Methods and systems using contactless card
It is desirable to implement security features that can prevent the unauthorized use of a customer's sensitive account information from an RFID sticker. The methods and systems described herein attempt to resolve the deficiencies with the conventional RFID stickers. In a more secure implementation, a financial institution allows a customer to activate or deactivate the account for use with the RFID sticker by submitting a request to the financial institution using internet banking, mobile banking, SMS texting, or other communications method.
1. A computer-implemented method for preventing processing of unauthorized transactions using an RFID mechanism, the method comprising:
receiving, by a computer of a financial institution, a first request from a customer to activate a credit account of the customer for use with the RFID mechanism, wherein the RFID mechanism is always in a state of transmitting data, and wherein the first request is submitted via a website of the financial institution, a text message to the financial institution, a mobile banking application of the financial institution, or a phone call to the financial institution;
after receiving the first request, activating, by a computer of the financial institution, the credit account of the customer allowing processing of at least one transaction subsequent to the first request that is made by the customer using the RFID mechanism;
after activating the credit card account of the customer, receiving, by a computer of the financial institution, a request from a merchant to authorize the at least one transaction that is made by the customer using the RFID mechanism by linking the use of the RFID mechanism to the credit account of the customer for at least one transaction subsequent to the first request;
transmitting, by a computer of the financial institution, an authorization for the at least one transaction to the merchant;
completing the at least one authorized transaction;
after completing the at least one authorized transaction, receiving, by a computer of the financial institution, a second request from the customer to deactivate the credit account of the customer from use of the RFID mechanism for any subsequent transactions made using the RFID mechanism after the second request,
wherein the second request is submitted via the website of the financial institution, a text message to the financial institution, the mobile banking application of the financial institution, or a phone call to the financial institution; and
after receiving the second request, deactivating, by a computer of the financial institution, the credit account of the customer by unlinking the use of the RFID mechanism to the credit account of the customer for any subsequent transactions made using the RFID mechanism after the second request, wherein the credit account of the customer remains available for use by the customer using any payment mechanism other than the RFID mechanism after deactivating the credit account of the customer.
2. The method according to claim 1 , wherein receiving the first request further comprises:
verifying an identity of the customer;
receiving a selection of a link by the customer activating the credit account; and
updating a record in a database of the financial institution that the credit account is in an active state.
3. The method according to claim 1 , further comprising:
determining whether the credit account is in an active state based on a record in a database of the financial institution;
authorizing the at least one transaction if the credit account is in an active state; and
declining the at least one transaction if the credit account is in a deactive state.
4. The method according to claim 1 , wherein the website used to submit the first request is an online banking website of the financial institution.
5. The method according to claim 1 , wherein the first request is received from a mobile device of the customer.
6. The method according to claim 1 , wherein the first request is submitted via the text message to the financial institution, the method further comprising:
receiving the text message from a mobile phone number registered with the financial institution for the customer, wherein the text message comprises an instruction to activate the credit account.
7. The method according to claim 1 , wherein receiving the second request further comprises:
verifying an identity of the customer;
receiving a selection of a link by the customer deactivating the credit account; and
updating a record in a database of the financial institution that the credit account is in a deactive state.
8. The method according to claim 1 , wherein the second request is submitted via the text message to the financial institution, the method further comprising:
receiving the text message from a mobile phone number registered with the financial institution for the customer, wherein the text message comprises an instruction to deactivate the credit account.
9. The method according to claim 1 , wherein the authorization further comprises determining whether a transaction amount exceeds a predetermined threshold, and whether the credit account is in an active state or in a deactive state.