if you are a TD bank client with their credit card. you should seriously read this article. I am actually very suprised with TD rep reply !! TD Visa's claim that approving transactions after three wrong PIN entries is "standard protocol" isn't security—it's a catastrophic authentication bypass. The chip-and-PIN protocol exists for one purpose: fail securely. When a terminal clears, prints approval, and demands only a signature after three failed PIN attempts, it has surrendered cryptographic verification to friction reduction. This isn't a bug. It's a systemic design failure that turns PIN protection into theater. Any fraudster can now exhaust the PIN attempts and fall back to signature-only authorization—the weakest link in the chain. TD's response—escalating to "potential security breach" internally while publicly dismissing customer concerns as routine—exposes a priority mismatch: customer confidence over liability mitigation. Mark Sach-Anderson didn't discover a glitch; he reverse-engineered the truth behind what TD doesn't want verified. In a post-breach world where tap limits keep rising, treating PIN validation as optional is negligence dressed as convenience. The fix isn't harder protocols—it's admitting the terminal logic is broken. https://www.thestar.com/business/this-etobicoke-business-owner-typed-the-wrong-pin-three-times-video-shows-td-visa-still-okd-the-purchase/article_608cfb16-24fa-4b42-88a9-8bd8ae4a82e8.html
470 views
4 Comments
Le Corb@lecorb · 3d
I’m going to call TD tomorrow to confirm if this is true and see what they say…
Joe Dib@gidib · 3d
Mind blown. I guess they don't care. They just pass on a potential fraud through their insurance provider??
Kyle Garrett@kgcottawa · 3d
Yikes.
See the full comment section 👀Sign up for the full Blossom experience!
