Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Keyed Scam Scheme and Stolen Credit Card Numbers

A keyed-in credit card scam involves criminals manually entering stolen credit card numbers, expiration dates, and security codes (CVV) into a point-of-sale (POS) terminal or online payment system, rather than using the physical card itself. While often used for online "card-not-present" fraud, this can also occur at physical stores where fraudsters bypass the need for a working chip or magnetic stripe.

Keyed Schemes

  • The Method: Fraudsters obtain card data via phishing, data breaches, or physical skimming, then manually enter this information into a payment terminal.
  • "Card-Present" Fraud: Even if a thief has only the card numbers, they may use them at a store, posing as a "card present" transaction by keying it in, which increases the risk of fraud, note TD Bank and Tidal Commerce.
  • Risks & Costs: Keyed transactions usually have higher processing fees and are more susceptible to chargebacks.
  • NFC "Ghost Tapping": A modern variation involves "ghost tapping," where thieves use hidden, high-frequency devices to steal card data wirelessly in crowded areas, report YouTube and YouTube.

Protect Yourself

  • Inspect Terminals: Before using an ATM or gas pump, look for loose, crooked, or damaged card readers, advise Facebook and the Federal Bureau of Investigation (.gov).
  • Use Chip/Tap: Always prefer using the EMV chip or contactless "tap" over sliding your card, says Feedzai.
  • Monitor Accounts: Regularly review bank statements for unfamiliar charges.
  • Use Digital Wallets: Using Apple Pay or Google Pay creates a unique, one-time code for transactions, making it much harder to steal data compared to physical cards.

If you suspect you are a victim, contact your financial institution immediately to freeze your card, advise the Office of the Comptroller of the Currency and Experian.

waiting