Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

3D secure payments in Europe have been a standard for years - being presented with additional verification steps for online purchases.

Attacker cannot know who you bank with. Plus, most of the time the confirmation screens are something like confirming 2nd/Xth characters of your password/date of birth.




I bank with Monzo and they send a push notification to my phone with an "Approve" button. No way to fake that.


> confirming 2nd/Xth characters

That is somehow significantly less reassuring than not having 3D Secure payments in the first place.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: