How to spot a card-skimmer at an ATM or restaurant

[Nat Quinn]

How to spot a card-skimmer at an ATM or restaurant

 

 

South Africans should be aware of the constant threat that physical card transactions pose, including card skimming to steal bank card information.

According to the South African Banking Risk Information Centre (Sabric), victims of reported counterfeit credit card fraud lost R142 million in 2022, whereas losses from debit card fraud stood at R270 million.

Counterfeit card fraud, or card cloning, starts with stealing information from a bank card’s magnetic strip using a skimming machine.

This device can capture details, including the card number, cardholder’s name, and expiry date. This data is then used to illegally manufacture a card that can perform transactions using the genuine card’s details.

Skimming devices can also obtain the cardholder’s PIN by placing a fake keypad over the ATM’s keypad or installing a camera to record people entering their PIN.

Once an attacker has skimmed a card and stolen the information, they can use it in multiple ways.

The information can be used to make fake credit cards, sold online, or used to make fraudulent purchases online.

While this type of crime has declined in recent years, partly thanks to the rise in NFC-based contactless “tap-and-go” payments, it remains a big problem in South Africa.

Therefore, knowing how these devices are hidden to blend into an ATM remains important.

A visual and physical inspection can help to identify such devices when using an ATM.

One way to do so is to check the card reader’s alignment with the attached panel.

This can often reveal how a skimming device has been placed on top of the card reader to deceive ATM users. If it seems suspicious, compare it to a card reader at another ATM.

This is a before-and-after picture of removing a card skimmer. The image on the left shows the card skimmer in place. Credit: Northwest Community Credit Union.

The removed card skimmer.

It is also possible to skim a digital card in a process known as eSkimming or digital card skimming.

One example of this is a Magecart attack, where attackers will use a fake or infected website to harvest information from people’s payment cards.

The infected website is meant to resemble the target website, such as an online shop or booking platform.

Card skimming can also occur at a merchant’s point of payment using tampered devices.

Card fraud perpetrators often provide personnel working at retail outlets, such as waiters and cashiers, with handheld skimming devices.

The PIN is either stolen by peaking or using thermal technology when the victim enters it.

Regarding this type of skimming, the advice is that if you cannot insert your chip card and have your thumb remain fully on the card, do not enter your PIN.

Point of sale card skimming. The machine on the right leaves space for your thumb.

Sabric provided the following advice to avoid having your card skimmed.

SABRIC tips to prevent your card from being skimmed
Follow the instructions on the ATM screen carefully.
Be alert to your surroundings.
Do not use the ATM if loiterers or suspicious people are nearby.
Be aware that fraudsters are often well-dressed, well-spoken and respectable-looking individuals.
If you are disturbed while transacting at the ATM, your card may be skimmed by being removed and placed back into the ATM without your knowledge. Cancel the transaction immediately and report the incident using your Bank’s Stop Card Toll-Free number, which is displayed on all ATMs and on the back of your bank card. This can also be done on your mobile banking app.
After successfully transacting at the ATM, leave immediately. Be cautious of strangers who ask you to return to the ATM to finalise a transaction, as skimming may occur during this request.
Never force your card into the slot if you experience initial difficulty, as it might have been tampered with.
If your card is swallowed by an ATM, do not leave the ATM until you have cancelled it.
Know what your ATM looks like so that you can identify any foreign objects attached to it.
Do not ask anyone to assist you at the ATM, not even the security personnel guarding the ATM or a bank official. Go into the bank for assistance.
Do not insert your card if the screen layout is unfamiliar.
Whether you are at a restaurant, retail store, filling station or tollgate, ensure that you never lose sight of your card.
Check your balance regularly and report discrepancies to your bank immediately.

source:How to spot a card-skimmer at an ATM or restaurant (mybroadband.co.za)

[Author]

Posts