The restaurant copies cards and overwrites their data - where to go?

Question

Information Security

So, in a restaurant in Moscow on the Arbat, I decided not to give the chipped card to the waiter, but to walk to the cashier with my feet (I was just in a hurry).
I get to the checkout and what I see:
1) the cashier opens a notebook and swipes the magnetic stripe of the card over the reader on the keyboard, the card data (apparently all three stripes) are there (judging by the size of the scrollbar, there are already a lot of cards copied).
2) The cashier asks me why there is no CVC on the card (I just erased it, and payments via the Internet on the cards that I carry in my wallet are disabled), I say that “it was not there”.
3) the cashier performs the operation through a standard terminal and hesitates for a long time when I refuse to enter the PIN by pressing the red button (and a check pops up for signature), this is not possible with the type argument.
The card-issuing bank (Svyaznoybank) is not interested in this story (if there are representatives here, the ticket number is on request).
Acquirer could not be determined. I went to the police, the standard song about “they will kill, then call” - the absence of the victim.
Question. Why is nobody interested?
How to report this to the visa / mastercard (I called the hotline, they don’t care, they send it to the bank)?

Answer 1

If the cops are freezing, then you need to write to the prosecutor's office.
An application with two recipients - the Police and the Prosecutor's Office. we send it by registered mail, in the application we indicate that the police uncles verbally refused to accept the application, and that you did not remember the names and faces of those who refused.
Since, as you know, there is Article 30 of the Criminal Code of the Russian Federation, and such thefts cannot be carried out independently, then, taking into account part 4 of Article 158 of the Criminal Code of the Russian Federation, this is still a serious crime and falls under Article 30.
Also, according to your information, payment systems oblige banks to take a subscription from cashiers about the fact that “don’t get in I’ll kill you” precisely because of the sign of a crime, and access to confidential information.
If it is not entirely legally correct, then it does not matter - you are not a lawyer, I am not from the Russian Federation ... the main thing is to describe the essence, describe it in writing, and add a motivator in the form of the Prosecutor's Office.

Answer 2

1. I didn’t really understand what kind of notebook.
2. Any cashier has the right to withdraw a card with an erased cvc as damaged.
3. Over 90% of cardholders don't know that you can press the red button and sign. I'm talking about cashiers in general.

Answer 3

These are all flowers. I bought a wardrobe in Mozyr in a furniture shop. Paid by card. What was my admiration when the grandmother-cashier carefully copied all the data of my card, including CVC2, into a thick notebook, where she recorded all the passing cards. Are you afraid of some kind of pincode :)

Answer 4

Protect your cards according to the guide
pumainthailand.com/zashhishhaem-svoi-bankovskie-karty-i-kreditki/

Answer 5

I recommend not calling the bank's call center, but contacting them by soap. If the first attempt did not work, then you need to try again.
Well, the police may try to persuade you not to write a statement, but they cannot refuse to accept a statement. Attempted fraud on the idea, criminal.
But on the other hand, there really is no corpus delicti. The situation is about the same as in that joke - "judge for rape, there is a device." Surely some rules of the IPU are violated, but hardly catastrophically.

Answer 6

You and specifically for the statement about the withdrawal of the card with the erased CVV by the cashier.

Read the rules of the IPU, unfortunately that's all I can say.

I even personally signed the authorization on just such a piece of paper (according to the scan).

I only signed the check. I was surprised by the lack of an imprinter, but nonetheless…

Answer 7

Nobody cares, not their money, probably you need to insure the account on the card, then it will be possible to incite the insurance =)

Answer 8

Can I ask questions not entirely related to the original? It's just that knowledgeable people here will surely get the answer that I want.
1. I have non-chip cards. When paying with them, the PIN-code should not always be requested ? Or does it depend on the terminal?
2. When a card is swiped with a magnetic strip, does the terminal recognize whether it is chipped or not? (I read the info that they swiped the card in a strip, and the terminal asked to insert a CHIP. I wonder if he asked to insert a CHIP on the machine (only accepts CHIPS) or recognized that the card was chipped and said, “Card with a CHIP, let's carry out the operation through it, because it's safer").
3. If a chipped card is swiped with a magnetic stripe and asked to enter a PIN, can I refuse to enter a PIN and sign a check?
4. If a chipped card is inserted by the CHIP and asked to enter a PIN, can I refuse to enter a PIN and sign a check?
Thanks in advance.

Answer 9

Try Rospotrebnadzor. Complaint through the site, and an official response by mail within 30 days.

Answer 10

By the way, about the signature. If there is a signature, then the responsibility for the operation lies with the client, you. If you enter a pin code, then the bank / outlet is responsible. Since here they must authorize the client, for example, look at the photo on the map, etc.

Answer 11

You do not think that the cashier copies the data in front of your eyes in order to steal it and go to jail. She was told to save everything so that some smart people do not slip a fake blank card or then cancel the payment. I suspect that the owners of the establishment simply do not trust this system with cards, maybe they have had cases of non-payment or chargebacks.
I understand them and don't trust cards either.
By the way, it’s better to complain about banks.ru, representatives of banks usually sit there.

Answer 12

I saw a lot of questions in the comments from those who answered, so it’s not quite on the topic of the topic starter, but it should help:
1. If the name card is without a signature, the merchant employee must ask the client for identification documents, ask the client to sign on the card.
2. Do not accept a card for payment from a man if a woman's name is embossed (applied) on the card, and vice versa.
3. In no case should you split the purchase amount on the card into several transactions in order to avoid the verification procedure or entering a PIN code.
4. Do not allow the selection of the amount , if the client during the transaction, the terminal issued a refusal code 51 ( not enough funds ).
5. If the client commitsmore than one purchase in one day (the terminal displays “Repeat transaction” on the screen), the merchant employee is obliged to ask the client for identification documents . If there are no documents, carry out the verification procedure.
The verification procedure, if I'm not mistaken, is a call to the bank's security service.
Also, if your card is added to the STOP list of the payment system (not just blocked, but added to the STOP list), the cashier at the terminal receives a message "withdraw" and is obliged to do this.

Answer 13

At a minimum, it is forbidden to store the card number, expiration date, or track* anywhere on the terminal.
For such violations, you can contact their acquirer bank. If it is idle, then in VISA.

Answer 14

it is normal practice to disable Internet acquiring for cards that you carry with you.

A strange move, but I thought that it was necessary to connect 3DSecure. And if suddenly a non-3DS payment passes through some left gateway, there will be no problems at all to protest it.

Answer 15

In the contract, of course, there is nothing of the kind and never will be. But this does not mean that the bank will send you to the forest. And what's more, it doesn't mean that the bank will want litigation. I suggest not to be paranoid and not to think too much for yourself. Otherwise, you can put on a condom right in the morning, and then suddenly something ...
But, excuse me, I don’t pretend to be unique and true.

Answer 16

In general, I think that this is Article 159.3. Payment card fraud is an attempted fraud.
The Criminal Code of the Russian Federation recognizes as an attempt to commit a crime intentional actions (inaction) of a person directly aimed at committing a crime, if the crime was not brought to an end due to circumstances beyond the control of this person (part 3 of article 30 of the Criminal Code).
Therefore, as mentioned above, I advise you to re-write a statement to the police + a complaint for inaction against police officers - to the Prosecutor's Office
Well, write that you qualify these actions as attempted fraud.

Answer 17

Contact the administrator of the establishment, dumps are usually taken by waiters without the knowledge of the authorities and after a few weeks they immediately quit