How secure are our banking details with BoS

[taffy2jeffmorgan]

Hi All, just a quick question, every day when we turn on our televisions some famous institution mainly banking has been hacked, as well as ten's of thousands of individuals have had their banking details stolen. With all this in mind how safe are our transactions when purchasing from the BoS store and have any of our membership experienced any problems.  

[FuriousMeow]

Well, it's through a payment processor - Xsolla - so not the BoS store exactly. You can use Paypal, which can use your banking information on their end to make the transaction but it isn't Xsolla that's getting the bank information just transaction information. A credit card can also be used through Paypal, depends on how that's setup but it would be Paypal in this instance that would be a question of "how safe." If you put in your credit card, well that's not banking information just your credit card and really not enough information is provided to go to most websites and use it. Credit cards have a few layers of security themselves, and unless you choose to "save your credit card information" (uh, don't do that) then only the transaction will be recorded in the records in xsolla.

 

Basically, it's more secure than if you are storing your credit card or banking information on your phone or just paying for fuel at a fuel pump where card readers can be installed and most wouldn't notice.

 

I've had two issues recently, but no idea where they got more information from. They had far more than I have to put in to purchase anything through Xsolla so it definitely wasn't through the chain of purchasing here.

[[CPT]Crunch]

Simple way to avoid this, always use a protected credit card, never use a direct bank or debit card.  Visa will always reimburse no fault fraud, and than give you a new card.

[taffy2jeffmorgan]

Thanks  to you both, that's useful and reassuring information.  

[IckyATLAS]

3 hours ago, [CPT]Crunch said:

Simple way to avoid this, always use a protected credit card, never use a direct bank or debit card.  Visa will always reimburse no fault fraud, and than give you a new card.

And also always refuse to store the credit data information on the website where you do purchases. I do not use Xsolla (no idea what it is), only Paypal.

I have always refused to allow the websites to keep the credit card and transaction data, even if this makes it simpler for the next purchase.

Now I am not naïve and I know that all this is the fronting and you can be sure that some store it nevertheless. Some times you even have no choice.

But at least you have a legal argument just in case.

Clean all your cookies regularly and your browser cache to avoid stored webpages with your credit card data. All this just reduces risk but does not make you invulnerable to data theft direct or indirect.

[Dragon1-1]

In Europe at least, you are required to use 2FA for any online debit card payment. I don't know if it's an option in other places, but that makes stolen card details be of little use by themselves. As long as your bank account is well secured (and you don't lose your physical card), it's a pretty secure solution.

[kestrel79]

I use my cc tied to a Paypal account. Always less issues. I will get emails for overseas purchases and I just approve them and am good to go.

 

My Wife does make fun of me joking we're on some FBI watch list because of all the Russian sim gear and games I buy.

[FuriousMeow]

4 hours ago, IckyATLAS said:

 I do not use Xsolla (no idea what it is),

 

 

Your Paypal transaction is through the Xsolla payment processor, when you click the buy button you get redirected.

 

 

 

[firdimigdi]

If your bank provides it you can also opt to use a virtual card for certain online transactions and then delete it once you are done.

[IckyATLAS]

3 hours ago, FuriousMeow said:

Your Paypal transaction is through the Xsolla payment processor, when you click the buy button you get redirected.

Impossible to escape ? 

[Noisemaker]

Pre-paid credit cards for online transactions.

 

Let's repeat that.

 

Pre-paid credit cards for online transactions.

[Dragon1-1]

Or just use a debit card with 2FA. Honestly, credit cards suck, I don't like to waste my money on them. If your phone and bank account are compromised, you're screwed no matter what you're paying with. 

[LukeFF]

2 hours ago, Dragon1-1 said:

If your phone and bank account are compromised, you're screwed no matter what you're paying with. 

 

Not hardly, at least here in the US. If I see an unauthorized transaction on one of my credit cards, it's a simple matter to contact the bank about the issue, and I'm not responsible for said charges. It's happened a few times over the years and has never been an issue getting it resolved. Plus, the bank I'm with is very good about looking out for fraudulent transactions. 

 

Debit cards, on the other hand, are an entirely different issue. That money in your account is gone until it can be credited back to you, which may take time.

[Dragon1-1]

I'm not talking a fraudulent charge, because such a thing can simply never happen when every online transaction using a debit card has to go through 2FA (two factor authentication, basically, you need to confirm from your phone). I'm talking about your bank account being compromised, which means, someone got both your login/password/PIN and your 2FA device, enabling them to authorize transactions. Then, you're screwed anywhere in the world, the thief can simply do a wire transfer at that point, because either way it requires a full control over the account.

 

True to the point, I've simply never had a fraudulent charge situation, it simply doesn't happen with this system. Stealing debit card info in Europe gets you precisely nothing, because 2FA is mandatory, and notably more secure and convenient than most other schemes. Not sure if it's offered elsewhere, but it should be. IMO, it's far better to ensure this kind of fraud basically can't happen rather than pay for being able to easily reverse it.

[AEthelraedUnraed]

4 hours ago, LukeFF said:

If I see an unauthorized transaction on one of my credit cards, it's a simple matter to contact the bank about the issue, and I'm not responsible for said charges.

Unauthorized transaction? How does such a thing even happen? Doesn't somebody need to have at least access to both your pin code and either your card or phone?

 

5 hours ago, LukeFF said:

Debit cards, on the other hand, are an entirely different issue. That money in your account is gone until it can be credited back to you, which may take time.

Perhaps in the US. In Europe debit cards are the way to go. All transactions literally take seconds from start to full completion on both accounts involved and are highly secure. Besides, it's *your* money you're paying with so it's essentially just a withdrawal which makes it relatively cheap.

 

To a Dutchman, the idea of paying with money you don't yet own is... very foreign.

[Mtnbiker1998]

4 hours ago, Dragon1-1 said:

I'm not talking a fraudulent charge, because such a thing can simply never happen when every online transaction using a debit card has to go through 2FA (two factor authentication, basically, you need to confirm from your phone). I'm talking about your bank account being compromised, which means, someone got both your login/password/PIN and your 2FA device, enabling them to authorize transactions. Then, you're screwed anywhere in the world, the thief can simply do a wire transfer at that point, because either way it requires a full control over the account.

 

True to the point, I've simply never had a fraudulent charge situation, it simply doesn't happen with this system. Stealing debit card info in Europe gets you precisely nothing, because 2FA is mandatory, and notably more secure and convenient than most other schemes. Not sure if it's offered elsewhere, but it should be. IMO, it's far better to ensure this kind of fraud basically can't happen rather than pay for being able to easily reverse it.

 

As someone studying Cybersecurity, I have bad news for you if you think simply using 2FA makes everything 100% secure...

[Dragon1-1]

Of course not, you also have to use the usual good security practices, but that's a given. For an average person, that's enough, it prevents security from being compromised at a single point of failure, and the vast majority of attacks are of this nature. This is what makes 2FA secure, most of the time it's not worth the effort it'd take to break both factors. If you have enough money to have criminals deliberately single you out for a heist, you have enough money to invest in a much more elaborate security scheme. 

[J37_Spyboy]

What is 2FA please? Btw I have never had a problem with Xsolla in all the years since it was introduced.

[BOO]

1 minute ago, J5_Spyboy said:

What is 2FA please? Btw I have never had a problem with Xsolla in all the years since it was introduced.

2 factor authentication. Ie you do something on one device and then you get a message on your registered device (usually your phone), with a code to input or a yes/no to confirm its you. I think it usually triggers when you use a new device but I think it can also be set up to do it everytime (perhpas proxys also trigger it). 

 

As above, not a 100% guarantee but better than not using it. 

 

 

[J37_Spyboy]

Thanks Boo. I thought a while after I had posted the question that that was what it meant! Senior moment!

 

[LukeFF]

14 hours ago, AEthelraedUnraed said:

Unauthorized transaction? How does such a thing even happen? Doesn't somebody need to have at least access to both your pin code and either your card or phone?

 

Hackers can get into anything if they try hard enough. ? Thankfully, though, with improved security measures, these sorts of instances are fewer and farther between. The last time anything happened with one of my cards was probably 6 years ago at this point. And even then it was no big deal - call the bank, tell them it wasn't me who made the purchase, they verify a few things, and the charge comes off my account.

 

14 hours ago, AEthelraedUnraed said:

Perhaps in the US. In Europe debit cards are the way to go. All transactions literally take seconds from start to full completion on both accounts involved and are highly secure. Besides, it's *your* money you're paying with so it's essentially just a withdrawal which makes it relatively cheap.

 

To a Dutchman, the idea of paying with money you don't yet own is... very foreign.

 

LOL yes, I do agree that Americans are addicted to cheap and easy credit. The key is to essentially treat them like cash, i.e., don't spend more than what you can actually pay for at the end of the month. Easier said than done at times, for sure. The other draw for them here is that they often come with nice cash-back rewards, so if you don't let the interest pile up on them you end up with free money in your pocket.

[[CPT]milopugdog]

8 hours ago, LukeFF said:

LOL yes, I do agree that Americans are addicted to cheap and easy credit. The key is to essentially treat them like cash, i.e., don't spend more than what you can actually pay for at the end of the month. Easier said than done at times, for sure. The other draw for them here is that they often come with nice cash-back rewards, so if you don't let the interest pile up on them you end up with free money in your pocket.

Just you wait, I'll be laughing my way to the bank at the end of the year with my $120 in cash back rewards!

[dburne]

5 minutes ago, [CPT]milopugdog said:

Just you wait, I'll be laughing my way to the bank at the end of the year with my $120 in cash back rewards!

 

Lol  no cash back for me baby, the couple cards we have I pay off on a weekly basis! Mostly Amazon stuff the wife gets. CC is paid in full each Friday. She  uses Amazon a lot lol. We have zero debt in this house. We both in our previous lives many years ago, learned that the hard way. It is a good feeling.

[[CPT]milopugdog]

3 hours ago, dburne said:

 

Lol  no cash back for me baby, the couple cards we have I pay off on a weekly basis! Mostly Amazon stuff the wife gets. CC is paid in full each Friday. She  uses Amazon a lot lol. We have zero debt in this house. We both in our previous lives many years ago, learned that the hard way. It is a good feeling.

Realistically, the only debt that I have is from my Bachelor's degree. Amazon isn't really an issue for me currently, but Menards? Oh man, Went in there the other day to buy a $15 push broom and ended up buying $110 in other stuff