Dr. Jekyll and Mr. PayPass

by 11001001

From the Author

Forgive me for not including dates, this sat dormant for a while after I took the photographs.  I guess the dates aren't really all that important, anyway.  Usual disclaimers apply: I do not condone nor endorse the actions that I took in this article.  Do so at your own risk.  There is no intent to defame or libel Citizens Bank, just an intent to provide information.  All the events portrayed within are entirely factual in nature.  Names and pertinent numbers have been removed but, I promise, they used to be there.  Go Red Sox!

The Introduction

It was a random day I chose to go into the bank to deposit a check when I first saw the new sign.  "Coming Soon!" it read, "The New Citizens Bank Debit Card with PayPass!" ... "Ask for Details."

I spoke with the teller, and asked about the new debit cards.  She informed me that all Citizens debit cards would be replaced within the next few months, even if they were not set to expire (mine was).  I informed her that I was a little too familiar with RFID (Radio Frequency Identfication) technology to be comfortable with it, and asked if there was an option to get a card without PayPass.  She said no.

Two weeks later, my new PayPass equipped debit card arrived in the mail.

My active debit card would expire soon, so I had no choice but to activate the new one.

The Problem

A few days later, I went to a local convenience store that s7a11 remain anonymous...

As I handed over my Big Grab of Doritos and 20 oz. Diet Coke (the greatest lunch on the face of the Earth), I realized that I had just given all of my cash to Mrs. 11001001 to buy formula for little 11001010.  I swore under my breath as I moved my debit card toward the reader.  I heard a beep, saw a light flash, and the screen on the reader displayed "Approved."  The clerk handed me my receipt and my lunch as I stood there looking dumbfounded.  The reader had just read my PayPass, without my intending it to do so.  Hulk Angry!

The Discussion

I knew I somehow had to disable the RFID chip in the card.

First, I thought of good ol' wipey, my trusty electromagnet.  Then I smacked myself on the forehead, because I realized that if I wiped the card, I'd also lose the stripe.  Then my debit card would just be a really convenient ice scraper for those cold New England mornings...

I discussed my predicament with a programmer friend of mine.  He informed me that he had heard that microwaving things which contain RFID chips destroys said RFID chips.

I thought it over, but then decided that microwaving the debit card could only have two possible outcomes: One, it would work.  Two, I'd need to buy a new microwave.

I thanked him for his advise, and told him I'd like to explore other options before completely destroying my method of rapidly heating a Tina's fifty-cent burrito.

I got home and stared at the stupid thing, mulling over what to do about it.  Then, a glint of something caught my eye.

    

The chip!  That was it!  I decided that if I couldn't keep it from working, I'd just take it out.

The Plan

That part I said at the beginning about not trying this at home?  This is where that applies.

First, I borrowed my father's single-hole punch.  Then, I marked the front of the card with a Sharpie so that I knew where to do the punching.

Then, my wife called me crazy and paranoid, and mumbled something about our son "Not growing up to turn out like his..." as she left the room.

Next, I punched out the spot.  It took two punches, as the mark I'd made to cover the chip was oblong.

    

    

I sifted through what fell out, and it looked like I was successful!

The Test - Part 1

I returned to the 7-11 and picked up some Doritos and a Diet Coke.  I handed them over to the cashier, and got my total.  Then, as Also sprach Zarathustra played in my head, waved the card over the reader.

Nothing.

No beep, lights, or "Approved."

I took a deep breath and tried again.  Still no response from the reader.

Golden.

The clerk looked at me and commented, "Maybe it's broken."  I think my ear-to-ear grin confused him as I said, "Yep, I think it is."

I ran the card down through the skimmer.  "Please enter PIN or press cancel to process as Credit."  Booyah!  I entered my PIN and almost forgot my lunch on the counter as I left in a hurry to apprise my wife of the situation ("I told you so.")

The Test - Part 2

I could tell my wife was unimpressed as she shook her head.  "Does it work at the ATM?" she inquired.  I didn't know.  There was no reason for it not to.  The stripe still worked, after all.

"Well," she said.  "You'd better go try it.  Get forty dollars out, and we'll go out for dinner."

Off to the ATM.  It should be noted at this point in time that the ATM at the full branch office I went to was not the branch mentioned at the outset of this tale.  I parked the car out back and took the steps two-at-a-time.

The card opened the door without problem.  I inserted it into the machine and... the machine promptly spit it back out at me.

"Card Read Error.  Please Try Again."

Okay, I'll try again.  Same results.  Shoot...  Wait.  A new screen now on the ATM:

"This machine is closed for service.  Please find an alternate.  Thank you for your cooperation."

Was it only bad timing on my part?  I went to the ATM at the front of the bank.  I inserted my card.  Then nothing happened.  I hit "Cancel" and the ATM returned to the home screen.

"Insert Card to Begin."  I already did that.  "I am Jim's deflated ego," I hear in Edward Norton's voice in my head.

I went to the teller with my tail between my legs.  "The front ATM just ate my card," I said.  The teller directed me to the branch manager, who asked me for an ID card.  I handed over my license, and she told me that she'd be right back.  Indeed she was right back, now wearing a look of puzzlement on her face.

"How long has your card been like this?" she inquired.

"What, the hole?" I tried to play dumb to no avail.

"Yeah," she replied, unconvinced.

"Since yesterday," I concede.

"What happened?" she presses on.

I decide to come clean, "I know a little bit too much about the technology to trust it quite yet."

"Oh," she says with an amused grin.  Now the kicker - "Why didn't you just ask for a card without PayPass?"

I am quite convinced that if you brought up seismology records for the Greater Boston area, you'd find that a 2.3 tremor occurred precisely where and when my jaw hit the floor.

Although I never had prior to this occasion, I began to stutter, "B-b-but the t-t-t-teller at the [other] b-branch said that I d-d-d-didn't have a ch-choice."

"Oh, of course you have that option.  For various security reasons, we offer the new debit cards with or without PayPass.  If you didn't request a card without PayPass, it comes with it automatically," she was actually very understanding.  "I'll order you a new card without PayPass right now."

After completing the necessary paperwork to regain possession of my debit card, she said, "You know, you're the first person I've ever heard of doing something like this.  Too bad the ATM ate your card, huh?"

I grinned sheepishly and prepared myself for the onslaught ("I told you so") I'd receive when I got home.

The Aftermath

My new new debit card came in the mail a few days later.

Sure enough, it was PayPass free.  I still haven't activated it.  I like carrying around my little reminder of how I stuck it to "The Man."  Although it sure is a pain in the asterisk that I can never use an ATM...

The Further Reading
Return to $2600 Index