Hacker News new | ask | show | jobs
by rsync 408 days ago
"Any account in the world can be proven human by making a debit/credit card transaction from a card with a matching name."

A reminder: neither the Visa nor Mastercard payment networks have any ability to match, or authenticate, cardholder name.

We pretend that they do and we're used to merchants and operators (and web forms) insisting on exact matches of cardholder name ... but it's all a fiction.

As long as you get the digits - and the supporting number/zip portions - correct, the transaction will run with "Mickey Mouse" ... or even "A B" (initials).

This is in contrast to AMEX whose network does have cardholder name verification.

1 comments

Interesting, I didn't know about this. Do you know why web forms require the name as well then? Is it just to give some additional sense of security to the user or try to scare scammers? Do you have some resources explaining the inner workings more in detail?