{"id":18817,"date":"2021-11-17T11:21:05","date_gmt":"2021-11-17T10:21:05","guid":{"rendered":"https:\/\/creditpass.de\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/"},"modified":"2021-11-26T13:40:13","modified_gmt":"2021-11-26T12:40:13","slug":"pay-without-a-pin-researchers-crack-visas-nfc-payment-function","status":"publish","type":"post","link":"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/","title":{"rendered":"Pay without a PIN &#8211; researchers crack Visa&#8217;s NFC payment function"},"content":{"rendered":"<p>Researchers at ETH Zurich paid for any expensive products with Visa contactless and without a PIN.<\/p>\n<p>Contactless payment by card only works up to typically 30-50 euros without a PIN. The PIN is normally requested for expensive payment transactions. This should limit the misuse of stolen cards. But researchers at ETH Zurich demonstrated that this PIN query can easily be bypassed, at least with Visa cards. The attack is based on a so-called &#8220;man in the middle&#8221; (MITM) who latches between the payment terminal and the card and manipulates the transaction. Specifically, this MITM function is taken over by two cell phones that communicate with each other via WLAN and each of which runs an app developed by the researchers. The method is reminiscent of attacks on credit cards previously used by criminals, in which soldered chips took on the role of MITM. The mistake of Visa is that the manipulation of the MITM is not noticed because the changed data is not cryptographically secured. Mastercard obviously does it differently; with their cards, the attacks of the Swiss researchers failed.<\/p>\n<p>Source: <a href=\"https:\/\/www.heise.de\/security\/meldung\/Zahlen-ohne-PIN-Forscher-knacken-Visas-NFC-Bezahlfunktion-4881555.html\" target=\"_blank\" rel=\"noopener noreferrer\">J\u00fcrgen Schmidt on heise.de<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Researchers at ETH Zurich paid for any expensive products with Visa contactless and without a PIN. Contactless payment by card only works up to typically 30-50 euros without a PIN. The PIN is normally requested for expensive payment transactions. This should limit the misuse of&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[93],"tags":[],"class_list":["post-18817","post","type-post","status-publish","format-standard","hentry","category-generally"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Pay without a PIN - researchers crack Visa&#039;s NFC payment function - creditPass<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pay without a PIN - researchers crack Visa&#039;s NFC payment function - creditPass\" \/>\n<meta property=\"og:description\" content=\"Researchers at ETH Zurich paid for any expensive products with Visa contactless and without a PIN. Contactless payment by card only works up to typically 30-50 euros without a PIN. The PIN is normally requested for expensive payment transactions. This should limit the misuse of...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/\" \/>\n<meta property=\"og:site_name\" content=\"creditPass\" \/>\n<meta property=\"article:published_time\" content=\"2021-11-17T10:21:05+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-11-26T12:40:13+00:00\" \/>\n<meta name=\"author\" content=\"creditPass - Newsgroup\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"creditPass - Newsgroup\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\\\/\"},\"author\":{\"name\":\"creditPass - Newsgroup\",\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/#\\\/schema\\\/person\\\/4037101294f641416f948032b56b3680\"},\"headline\":\"Pay without a PIN &#8211; researchers crack Visa&#8217;s NFC payment function\",\"datePublished\":\"2021-11-17T10:21:05+00:00\",\"dateModified\":\"2021-11-26T12:40:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\\\/\"},\"wordCount\":199,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/#organization\"},\"articleSection\":[\"Generally\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/creditpass.de\\\/en\\\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\\\/\",\"url\":\"https:\\\/\\\/creditpass.de\\\/en\\\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\\\/\",\"name\":\"Pay without a PIN - researchers crack Visa's NFC payment function - creditPass\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/#website\"},\"datePublished\":\"2021-11-17T10:21:05+00:00\",\"dateModified\":\"2021-11-26T12:40:13+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/creditpass.de\\\/en\\\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/creditpass.de\\\/en\\\/fintech-in-business\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pay without a PIN &#8211; researchers crack Visa&#8217;s NFC payment function\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/creditpass.de\\\/en\\\/\",\"name\":\"creditPass\",\"description\":\"Wir sichern Ihre Zahlungen, Risiken und Compliance  seit 2003.\",\"publisher\":{\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/creditpass.de\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/#organization\",\"name\":\"creditPass GmbH\",\"url\":\"https:\\\/\\\/creditpass.de\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/creditpass.de\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/4977_4976_creditPass_Logo_2014-e1457101909216.png\",\"contentUrl\":\"https:\\\/\\\/creditpass.de\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/4977_4976_creditPass_Logo_2014-e1457101909216.png\",\"width\":280,\"height\":62,\"caption\":\"creditPass GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/creditpass.de\\\/en\\\/#\\\/schema\\\/person\\\/4037101294f641416f948032b56b3680\",\"name\":\"creditPass - Newsgroup\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a4ba82d095726adf83552138c71044ea9f76c507608b10c17837aecfeb8a7610?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a4ba82d095726adf83552138c71044ea9f76c507608b10c17837aecfeb8a7610?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a4ba82d095726adf83552138c71044ea9f76c507608b10c17837aecfeb8a7610?s=96&d=mm&r=g\",\"caption\":\"creditPass - Newsgroup\"},\"sameAs\":[\"creditPass_2016\"],\"url\":\"https:\\\/\\\/creditpass.de\\\/en\\\/author\\\/creditpass_2016\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Pay without a PIN - researchers crack Visa's NFC payment function - creditPass","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/","og_locale":"en_US","og_type":"article","og_title":"Pay without a PIN - researchers crack Visa's NFC payment function - creditPass","og_description":"Researchers at ETH Zurich paid for any expensive products with Visa contactless and without a PIN. Contactless payment by card only works up to typically 30-50 euros without a PIN. The PIN is normally requested for expensive payment transactions. This should limit the misuse of...","og_url":"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/","og_site_name":"creditPass","article_published_time":"2021-11-17T10:21:05+00:00","article_modified_time":"2021-11-26T12:40:13+00:00","author":"creditPass - Newsgroup","twitter_card":"summary_large_image","twitter_misc":{"Written by":"creditPass - Newsgroup","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/#article","isPartOf":{"@id":"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/"},"author":{"name":"creditPass - Newsgroup","@id":"https:\/\/creditpass.de\/en\/#\/schema\/person\/4037101294f641416f948032b56b3680"},"headline":"Pay without a PIN &#8211; researchers crack Visa&#8217;s NFC payment function","datePublished":"2021-11-17T10:21:05+00:00","dateModified":"2021-11-26T12:40:13+00:00","mainEntityOfPage":{"@id":"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/"},"wordCount":199,"commentCount":0,"publisher":{"@id":"https:\/\/creditpass.de\/en\/#organization"},"articleSection":["Generally"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/","url":"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/","name":"Pay without a PIN - researchers crack Visa's NFC payment function - creditPass","isPartOf":{"@id":"https:\/\/creditpass.de\/en\/#website"},"datePublished":"2021-11-17T10:21:05+00:00","dateModified":"2021-11-26T12:40:13+00:00","breadcrumb":{"@id":"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/creditpass.de\/en\/pay-without-a-pin-researchers-crack-visas-nfc-payment-function\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/creditpass.de\/en\/fintech-in-business\/"},{"@type":"ListItem","position":2,"name":"Pay without a PIN &#8211; researchers crack Visa&#8217;s NFC payment function"}]},{"@type":"WebSite","@id":"https:\/\/creditpass.de\/en\/#website","url":"https:\/\/creditpass.de\/en\/","name":"creditPass","description":"Wir sichern Ihre Zahlungen, Risiken und Compliance  seit 2003.","publisher":{"@id":"https:\/\/creditpass.de\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/creditpass.de\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/creditpass.de\/en\/#organization","name":"creditPass GmbH","url":"https:\/\/creditpass.de\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/creditpass.de\/en\/#\/schema\/logo\/image\/","url":"https:\/\/creditpass.de\/wp-content\/uploads\/2022\/06\/4977_4976_creditPass_Logo_2014-e1457101909216.png","contentUrl":"https:\/\/creditpass.de\/wp-content\/uploads\/2022\/06\/4977_4976_creditPass_Logo_2014-e1457101909216.png","width":280,"height":62,"caption":"creditPass GmbH"},"image":{"@id":"https:\/\/creditpass.de\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/creditpass.de\/en\/#\/schema\/person\/4037101294f641416f948032b56b3680","name":"creditPass - Newsgroup","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a4ba82d095726adf83552138c71044ea9f76c507608b10c17837aecfeb8a7610?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a4ba82d095726adf83552138c71044ea9f76c507608b10c17837aecfeb8a7610?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a4ba82d095726adf83552138c71044ea9f76c507608b10c17837aecfeb8a7610?s=96&d=mm&r=g","caption":"creditPass - Newsgroup"},"sameAs":["creditPass_2016"],"url":"https:\/\/creditpass.de\/en\/author\/creditpass_2016\/"}]}},"_links":{"self":[{"href":"https:\/\/creditpass.de\/en\/wp-json\/wp\/v2\/posts\/18817","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/creditpass.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/creditpass.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/creditpass.de\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/creditpass.de\/en\/wp-json\/wp\/v2\/comments?post=18817"}],"version-history":[{"count":1,"href":"https:\/\/creditpass.de\/en\/wp-json\/wp\/v2\/posts\/18817\/revisions"}],"predecessor-version":[{"id":18820,"href":"https:\/\/creditpass.de\/en\/wp-json\/wp\/v2\/posts\/18817\/revisions\/18820"}],"wp:attachment":[{"href":"https:\/\/creditpass.de\/en\/wp-json\/wp\/v2\/media?parent=18817"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/creditpass.de\/en\/wp-json\/wp\/v2\/categories?post=18817"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/creditpass.de\/en\/wp-json\/wp\/v2\/tags?post=18817"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}