Introduction
Skimming is a type of man-in-the-middle attack in which data on the magnetic stripe or chip of a credit or debit card is read and copied when the card is inserted into an ATM. There are many ways that ATMs can be manipulated to commit skimming scams. One method is to install an additional reader directly on the card reader or even on the door openers of bank branches, as a card is often required to access the ATM section. Hidden cameras are usually installed in the plastic strips above the ATM keypad so that the PIN is visible when the owner enters it. These cameras are often well hidden, making them difficult to detect even by the most careful ATM user. Fake keypads are also often used to record the PIN as it is entered. There are even methods that use thermal imaging cameras to find PINs.
Skimming can also be done when exchanging currency, paying at a gas station, or making purchases in stores. In these cases, a card is read by a second counterfeit device without the owner’s knowledge. Once the card information has been stolen, it is transferred to a blank card, also known as a “white card.” Criminals can then withdraw money and pay with this card and a duplicate PIN. The reason skimming is possible is because the magnetic stripe data is freely available and is not protected by the card itself, as is the case with modern chip cards.
How can you protect yourself from skimming?
Most banks check their ATMs to make sure they haven't been tampered with. They are often equipped with anti-skimming modules, which are special technologies that are integrated into ATMs to detect and prevent skimming attempts. Here are some ways these modules work:
- Preventing data reading: Some modules continuously emit interference signals that prevent a skimming device from reading data from the card's magnetic stripe.
- Physical barriers: Some anti-skimming modules prevent skimming devices from connecting to the card reader.
- Sensors and Monitoring: Advanced modules use sensors and cameras to detect unusual activity or anything suspicious connected to the ATM. If something is detected, the compromised device can even shut itself down.
- Magnetic field analysis: Some anti-skimming systems work with induction coils that measure the magnetic field in the card slot area, allowing them to detect changes made by skimming devices.
It is important to always be vigilant and take various preventive measures to prevent your card information from being stolen:
- Hide PIN: Cover the keyboard with your hand when entering the PIN.
- Be careful: Be on the lookout for anything suspicious at the ATM or payment terminal, for example, a blank or oversized card slot or other strange attachments.
- Check your account regularly: Check your account statements often and notify your bank immediately if you notice any unexplained withdrawals or transactions.
- Update your card: If possible, use an EMV chip card, as they are more difficult to copy than magnetic stripe cards.
- Contactless payments: Use contactless cards or mobile payment apps like Google Pay to reduce the risk of falling victim to fraud.
- Avoid public Wi-Fi: Be careful when using public Wi-Fi, as it may be used by criminals to access your card details.
How do you know if you've fallen victim to skimming scams?
Sometimes it can be difficult to know if you have been affected by skimming, however, there are signs you can look out for. You should check your bank statements regularly. Unknown and unexplained withdrawals are a sign of skimming or that someone has accessed your account without your permission. Additionally, if there have been online purchases made that you know nothing about, this may indicate that you have been a victim of skimming.
What should you do if skimming happens to you?
If you suspect you're a victim of skimming, you need to act quickly. Unusual activity is often automatically detected by banks' security systems, but if you notice suspicious activity that you think the system didn't pick up, you should notify your bank immediately. This can help minimize financial damage and increase the likelihood that everything will be resolved. In addition, you should also take the following steps:
- Block your card: This is the first and most important step. Immediately contact your bank or credit card company to block your card. Most banks offer a 24-hour hotline for this purpose.
- Press charges: Report credit card fraud to the police. This will help prosecuting authorities identify the perpetrators and can help you get legal protection.
- Change your passwords: If you suspect that other personal information has been stolen, you should immediately change important passwords, especially those you use for online banking. Using a one-time password (OTP) is a good idea for better protection.
- Take preventative measures: Consider how you can prevent future skimming attempts. This could mean using contactless payment methods, regularly checking ATMs before using them, or setting up transaction alerts.
Result
Even if the incident is resolved, you should remain vigilant. Skimming scams, along with phishing and other types of online fraud, are just one of many. Being extra vigilant can protect you from losing money in the future.
