So from what I remember, the chip and the tap use pretty much the same authentication systems under the hood. They’re pretty identical in that way. The pin number and how that’s implemented is kind of a joke, because every card reader has ways to accept a payment from a card without even needing the pin (usually). Still better to use a pin of course, and that’s something the tap supports too.
Like I said before, right now a common threat to chip cards is spoof devices that criminals try to surreptitiously install onto legitimate card readers. Like a hardware keylogger basically. So - and as far as I know, this might not even be true anymore - the one main advantage the tap has over the chip is that it is not susceptible to these spoof reader devices.
My idea was that if someone gets my card, they’ll still need pin. Plus I disabled withdrawals by card. And after disabling NFC, it doesn’t even seem to show the card number + expiration that I could just scan with https://github.com/devnied/EMV-NFC-Paycard-Enrollment (the numbers show in older versions), which could be done by tapping my pocket. Online payments often need 3D Secure, though unfortunately, not always.
However, nowadays I start to encounter a lot of contactless only terminals, so I just started switching to cash. Vending machines still typically take coins.
So from what I remember, the chip and the tap use pretty much the same authentication systems under the hood. They’re pretty identical in that way. The pin number and how that’s implemented is kind of a joke, because every card reader has ways to accept a payment from a card without even needing the pin (usually). Still better to use a pin of course, and that’s something the tap supports too.
Like I said before, right now a common threat to chip cards is spoof devices that criminals try to surreptitiously install onto legitimate card readers. Like a hardware keylogger basically. So - and as far as I know, this might not even be true anymore - the one main advantage the tap has over the chip is that it is not susceptible to these spoof reader devices.
My idea was that if someone gets my card, they’ll still need pin. Plus I disabled withdrawals by card. And after disabling NFC, it doesn’t even seem to show the card number + expiration that I could just scan with https://github.com/devnied/EMV-NFC-Paycard-Enrollment (the numbers show in older versions), which could be done by tapping my pocket. Online payments often need 3D Secure, though unfortunately, not always.
However, nowadays I start to encounter a lot of contactless only terminals, so I just started switching to cash. Vending machines still typically take coins.