You have probably heard of skimming, where an identity thief
uses a device attached to an ATM or gas pump to collect your credit or debit
card account information. The ID thief attaches a reader that looks like it
fits in with the ATM or gas pump. The reader collects the information from users
of the ATM/gas pump, then the ID thief discretely comes by to collect that
information for his/her own use or to sell to others.
Recent information has come out that at least gas pump
manufacturers are trying to respond to the threat of skimming. According to the
San Antonio Police Department, so far this year they have found more than 100
skimming devices in area fuel pumps. While that is more than the total found in
2017, they noted to the security blog Krebs on Security that more of the skimmers
were found in older pumps that have vertical card readers and flat, membrane-based
keypads. The police department did not find skimmers on newer pumps that have horizontal
card readers and raised metallic keypads. The newer pumps also have other
security features that make it difficult for an unauthorized person to gain
access to the pump.
Skimmers rarely have an obvious sign that they have been
attached to an ATM or gas pump. At gas pumps, look for newer pumps with the
horizontal card readers and the raised metallic keypads. Also, check the reader
and other areas of the pump, or ATM, for loose parts, indicating that someone
has added unauthorized equipment.
ID thieves have found a way to get around the new chip
bankcards, sort of. The idea of the chip is to make the information that is
transacted between the vendor and the financial institution more secure. ID
thieves have found a way to insert a paper thin “shim” into POS card readers
that you might find at a fast food restaurant or a grocery store. The shim can
read the information on the magnetic tape portion of the card. While the shim
can read the tape, it still cannot read the information from the chip. The
difference is that the ID thief can collect your account information for use in
online transactions but cannot create a counterfeit card that will work with a
pin reader.
Like skimmers, a shim is extremely difficult to detect
visually. After all, the shim is inserted into the slot where you slide you
card. Security experts do point out that sometimes POS terminals with shims may
have some resistance when you insert your card. So, look for that resistance
when you insert your card.
And if you suspect that an ATM, gas pump, or POS card reader
has a skimmer or shim, contact the vendor.
For more about skimmers and shimmers, check out the following
links,
Skimmers-
Krebs on Security:
Freeport, TX Police Department:
https://www.facebook.com/jesus.diaz.16503/videos/2295301470487851/UzpfSTE4ODk4NzA1NDc5MDUxNDU6MjU3ODA3MTMyMjQxODM5NA/
Shimmers-
KIRO TV:
Krebs on Security:
CreditCards.com:
No comments:
Post a Comment