Harry Sintonen on Nostr: Credits and debit cards issued in Finland have two checksums instead of just one. The ...
Credits and debit cards issued in Finland have two checksums instead of just one. The outer checksum is the standard luhn-mod-10 as usual, but the inner checksum is another method (variation of IBM Check with 7 1 3 multipliers). So why is this interesting?
The two checksums make it far easier to resolve partial card numbers. For example if you take a picture of your card by hiding 3 digits with you finger, such masked card number can be resolved to about 12 possibilities.
TL;DR: Never post pictures of your Finnish debit/credit card, even when hiding some of the digits.
I have no knowledge if cards elsewhere might have similar double-checksum feature.
Published at
2026-06-05 09:44:37 UTCEvent JSON
{
"id": "e7d9bb31ebe8017988604f82e16a720eab3abb407c9e5cbaa753bd7c7a5573ac",
"pubkey": "029bf35c63e8b20564400c0ab35fe3f14bc6c64ff6e3ba1c115271bd053b7e8c",
"created_at": 1780652677,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/harrysintonen/statuses/116696853904071678",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Credits and debit cards issued in Finland have two checksums instead of just one. The outer checksum is the standard luhn-mod-10 as usual, but the inner checksum is another method (variation of IBM Check with 7 1 3 multipliers). So why is this interesting?\n\nThe two checksums make it far easier to resolve partial card numbers. For example if you take a picture of your card by hiding 3 digits with you finger, such masked card number can be resolved to about 12 possibilities.\n\nTL;DR: Never post pictures of your Finnish debit/credit card, even when hiding some of the digits.\n\nI have no knowledge if cards elsewhere might have similar double-checksum feature.",
"sig": "84a5f966944ab7367d3c5ec288fd4eee526bad6d4beb855c991dc0f9ce684bab465fcfe33201d63febe24e2acf3ab68885f273c8ffcd40136490980d71b19cc9"
}