SBI and HDFC credit cards used fraudulently

[phoenix003]

I have 2 credit cards and both were used on flipkart but I didn't get any otp neither sms.What can be the reason?

 

[SSV]

I have 2 credit cards and both were used on flipkart but I didn't get any otp neither sms.What can be the reason?

So , you are saying you used both the cards successfully for Flipkart transactions without OTP.. right?? I haven’t heard this before.. let’s see if anyone had this experience

 

[Vasuki]

I have 2 credit cards and both were used on flipkart but I didn't get any otp neither sms.What can be the reason?

If any transaction happens without otp
There is 100 % chance of approval of charge back

But a domestic transaction happening without otp is next to impossible even if card details is saved & no cvv required

Even then otp comes

 

[Kushagra_]

So , you are saying you used both the cards successfully for Flipkart transactions without OTP.. right?? I haven’t heard this before.. let’s see if anyone had this experience

It's possible with hdfc if you have swipe to pay enabled 👀 it's stupid but there's a glitch in their system, one can basically call the transaction api with specific headers and say it was a swipe to pay transaction and it's approved no otp required but I'm unsure how it can be done for sbi

 

[AlgoTrader]

It's possible with hdfc if you have swipe to pay enabled 👀 it's stupid but there's a glitch in their system, one can basically call the transaction api with specific headers and say it was a swipe to pay transaction and it's approved no otp required but I'm unsure how it can be done for sbi

Now this is scary

 

[Kushagra_]

Now this is scary

Not that scary someone will have to test the specifics of it

When I was experimenting with it I could only do it with my own device and my own card and not some other cards but it feels like it should be possible with enough know how

 

[harsh_ujjwal]

It's scary.. Shall we keep our card saved on specific App??

 

[rrsji]

It's scary.. Shall we keep our card saved on specific App??

I don't belive any app other than samsung pay in that case

 

[AlgoTrader]

Not that scary someone will have to test the specifics of it

When I was experimenting with it I could only do it with my own device and my own card and not some other cards but it feels like it should be possible with enough know how

if common folks like this can go this far, what about pro hackers bro ? definitely scary

 

[Kushagra_]

if common folks like this can go this far, what about pro hackers bro ? definitely scary

I'm an engineer who codes for fun and a living so not just common but also not a problem hacker, that's the thing looking at it I feel someone with more knowledge could probably misuse it