30

I got a new credit card today (replacing the old one which was worn out) and I noticed something new - all the numbers have now moved to the back of the card, leaving the front empty. Apparently it's been trending for a while now, and I do agree that it looks nice. However I had always believed that there was also a security aspect to the old design - having the card number and CCV on opposite sides of the card meant that you cannot glean all the sensitive information from a single opportune photograph.

Was I wrong or have there been some new developments in the industry that make this kind of protection unnecessary? Or maybe it was decided that it's never been a significant risk?

Vilx-
  • 1,157
  • 1
  • 10
  • 16

5 Answers5

20

The numbers-on-the-front design was necessitated by offline credit card processing, in which the card was put on to a device that imprinted the card on to a piece of carbon paper for later processing. This is the reason why the numbers were embossed/raised from the rest of the card. See the below image for an example.

Credit Card Imprinter

-- Image source: Wikipedia --

Since "nobody" uses this method of card capture for transactions any more, there's no need to have the embossed numbers on the front of the card. This definitely simplifies the design of the card. Aside from that, keep in mind that online transactions typically have a number of layers of security implemented by vendors and banks that may include confirming the Postal Code of the billing address, two-factor authentication for unusual transactions, manual flag and review by fraud detection agents, etc. Just because someone gets a snap of the back of your card doesn't mean they can necessarily use it for long.

In person purchases require either NFC or chip transactions. The more prominent concern regarding the newer cards are not gaining the numbers on the card, but using a NFC reader to capture the NFC data, which can then be used with a relatively inexpensive device, such as cards designed to mimic multiple physical cards at once. That said, I believe the newest batch of cards use a challenge-response system, so NFC capture isn't as big of a deal as it used to be.

Overall, the position of the numbers on the card doesn't matter. There are plenty more security features that most people don't even realize are in play when they use these chip cards. And, of course, virtually every Visa and Mastercard you'll be offered have a zero-liability fraud guarantee. If someone somehow successfully "steals" your card, you can get that money back (though, in practice, it usually takes 1-2 months, so it's a major pain for the paycheck-to-paycheck people out there).

phyrfox
  • 1
  • 4
  • 8
12

The numbers on the back mean that the numbers are hidden when the card is in the chip reader. Since the card can be in the reader for anywhere between seconds and minutes, the numbers are well hidden. Now even when the numbers are on the front of the card part of the 16 digit number is hidden by the reader, but the last four+ digists might be exposed.

So putting all the numbers on the back helps.

mhoran_psprep
  • 148,961
  • 16
  • 203
  • 418
6

Printing on the back is cheaper, and more and more transactions happen by NFC - touching the card to the terminal or holding it near it, or using your phone; in all those cases, you can hold the card so nothing is visible to anyone.

Aganju
  • 38,107
  • 8
  • 59
  • 121
4

Overall, this change slightly increases security.

Sadly, it's still pretty common for some merchants to not even validate anything beyond just the CC number and expiration date, and because of this it's better to not have anything showing on top of the card, which was still pretty standard until a few years ago.

The biggest change here is when the card is in your possession, make a conscious effort to keep it face up so passersby can't snap a picture of it. When it's not in your control, this doesn't really reduce security much because if someone is trying to steal your CC info, having to snap two pictures instead of one probably isn't enough to deter them.

Side Note: I used to work as a cashier in 1990 and we used a carbon copy device like the one shown in phyrfox's answer. If it wasn't a customer I recognized I was instructed to ask to see their driver's license, and I would have to write down that number along with their phone number in case the card was declined, which we wouldn't find out about until that evening.

TTT
  • 47,380
  • 7
  • 101
  • 152
2

There have been issues of people posting photos of their shiny new cards online (see https://twitter.com/needadebitcard) - particularly as some fintechs have very pretty cards, or are exclusive. Putting the numbers on the back makes it possible to have this bring in new users without being such a large security issue.

davidsheldon
  • 306
  • 1
  • 4