Credit card firms investigate fraud at Canadian airport kiosks
WestJet halts use of credit cards for airline check-in over fraud concerns
Computerworld - Low-cost Canadian airline WestJet Airlines Ltd. has temporarily stopped the practice of allowing customers to use credit cards as identification when checking into flights at self-service kiosks at all Canadian airports.
The move, which was announced yesterday, was prompted by fears of fraud related to the use of credit cards at self-service kiosks in Toronto's Pearson International Airport.
A spokeswoman for the Calgary, Alberta-based airline said today that Visa Inc. had recently informed WestJet about investigations related to the "potential possibility of fraud" stemming from the use of credit cards at Pearson's self-service check-in kiosks.
"You can still use passports, last names and confirmation numbers at the check-in kiosks, but not credit cards," the spokeswoman said. The airline will review its decision after it receives an all-clear from Visa, she added.
In an e-mailed statement, Visa said its Canadian operation is investigating "isolated reports of fraud that have a strong correlation with air travel" at a "particular" Canadian airport. The company said it is working with airport officials and the airlines to investigate the issue that it claimed "potentially involves all card brands."
In a similar statement, MasterCard Canada said that it was aware of "some fraud activity occurring" and was following its protocols for investigation, which include cooperating with law enforcement. A request for comment from American Express Co. was not immediately returned.
A story on Canada's Globe and Mail Web site said that Visa's initial investigation of the source of the fraud focused on the retailers and the parking system at Pearson. It was only more recently that the attention has turned to the kiosks as the source of the problem, The Globe and Mail said.
The 150 kiosks at Pearson are owned by the Greater Toronto Airports Authority (GTAA) and provide a way for passengers to communicate with airline companies, said Scott Armstrong, a GTAA spokesman. However, credit card information from self-service kiosks is not accessed or collected by the airport authority but rather by the "software providers and airlines" that use the information for identification purposes, he said.
"GTAA network security has been audited and has checked out as safe and secure," he added. He added that the GTAA is not in a position to speak about the investigation or what may have prompted it because Visa is leading the investigation.
Passengers may still check in at the kiosks by using frequent flier cards, reservations numbers or by entering their last name into the system.
Read more about Security in Computerworld's Security Topic Center.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into...
- Identity Governance: The Business Imperatives
- This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make... All Security White Papers
- Live Webcast
Playing Defense: Staying on Top of Your Disaster Recovery Game - When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing...
- Introduction to VMware vCenter Site Recovery Manager 5
- Traditional disaster recovery solutions are often too expensive, complex and unreliable to meet business requirements. As a result, IT departments are hesitant to...
- The Top Ten Secrets to Avoiding SAN Performance Problems
- Maintaining peak performance while simultaneously addressing the root cause of SAN errors is challenging. Learn the most common SAN problems and explore new...
- Deduplication Without Compromise
- Go inside Quantum's scalable, high-performance, multi-protocol new DXi deduplication appliances, designed to make backup much more effective. Discover how the new future-proof DXi6700...
- Director of Disk Products Discusses DXi6700
- Discover how the new DXi 6700 series of deduplication appliances provide investment protection and a future-proof feature set, all while delivering fast, scalable,...
- Playing Defense: Staying on Top of Your Disaster Recovery Game
- When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing... All Security Webcasts