This report on EMV credit card is great. TL;DR all the credit cards are still being stolen, even now that we have chip cards. Some of this is due to e-commerce fraud, but tons is still coming from card-present transactions. geminiadvisory.io/card-fraud-on-…
There are parts of this that make EMV look bonkers terrible and/or just don’t make sense. Like this paragraph about “shimming” cards. 
So first off, *why* are cards sending track data from the chip, such that the same data can be printed to a mag stripe and used for payments? That’s nuts! What idiot thought that was a good idea?
Second, why do shimmers only work when the payment card issuer ignores the dynamic CV2? I cannot figure out what’s going on there and I really want to know.
