Beware Of Zombie Credit Cards That Work After Expiration

https://hothardware.com/contentimages/NewsItem/71419/content/16x9_2133x1200_highres-pos-payment.jpg

Researchers from the University of Massachusetts Amherst have uncovered a critical security flaw in contactless payment processing that allows expired credit cards to be reanimated and used for fraudulent purchases.

Presented at the USENIX Security 2026 conference, the UMass researchers demonstrated how "zombie credit cards," or cards that have expired, can be used to complete point-of-sale (POS) transactions. Led by doctoral candidate Raja Hasnain Anwar and Assistant Professor Taqi Raza, the team managed to spoof store card readers into approving payments from cards that were no longer valid, even after replacement cards had already been issued to the original account holders.

Because financial institutions allow active credit card accounts to accept incoming refunds on expired cards, the team wondered whether the flow of funds could be reversed. Their investigation showed that the expiration date stored on a card's chip is used by POS terminals to verify validity, but that metadata...

Copyright of this story solely belongs to hothardware.com. To see the full text click HERE

Read more

https://images.wsj.net/im-47658087/social

Munich-based RobCo, which makes robotic arms and automation software, sells $40M of shares at a $1B valuation, up from ~$500M after raising $100M in January

Sponsor Posts Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens. Introducing Campus: The digital home for educational institutions — Every educational institution needs