Usenix Cybersecurity Conference

Expired Visa cards can still pay, which makes the expiry date a label and not a control

Researchers relayed dead cards through a pair of phones. Whether the payment cleared came down to the issuing bank, not to the date printed on the plastic.