How to Survive a Credit Card Hack

Shutterstock/David Evison
A series of recent high-profile hacks –- from Target (TGT) to eBay (EBAY) to Kickstarter –- have reinforced the fear that personal financial information is rarely safe. A newly released report from Verizon (VZ) found that many businesses fail to meet compliance standards or fail to properly maintain their compliance.

Simply, data breaches will continue.

For consumers trying to keep their credit card data safe, basic precautions are no longer enough. Hacking software is getting more sophisticated -- and easier to obtain, making a credit card breach a matter of when, not if. But with vigilance and speed, the damage from a breach can be mitigated, making the effects nearly non-existent.

Card or Card Number?

If there's any silver lining to the massive security breaches like the ones at Target or TJX Cos. (TJX), it's this: When credit card numbers -- rather than the cards themselves -- are stolen, the cardholders aren't responsible for charges. If the card itself is reported stolen before the account is used, the same is true. However, if the loss of the physical card is reported after additional charges have been made, the cardholder is responsible for up to $50 a card.

Visa (V) takes it one step further. Customers are fully covered if their card information is used to commit fraud and won't be held liable for unauthorized purchases made using a Visa card, whether the transaction occurs online or off, Visa says.

Same goes for American Express (AXP). According to spokeswoman Amelia Woltering, "If we discover activity on an account that we believe is suspicious, we will contact the card member. If a fraudulent charge is detected, in many cases we'll issue a temporary refund [while it's being investigated]."

MasterCard (MA) has a similar "zero-liability" policy. Customers only pay for authorized transactions.
The company says: "As long as your account is in good standing, you have exercised reasonable care in safeguarding your card, and you have not reported two or more unauthorized events in the past 12 months, unauthorized purchases are not your responsibility."

Discover (DFS) also offers zero-liability and monitoring of all Discover card purchases.

In theory, the same holds true for debit cards. If a card is reported lost or stolen before any additional charges are made, the cardholder isn't responsible for any of the charges. If it's reported within two days, liability tops out at $50 and $500 if the loss is reported two to 60 days after the theft of the card. If the number, rather than the card, is stolen, the cardholder isn't responsible for the charges as long as the loss is reported within 60 days.

However, with debit cards, recouping any lost cash or emptied accounts can be difficult and time-consuming, and have far-reaching consequences when the rent is due and the bank account is empty.

But the hack itself may just be the beginning. Once the credit card information has been obtained, the thieves can contact cardholders posing as representatives of their bank's fraud department to gather more information.

Old Protections No Longer Apply

The Federal Trade Commission offers advice for protecting personal credit information and the FBI offers tips for keeping online retail transactions safe.

The same technologies that help enable credit card theft can help thwart it, says Steve Weisman, author of "50 Ways to Protect Your Identity in a Digital Age." He points to email and text alerts and real-time transaction updates as means of tracking potentially fraudulent transactions.

He also recommends not storing credit card information in online retail accounts, ensuring smartphones have a complex pass code and limiting information sharing on social media networks, which can be used to piece together passwords and security questions for bank accounts.

These tips are helpful for keeping credit card information safe while it's still in your possession, but there currently are no safeguards for inoculating against theft due to a retail hack -- except, of course, to use cash.

Increase your money and finance knowledge from home

Banking Services 101

Understand your bank's services, and how to get the most from them

View Course »

Understanding Credit Scores

Credit scores matter -- learn how to improve your score.

View Course »

Add a Comment

*0 / 3000 Character Maximum


Filter by:
john pezzullo

carry cash and a gun.

February 26 2014 at 5:19 AM Report abuse +1 rate up rate down Reply

I recently got hacked somehow on my card, but due to limits I put on my car for daily purchases and amount of transactions during a day, it was stopped. Just a little advice. Put limits on your own card and check your statement closely.

February 25 2014 at 1:38 PM Report abuse rate up rate down Reply

Why is it, Europe gets to use a smart card from the same credit card companies that won't provide it here in the U.S?

February 25 2014 at 12:42 PM Report abuse +1 rate up rate down Reply

Really, a report from Verizon ? Someone bought a cell phone and set up an account in my name, in a Verizon store. When I received the bill I contacted them to see how this happened, 3 months later a Police report, pages of scanned information sent to their 'fraud' department, way to many phone calls.....AND, no change !I just had over seas phone charges on my credit card ! Verizon does not know a thing about this topic and I am proof positive of that.

February 25 2014 at 11:44 AM Report abuse +3 rate up rate down Reply