Deep Insert skimmers: undetectable, disposable short-lived ATM skimmers


#1

[Read the post]


#2

AKA: Never use ATMs, it’s better to go inside a bank and get money or go to a grocery store or supermarket that does cashback. If you absolutely need to get money from an ATM your chances of it having a skimmer are lower if it’s inside a business but there’s still some risk.


#3

Simpler, have no money.


#4

some banks are supposedly working on Apple Pay capable ATMs


#5

Not to worry! My debit card has a CHIP!


#6

is it Erik Estrada?


#7

The chip, it does nothing!

But seriously, what was the point of the chip, again?


#8

Some ATMs have transparent covers where the card goes in. This is an inexpensive way to expose some/many skimmers.


#9

Small world! I also wear a transparent cover to expose my skimmer.


#10

I didn’t think this would work in Europe where it’s all chip and pin. Don’t you need actual contact with the chip? Or were they only skimming stupid Americans with mag stripes? (Boy am I glad to see that obsolete tech go!)


#11

Looking past the criminal aspect of this, the ingenuity at play here is simply amazing.


#12

You can thank the big banks and merchants (*cough Chase, Walmart *) for half-assing the EMV rollout in the US. What we have now is chip+signature and there are no immediate plans to implement chip+pin broadly.

Because of this (and other reasons) we will continue to have the lowly mag stripe on our cards for the foreseeable future.


#13

Yes, the signature. Medieval information security tech. Where’s my sealing wax and signet ring!


#14

That’s stupid. Though, we also still have mag stripes that are never used unless we go to the US. Plus chips. And PINs.


#15

I have never forgotten my signature, however. :confused:


#16

There is no way you can forget you PIN when you use it every day, most times several times per day. Actually that’s not true. It’s like muscle memory. Sometimes I struggle if I think about it too much.


#17

Supermarkets are not immune (this was discovered near me):
http://krebsonsecurity.com/2015/12/skimmers-found-at-some-calif-colo-safeways/

I suspect these are “inside jobs”. I really dislike shopping at Crapway. Their unions just prevented a competing supermarket from opening up in our town. At least we have a Trader Joes and a farmers market.


#18

I wonder if a few LEDs and a few light sensors inside could help with skimmers. There would be a profile with a card and without a card. Putting junk (i.e. skimmer) inside would change the profile that the sensors pick up. Problem would probably be the wide variety of card.


#19

And when they detect something weird, they could save pictures of the person fiddling with the machine in the “criminals” folder (since they take pictures of customers anyway).

It just depends on whether defending ATM machines from this attack costs more than refunding money to those that complain.


#20

Yeah, and Sprouts are such sweet guys, what with firing working who try to unionize and all.