US Secret Service memo warns that card thieves are avoiding detection while carrying multiple counterfeit cards by relying on the Fuze smart card
Brian Krebs / Krebs on Security :
Context & Ripple Effects
The Fuze memo lands mid-arc in a running debate over whether EMV actually killed counterfeit card fraud. Visa had credited chip adoption with cutting counterfeit losses up to 18% for some large merchants (Visa's EMV fraud-reduction claims), but Black Hat demos had already shown chip cards are not impervious, and researchers later documented ways to sidestep the security features of certain banks' chip cards entirely (chip-security sidestep research).
What the Secret Service memo adds is a distribution-layer twist: rather than defeating the chip itself, thieves are using the Fuze smart card to carry many counterfeit cards behind a single piece of plastic, so the point-of-sale signals issuers rely on — one customer, one card — stop meaning anything. It is also consistent with the agency's pattern of using internal memos, reported via Krebs, to flag emerging fraud tooling, as it did earlier on the ring targeting state unemployment programs (unemployment-insurance fraud memo)
First-order effects
- Issuers and merchants lose a core detection heuristic: a shopper presenting several distinct card numbers in one visit now looks like an ordinary single-card transaction, so counterfeit cards tied to the Fuze device pass screens built around physical card presentation.
- Cardholders whose data ends up on Fuze-loaded counterfeits face fraudulent charges that are harder for bank fraud teams to correlate and shut down quickly.
Second-order effects
- Banks under pressure from Fuze-style devices will lean harder on non-physical signals — behavioral patterns, velocity checks, dynamic authentication data — because the physical card can no longer be trusted as a one-person identifier.
- Payment networks and terminal vendors face demand for verification methods that do not assume the presented plastic is what it claims to be, pushing upgrades at the point of sale.
Third-order effects
- If multi-card carrier hardware spreads, the industry's structural answer is to make the physical card matter less — tokenized, cryptographically dynamic credentials — accelerating the shift away from static card data as the root of trust.
- Fraud-fighting consolidates around whoever controls transaction-level intelligence: issuers and networks with rich behavioral data gain an edge over merchants still screening on card-present cues, widening the gap between sophisticated and smaller acquirers.
The trend: Card-present fraud is evolving from cloning individual cards toward hardware and techniques that defeat the assumption that one physical card equals one customer, forcing detection to move off the plastic itself.