Everyone can see your credit card details
summary
Mobile app payments route card data through many parties: a merchant app (Fasos), a wallet SDK (Freecharge), a web-based gateway (Vimmo/JustPay) and the bank (Axis), while device OEMs and keyboard apps can access screen input and SMS OTPs. A cited breach involves 3.2 million cards and ~1M PINs leaked from a payment processor. Common weaknesses are WebView-based SDKs, SMS OTP exposure and keyboard logging; mitigation includes Chrome Custom Tabs, isolated virtual cards or separate low‑balance accounts.
AI-written summary · about
chapters (5)
- 0:00Start
- 5:11The merchant app
- 6:14The payment SDK
- 8:23The card authentication system
- 20:16A few more perilous cases
related talks
15mMy Online Bank Card and Mobile Phone Were Stolen...
21mHow I Hacked Your Bank Account: A Detailed Look At UPI Security
23mPoint of Sale System Architecture and Security
37mFirst Contact - Vulnerabilities in Contactless Payments
23mAll Your Payment Tokens Are Mine: Vulnerabilities of Mobile Payment Systems
06mHuman-in-the-Loop for Secure Digital Wallets Transactions
47mCommon security pitfalls in payment apps
19mSamsung Pay: Tokenized Numbers Flaws and Issues