Here's my opinion on Visa/MC not cancelling those stolen card numbers.
It cannot be proven that the card numbers are in anyone's possesion or that someone intends to use them maliciously/fraudulently.
The idea of cancelling several million credit cards is insane. That means several million credit card holders would be severly inconvienced. They have to wait a few days for a new card. They have to advise online/telephone banking of the new number. Any pre-authorized payments have to be advised of the new number. This is a huge headache for customers, which translates to a huge headache for the companies. Not to mention the manpower and cash required to cancel and reissue several million card numbers.
Each issuer is aware of their compromised cards, and each cardholder who's account was compromised was advised and offered the oppurtunity to cancel their cards. Many did. And those who didn't, their accounts are being heavily monitored. Any fraud will be tracked and traced. If the card was used online, Visa/MC would go so far as to obtain the IP address from the IPSP and subpoena the ISP in order to determine who had the CC# and how it was obtained, in hopes of catching the hacker.
As to why they don't give Epoch the list? Amongst other reasons, what if one of these cardholders legitimately wants to sign up for something processed by Epoch? They'll be scrubbed.
Also, the majority of stolen cards are not used to purchase online porn memberships.
One last thing to keep in mind: Millions of credit card numbers does not equal millions of active card numbers.
|