Credit Card Skimming – How to Protect Yourself from Card Fraud

Fraudsters start the process by fixing a skimmer, a small and almost invisible device fixed over the original card reader. 

These skimmers are usually manufactured to look like a natural part of the original machine, and users are often unable to note the change.

• ATMs: A skimmer is placed above the card slot, and a hold of a fake keypad or a concealed camera is used to capture your PIN.
• Gas Stations and Retail Stores: Skimmers are installed on fuel pump card readers or at the point of sale terminals.

When you insert or swipe your card, the skimmer captures and copies the data that is encoded globally in magnetic stripes. This stripe contains essential details such as:

• Security code (in some cases)
• Cardholder’s name
• Card number
• Expiration date.

If a PIN is required for the transaction, fraudsters may use one of these methods to steal it:

• Hidden Cameras: Miniature cameras are located in anticipation of capturing your hand as you type your PIN.
• Fake Keypads: A blank keypad overlaid on the actual one records the keys you press on the actual keypad.

After the skimmer has captured card details, the fraudsters recover the data.

This can be done in several ways:

• Manually: They physically withdraw the skimming device to get into the stored information.
• Wirelessly: Bluetooth-enhanced Skimmers, together with other Wireless technologies, enable criminals to download data from a distance.

After obtaining your card data, fraudsters use it for unauthorized activities such as:

• Cloning Cards: Fraudulent credit cards are made for use in physical stores for purchases.
• Online Shopping: Involves making purchases that do not necessitate the physical use of the card by inputting the card details.
• Selling Data: The use of stolen information in the black market to sell to other criminals.

If you decide to use a card reader at an ATM, petrol station, or even in a shop, first look for signs of interference.

• Look for Loose or Bulging Components: A skimmer may make the card reader look loose or even abnormally thick.
• Inspect for Mismatched Colors: Compare the texture, color, or shape of the card slot and the neighborhood with those of the other slots or areas of the device.
• Check the Keypad: Make sure that it connects firmly and does not conceal any incorrect overlays, which will record your PIN.

EMV (Europay, MasterCard, and Visa) chip cards are much more secure than magnetic cards, making it very hard for fraudsters to swipe your data.

• Chip Cards: These cards come with Universal Integrated Circuit Cards that create a serial code for each transaction, which cannot be easily copied on the card or used to forge the data.
• Contactless Payments: Avoid using this card by swiping or inserting it, as it is likely to be skimmed. Instead, use the contactless option.

Skimmers use small cameras or fake keypads to capture your PIN as you key it in.

To protect yourself:

• Cover the Keypad: When entering a PIN at the ATM or during card transactions, keep your hand or fingers over the keypad to prevent cameras from capturing your PIN.
• Watch for Hidden Cameras: Search for any concealed cameras the size of a pinhole that is located close to the card reader or keypad.

Services such as Apple Pay, Google Pay, or Samsung Pay for mobile payments are far safer than sliding your card through the terminal because your data is tokenized and encrypted.

• Contactless Payments: Pay cashless by employing a smartphone or a smartwatch instead of physically using a card or swiping.
• Tokenization: Mobile wallets use card data that is as sensitive as magnetic strips, but instead of using the actual data for identifiers, they use codes that could be more helpful to fraudsters.

Some areas are more at risk of having counterfeits than others, and that is why the current findings suggest that some of the devices purchased in this field are most probably counterfeits.

Here’s how you can minimize risk:

• Use Bank-Owned ATMs: Customers should prefer ATMs located inside the banking premises, as most of them are monitored.
• Avoid Standalone Machines: Self-service banking terminals sited in dark or secluded places are most vulnerable to unlawful meddling.
• Look for Security Features: Choose UPTs equipped with security cameras and ATMs located in saturated, secured spaces.

Prevention is the best refrain, as they say, and the best way to prevent fraud is to detect it early.

• Monitor Transactions: Always remember to monitor your bank account and credit card statements to identify fraudulent transactions.
• Set Up Alerts: Most banking institutions send transaction alerts to users’ email or mobile devices. You need to sign up for alerts to be informed when your card is in use.

While skimming is often referred to as using physical devices, another aspect is online skimming, or “Magecart” attacks.

• Use Strong Security Software: It is highly recommended that you install effective, quality anti-virus and anti-malware software on your devices.
• Use Secure Websites: To protect yourself when ordering online, always check that your connection is encrypted (be sure https is included in the address, and there is a padlock sign).

If you think your card data is compromised, do not waste time; mitigate the consequences.

• Notify Your Bank or Card Issuer: Specifically, users should report any suspicious transactions and demand that the bank issue them a new card with a different number.
• Freeze Your Account: Most banks have a feature that enables you to block your card and stop future transactions from being processed.
• File a Police Report: In case of high fraud amounts or if your identity was compromised, also notify the law enforcement agency.

All Wi-Fi hotspots available to the public are usually unsecured, and hackers can easily compromise individuals’ credit card information.

• Avoid Online Transactions on Public Wi-Fi: When connected to public Wi-Fi, avoid browsing or typing information, especially passwords and accounts such as banking apps or shopping sites.
• Use a VPN: If you still must connect to a public Wi-Fi to process financial transactions, use a VPN connection.

Learn about today’s most common skimming strategies. Luckily, there is a way to differentiate a skimmer from a normal card reader by identifying what to look out for.

• Stay Updated: Daily monitor for new cases of skimming scams and the different ways in which fraud occurs.
• Learn from Others: You should also share tips with friends and family to ensure their safety.