[SCAM] Have You Been Skimmed?
The fastest-growing threat to financial networks is not malware, phishing, or denial-of-service attacks. It’s ATM “skimming,” the illegal capture of debit card data including PIN numbers by a “skimmer” device inserted into an ATM. Here's what you need to know...
How Does ATM Skimming Work?
The Secret Service estimated that skimmers stole over $1 billion in 2014. The number of ATMs compromised by skimming increased nearly sixfold from 2014 to 2015, according to the FICO Card Alert Service which monitors hundreds of thousands of ATMs for the nation’s banks.
Skimmer devices have improved dramatically in recent years. A modern skimmer may be little thicker than a debit card, and slips invisibly into the same slot into which you slide your card. Inside is a tiny computer, magnetic stripe reader, and storage device. When an unsuspecting victim uses the ATM, the skimmer reads the card’s critical data from the stripe.
Fortunately, consumers are rarely the ones who absorb skimming losses - directly, that is. Under the Electronic Funds Transfer Act (a 93-page PDF), consumers are generally not liable for funds stolen from their bank accounts via frauds such as skimming, as long as they report the losses within 60 days of their occurrence. Financial institutions take the hit directly -- but of course, they seek to recoup their losses from customers in other, legal ways.
Capturing card data is only part of the fraud formula; the thief also needs your PIN. So tiny cameras are usually installed unobtrusively near the ATM’s keypad to record the buttons you press. That’s why so many ATMs now have plastic shields around their keypads, and why ATMs urge you to cover the keypad with your hand while entering your PIN, even though no one is looking over your shoulder.
I've always used the "two finger method" for entering my PIN number at the ATM. Point two fingers at the keypad, but only press with one. This makes it impossible for anyone nearby to see what numbers you actually press.
How Are ATMs Protected?
Bank-owned ATMs are policed rigorously by the banks themselves. They send out inspectors to check ATMs for skimmers. But non-bank ATMs, such as the standalone machines found in mom-and-pop stores, are not so vigilantly policed. FICO reports that 60% of skimmer-compromised ATMs are non-bank machines. So you may want to avoid them to reduce your chance of being skimmed.
You should be especially careful when using non-bank ATM machines in tourist locations. Security researcher Brian Krebs wrote a fascinating article, Who’s Behind Bluetooth Skimming in Mexico? which details how ATMs in popular Mexican tourist destinations are being hacked. But the problem isn't limited to the withdrawal of cash at automated teller machines. Point of sale terminals at gas stations and other retail locations that aren't under constant surveillance can also be compromised. Any time you swipe your card, you should be wary.
So-called chipped cards are not invulnerable to skimming yet. Many U. S. merchants have not upgraded their card readers to use this enhanced security, so chipped cards still have the magnetic strips that skimmers can read. Banks can hardly wait for all card readers to be upgraded so that the magnetic strip can finally be eliminated. Many are offering merchants incentives and penalties to push them into this upgrade.
Telltale signs that an ATM may harbor a skimmer include a card slot housing that seems loose or wiggly; glue around the housing; and unusual difficulty inserting your card. If you stick to using just a few bank ATMs, anything unusual that appears in them will be more readily apparent to you.
Sixty Days or Six Hundred Dollars?
With skimming skyrocketing, your best defense is to monitor your bank accounts for unusual activity regularly, and report any unauthorized transactions well within the 60-day time limit. Even though the law protects you against losses due to fraud, you may find yourself out some serious money for a few days or weeks while your bank processes your fraud claim. The average amount of money lost per skimmed card is $600, according to FICO. That’s not chump change for most of us.
Have you or someone you know been skimmed by the scum that schemes to scam, as you withdraw funds from an ATM? Your thoughts on this topic are welcome. Post your comment or question below...
This article was posted by Bob Rankin on 29 Apr 2016
|For Fun: Buy Bob a Snickers.|
[RING!] Hybrid Phone Service Innovations
The Top Twenty
[COOL] YouTube 3D Offers Virtual Reality
Post your Comments, Questions or Suggestions
Free Tech Support -- Ask Bob Rankin
Subscribe to AskBobRankin Updates: Free Newsletter
Copyright © 2005
- Bob Rankin - All Rights Reserved
Article information: AskBobRankin -- [SCAM] Have You Been Skimmed? (Posted: 29 Apr 2016)
Copyright © 2005 - Bob Rankin - All Rights Reserved