ATM skimming / ATM clonning : Growing threat in India

\
In less than a week, 200 Bengalureans have lost more than Rs 10 lakh due to illegal withdrawals from ATMs. Police suspect that gangs have placed advanced card skimmers, which can read debit and credit card data during usage, with pinhole cameras in ATMs across the city to copy card data and capture PINs. (source:TOI)

ATM skimming is like identity theft for debit cards: Thieves use hidden electronics to steal the personal information stored on your card and record your PIN number to access all that hard-earned cash in your account. That's why skimming takes two separate components to work. The first part is the skimmer itself, a card reader placed over the ATM's real card slot. When you slide your card into the ATM, you're unwittingly sliding it through the counterfeit reader, which scans and stores all the information on the magnetic strip.

However, to gain full access to your bank account on an ATM, the thieves still need your PIN number. That's where cameras come in -- hidden on or near the ATMs, tiny spy cameras are positioned to get a clear view of the keypad and record all the ATM's PIN action. Always pay attention to objects mounted on the ATM or located close by. A pinhole or off-color piece of plastic could give away the camera's hiding place. Cameras could even be hidden in brochure racks.

Some ATM skimming schemes employ “fake keypads” in lieu of cameras to capture PIN numbers. Just like the card skimmers fit over the ATM's true card slot, skimming keypads are designed to mimic the keypad's design and fit over it like a glove. If you notice that the keypad on your ATM seems to protrude oddly from the surface around it, or if you spy an odd color change between the pad and the rest of the ATM, it could be a fake.Unfortunately, there are even more ways for thieves to access your bank account via an ATM --and some of them don't even require skimming.
   
If hackers or skimmers gain access to the information stored on your debit card's magnetic strip, they may be able to make purchases without bothering to discover your PIN. ATM withdrawals require the PIN number, but online retailers don't need it -- and some of them don't ask for the debit/credit card security codes, either. Skimmers who successfully obtain both your PIN number and debit information will transfer your data to a blank debit gift card, then use it at an ATM to make withdrawals.

Comments