Murdoch, SJ; Becker, I; Abu-Salma, R; Anderson, R; Bohm, N; Hutchings, A; Sasse, MA; Murdoch, SJ; Becker, I; Abu-Salma, R; Anderson, R; Bohm, N; Hutchings, A; Sasse, MA; Stringhini, G; - view fewer (2016) Are Payment Card Contracts Unfair? In: Grossklags, J and Preneel, B, (eds.) International Conference on Financial Cryptography and Data Security FC 2016: Financial Cryptography and Data Security. (pp. pp. 600-608). Springer

Preview

Text banktandc-annotated.pdf - Accepted Version Available under License : See the attached licence file. Download (269kB) | Preview

Abstract

Fraud victims are often refused a refund by their bank on the grounds that they failed to comply with their bank’s terms and conditions about PIN safety. We, therefore, conducted a survey of how many PINs people have, and how they manage them. We found that while only a third of PINs are ever changed, almost half of bank customers write at least one PIN down. We also found bank conditions that are too vague to test, or even contradictory on whether PINs could be shared across cards. Yet, some rather hazardous practices are not forbidden at all by many banks: of the 22.9% who re-use PINs across devices, half also use their bank PINs on their mobile phones. We conclude that many bank contracts fail a simple test of reasonableness, and that ‘strong authentication’, as required by PSD II, should include usability testing.

Download activity - last month

Export as XMLCSVJSON

Download activity - last 12 months

Export as XMLCSVJSON

Downloads by country - last 12 months

Export as CSVXMLJSON

Archive Staff Only

View Item