclaimed personal finance expert has a track record that suggests more sizzle than steak.

16 Amazon Purchases That We Are Loving Right Now
16 Amazon Purchases That We Are Loving Right Now

These practical products make everyday life a little easier.

America’s Most Reliable Appliance Brand Is a Surprise
America’s Most Reliable Appliance Brand Is a Surprise

Have you heard of this appliance manufacturer?

The Top 11 Jobs That Employers Want Retirees to Do
The Top 11 Jobs That Employers Want Retirees to Do

Tired of age discrimination? Businesses are clamoring for older workers to fill certain roles.

This Type of Social Security Benefit Is Often Overlooked
This Type of Social Security Benefit Is Often Overlooked

The Social Security Administration is not helping certain people get money to which they are entitled, a report says.

9 Everyday Problems You Can Solve With Vaseline
9 Everyday Problems You Can Solve With Vaseline

Forget expensive specialty products. Good ol’ petroleum jelly can address many common annoyances.

Getting These 2 Shots Could Reduce Your Risk of Dementia
Getting These 2 Shots Could Reduce Your Risk of Dementia

These vaccines may lower the risk of Alzheimer’s disease by up to 40%.

19 Purchases That Buyers Almost Always Regret
19 Purchases That Buyers Almost Always Regret

Think twice before buying these things.

7 Tips for Building an Emergency Stockpile
7 Tips for Building an Emergency Stockpile

A pandemic or natural disaster could leave you reliant on your existing food supply. Is your pantry prepared?

19 High-Paying Jobs You Can Get With a 2-Year Degree
19 High-Paying Jobs You Can Get With a 2-Year Degree

These jobs pay more than the typical job in the U.S. — and no bachelor’s degree is required.

8 of the Worst Things to Buy at a Dollar Store
8 of the Worst Things to Buy at a Dollar Store

Not everything sold at dollar stores is a great bargain or a safe purchase. Here’s our list of products to avoid.

41 Things You Should Never Buy
41 Things You Should Never Buy

Some purchases are just plain dumb. Give yourself — and your budget — a break. Don’t spend money on this stuff.

5 Ways to Get Amazon Prime for Free
5 Ways to Get Amazon Prime for Free

Hesitant to drop $119 a year on an Amazon Prime membership? Here’s how to get it for free.

7 Ways to Shop at Costco Without a Membership
7 Ways to Shop at Costco Without a Membership

You don’t necessarily need to join to get in on the warehouse store’s savings.

View More Articles

View this page without ads

Help us produce more money-saving articles and videos by subscribing to a membership.

Get Started

Add a Comment

Our Policy: We welcome relevant and respectful comments in order to foster healthy and informative discussions. All other comments may be removed. Comments with links are automatically held for moderation.