The Diabolical Duplicate Debit Debacle

(CBS)  This column was written by Evan Schuman.

---

At the height of the last year's holiday shopping season, some 8,000 Macy's shoppers found themselves double-and triple-charged for various holiday purchases. The next month saw a similar situation (although a smaller scope) hit consumers shopping Best Buy and we have had scattered reports from other major retail chains. The only thing all incidents had in common? The victims were all using debit cards.

In all cases, the retailers thought initial debit card swipes didn't work and asked the customer to try again, sometimes twice more. And in both cases, the banks removed money from the consumer's bank account equivalent to two and three times the price of the product.

With the recession dragging on, many consumers are shifting credit purchases to debit cards, in an attempt to avoid high interest payments. And retailers, who pay much lower fees with debit and therefore make more profit when a customer debits, are only too happy to encourage the change. But as near the midpoint for 2009, there are some serious reasons consumers should think repeatedly (twice just won't cut it) about leaving their debit card in their wallets.

The most frightening part about debit card transactions today is that they subject consumers to a payment double whammy. First, there's a much greater chance of a glitch with a debit card than with a credit credit, although both payment sorts work just fine the overwhelming majority of the time. Secondly, when it does glitch, it can deliver dramatically more damage, potentially cleaning out a customer's bank account and causing them to unknowingly bounce checks to everyone they're trying to pay. Few retail glitches have the potential to get a loyal customer in trouble with the police, but debit card glitches have that distinction.

Much of this has little to do with technology and involves the very nature of the two payment methods. If there is a multiple charge with a credit card, it will often be detected and a credit can be issued. The consumer may never be aware of it until the bill arrives. If the error is still on the bill, the consumer can call and the bank can issue a temporary credit while checking it all out. For the consumer, little or no pain.

But a debit card goes directly into the bank account and takes out the money. By reducing the balance (or even wiping it all out), lots of legitimately written checks start to bounce. That's when the angry phonecalls can start. Few banks will temporarily give the customer money while the matter is being investigated.
How frightening is it that the transaction type that can inflict the most damage has the weakest safeguards? How weak, in fact, are those protections? Andy Orrock is a payment consultant who works with some of the largest retail chains and he details the huge number of points where a debit transaction has to visit, arguing that an error in any of those points can cause a double- or triple charge.

"Everything has to go perfectly on a PIN debit in order for it to work and all the actors have to do their job correctly, from the issuer to the acquirer and any stations in the middle," Orrock said. "You've got gateways and a regional debit processor. So, for a transaction to go from Best Buy, there were most probably four institutions involved, the acquirer, the acquirer's gateway, the regional debit network and the issuer. All the message exchanges have to happen properly."

From the consumer's perspective, what typically happens is that the shopper presents a debit card and it's swiped. The cashier will say that it seemed to not go through and will ask the customer to swipe the card again. If it still doesn't work, sometimes the cashier might for a third try.
Behind the scenes, that first swipe might have worked perfectly and the error code was itself an error. This is especially possible when there are a lot of transactions happening (think Macy's in late December) and the response from authorization systems is slowed down. When this happens, it's best to call your bank right away to check on what is being charged.

In the Macy's incident, the retailer initially said outside contractors were to blame. At least that was what Macy's CEO Terry Lundgren told me when I caught up with him at a tradeshow dinner party shortly after the incident. He put the blame squarely on one of the chain's outside payment processors. With a few days, though, Macy's stepped back from that and said it turned out to be a glitch with the chain's own software.

It's not clear how many customers were impacted by the Best Buy debit situation, but one Mississippi man provided documentation of a $300 microwave oven that was charged three times, wiping out his bank account and causing quite a few bounced checks and related problems. Best Buy has acknowledged "errors" that caused Jackson, MS, resident Myreon Williams' checking account to slip nearly $1,000 in the red, said Best Buy Spokesperson Jill Nezworski, but the retailer has been unwilling to provide specific details explaining why its payment system allowed the triple charges to take place.

When Williams' debit card was first swiped, the system said he'd exceeded his daily limit but the transaction was apparently approved anyway. The message, which was unrecognized by the cashier, seemed to be little more than an FYI note. One problem was that no receipt was printed, which is what prompted the cashier to conclude the mysterious message meant the transaction had been rejected. According to the customer's bank statement, that transaction was sufficiently accepted so that the bank account was debited.

Williams was then asked to re-enter his PIN and to re-swipe his card. The POS then spit out a piece of paper which the cashier kept, Williams said, and the cashier wouldn't let Williams see what it said. He said the cashier told him he needed to call for authorization. Apparently getting the authorization, the cashier asked Williams to swipe the card a third time, according to Williams, who said he was then given a receipt and allowed to leave with the microwave. The next day, Williams logged onto his online banking page and was shocked to see three charges from Best Buy for $299.59-the exact price of the microwave oven-plus a charge of $300 listed as "931240 POS PRE AUTH CREDIT CARD MERCHANT UNKNOWN US."



Orrock said he could envision several explanations for Williams' experience, and most of those explanations "have to do with error codes being properly translated." Perhaps the acquirer might have received a code from a system in the middle saying the transaction was taking too long and timed out. He said the message that Williams exceeded his daily limit, an unusual message for a POS to see, could have been caused by a mistranslation of the 'response code' as the message is passed back from institution to institution."

Banks have systems that are supposed to look for and prevent these exact duplicate charge problems, but those systems are only as effective as the data they are allowed to access. Many retailers do not check the exact product number, which creates an opportunity for multiple charges.

This is not to say that debit cards should be shunned. (But if you ever receive one of the new so-called contactless payment debit cards-the ones that you can waive instead of swipe, called PayPass by MasterCard and PayWave by Visa-take 'em back to the back for a nice old-fashioned card. Having a card that constantly beams my payment specs to whoever is walking by is not my idea of a secure financial future.) As I said before I interrupted myself, this is not to say that debit cards should be shunned. But if the store associate/cashier asks you to reswipe your debit, it might not be a bad idea to excuse yourself and call your bank first to see if the charge had indeed been accepted. No sense in letting a debit card turn you into an inadvertent debtor.

This column was written by Evan Schuman, the editor of StorefrontBacktalk.com, a site that tracks retail technology, e-Commerce and security issues. He can be reached by e-mail and on Twitter. The Retail Realities column appears every Friday.

---

By Evan Schuman
Special to CBSNews.com

[whitemale08]

I think the real agenda for this article is for everybody to choose 'credit' instead of 'debit' on their debit cards so the bank can fool around and purposely allow other transactions to 'bounce'.

And how in the hell can you 'bounce' a debit card?

Either the money is there or it's not.

I thought that was the purpose of the debit card over writing checks.

These banksters are scammers plain and simple and they Obama is bailing them out, which is crowding out the money we need to spend on health-care and job creation.

[ncrla]

To ajapierce: to paraphrase your comment that "They need to stop these stupid articles.', what needs to happen is that they need to stop stupid comments like yours.
Your conspiracy theory that "some credit card company paid someone to write an article to scare people into using their credit card instead of their debit card" makes you sound like you don't what you are talking about. And you don't.
The comment area is for different opinions and that's fine. But then, wonderful people like you clutter them up with totally unfounded opinions, despite what anyone else may have said about actual experiences. Do you have a medication problem?

[mgkonyx]

This happened to me recently at TJMaxx. It took nearly an act of Congress to get it resolved. Had I been able to use my debit card as a credit card (some chains do not allow the option of choosing credit or debit) to get the double charge cleared would have been a lot simpler and easier. Plus choosing using the card as a credit card enables all the policies that are put in place if the card's number is stolen and merchandise is bought through fraud. Using it as a debit card does not.

[caldwellptr]

I wish hotels would develop a uniform deposit policy. My company pays for my hotel room for business. But the hotel asks for an imprint of my debit or credit card for any incidentals. When I go upstairs and check my balance online I find that the hotel has charged $50 on my debit card. If I have a low balance and there are other checks or charges out there they will bounce. It would be more upfront if they would just say they require a $50 deposit, cash or charge. It can be a bummer, especially if the capture any balance with the deposit and then you can not go out and eat.

[horse3farm]

I never use my debit card as a "debit." Always use it as a credit. Same protections as any credit card. And the debit process DOES hold extra money, which the credit transaction does not. Most financial institutions want you to use the debit card, because they make money on those transactions...they do not on credit transactions.

[ajapierce]

That might be true for some banks, but a lot now resolve these issues a lot quicker. Besides look at it from this point, Credit Cards are also often double-triple charged. It takes just a long to get those reverse, but the difference is your paying the interest on the charge while it's getting resolved, that doesn't happen so much on Debit cards

"" Nah, an errant charge can take weeks to resolve itself. It usually takes you calling the merchant, then you call the bank. then the merchant has to call the bank. the merchant has to return the money, the money has to clear. Finally, you have to have proof that you were double charged. They don't just take your word for it. Debt cards frequently overcharge for dining purchases. You call the bank and they say that the computer does that because they want to cover themselves for unexpected tips. You then have to wait days checking frequently
to see if the charge actually was removed. Finally I called my bank to report that someone had cheated me on an ebay transaction and they were refusing to return my messages. The bank told me as I had authorized the transaction I had no recourse except to work with their customer service which I did and they finally got back to me and resolved it. I think there are some protections with debt cards but not many but still its my prefered card though ""

[mnbrant]

You can go to any major bank and get a Debit Card and they will refund your money instantly if you are double or triple charged
Posted by ajapierce at 6:05 AM : May 22, 2009
Nah, an errant charge can take weeks to resolve itself. It usually takes you calling the merchant, then you call the bank. then the merchant has to call the bank. the merchant has to return the money, the money has to clear. Finally, you have to have proof that you were double charged. They don't just take your word for it. Debt cards frequently overcharge for dining purchases. You call the bank and they say that the computer does that because they want to cover themselves for unexpected tips. You then have to wait days checking frequently
to see if the charge actually was removed. Finally I called my bank to report that someone had cheated me on an ebay transaction and they were refusing to return my messages. The bank told me as I had authorized the transaction I had no recourse except to work with their customer service which I did and they finally got back to me and resolved it. I think there are some protections with debt cards but not many but still its my prefered card though.

[cassie001]

This happened to me when an unauthorized debit was deducted from my checking account, throwing my account into a negative balance. When authorized debits and checks started coming through, I was charged over $30 for each occurrence. I went from having a balance of over $300 to a balance of -$496. This took over two weeks for my bank to resolve. I did not have access to my own money for this period. I was at my wit's end. I am so cautious about any debits or checks now. I pay cash as often as possible.

[eferrell2]

Who the heck buys a $300 microwave? Does it clean the house too?

[ajapierce]

They need to stop these stupid articles. The incident for something happening like this is just as high for Credit Cards and they are for Debit Cards.

The difference here is some credit card company paid someone to write an article to scare people into using their credit card instead of their debit card. You can go to any major bank and get a Debit Card and they will refund your money instantly if you are double or triple charged.

The fact that they say that people are being double and triple charged to begin it is nothing but nonsense, it might happen 1 time for every 1 million transacations, but that's the same with Credit Cards