Have you ever wondered why your savings are suddenly disappearing from your account? An inconspicuous shopping trip or ATM withdrawal can become the start of a nightmare. Skimming, a subtle and sophisticated technique for stealing payment card data, is gaining popularity among cybercriminals. In today’s article, you’ll discover how this perfidious practice works, what the signs are and what you can do to protect your finances.
Skimming – what is it?
Skimming is one of the most common and insidious methods of stealing payment card data and is becoming increasingly popular. It involves the unauthorised copying of information stored on the card’s magnetic strip using a special device called a skimmer.
Criminals install these small and often invisible tools on ATMs, payment terminals in shops, petrol stations and even restaurants. The skimmer as constructed to look like an integral part of the device, making it difficult to detect.
Types of skimming
Skimming is a real threat that can affect any of us, regardless of place or time. It only takes a moment of inattention to fall victim to this perfidious technique. This is why it is extremely important to be aware of this crime, to know the signs and to know how to defend against it. To this end, familiarise yourself with the specific types of skimming.
ATM skimming
This is a particularly dangerous form of this practice. Criminals install skimmers on ATMs, often in such a way that they are difficult to detect. These devices can be placed on the slot through which the card is inserted, on the keypad for entering the PIN, or even in the form of miniature cameras that record our movements.
When a customer uses the ATM, the skimmer copies the data from the card’s magnetic strip and additional devices like a false keypad record the PIN entered. This information is then passed on to criminals who can create duplicate cards and empty our bank accounts.
ATM skimming is particularly dangerous because users are usually not aware of the theft until they check their balance and notice the unauthorised transactions.
Ordinary skimming
This variety of crime is based on exactly the same method of operation. When an unsuspecting user makes a transaction, e.g. in a grocery shop, the skimmer mounted on the payment terminal records all the necessary data from the card – number, expiry date and CVV code. A simple shopping trip is enough for such sensitive information to be used against you.
Proximity skimming
Proximity skimming is a modern form of stealing information from payment cards equipped with contactless technology. Criminals use portable RFID readers that can capture card data without the need for physical contact with the device.
It is sufficient for the victim to approach the skimmer at a sufficient distance – for example in a crowd, in a shop or on public transport – and the criminal can easily scan the information stored on the card. This data can be used to carry out unauthorised contactless transactions, which usually do not require a PIN.
What is the risk of skimming?
Skimming is a serious fraud with severe legal consequences based on specific fraud and financial crime laws.
In addition to prison sentences, those caught skimming may be required to pay hefty fines and return stolen funds, as well as make good the damage caused.
How do you protect yourself from skimming?
To protect yourself from skimming and minimise the risk of becoming a victim, there are several effective precautions to take when using payment cards. Firstly, carefully check devices such as ATMs and payment terminals for suspicious elements. These include loose parts, strange keyboard caps or disturbing accessories on the card reader.
It’s also a good idea to use ATMs in well-lit and monitored areas and to keep track of your bank balance regularly. In addition, you should always protect your data, especially when entering your PIN. Cover the keypad with your hand or body to prevent possible criminals’ cameras from recording your code.
It is also advisable to use special cases that block RFID signals to prevent proximity skimmers from intercepting your card data. Also remember to change your online banking password regularly and avoid using public Wi-Fi networks when making online transactions. With awareness and appropriate precautions, we can minimise the risk of falling victim to skimming.
Have you been a victim of skimming? Find out what to do!
If you become a victim of skimming, immediate action is key. The first step should be to contact our bank or payment card provider to block it and report a suspected unauthorised transaction. The bank will be able to stop further operations on the account and investigate to verify which transactions are legitimate and which have been made by criminals.
You should also remember to file an official skimming report with the police or on the website of the relevant law enforcement authorities.
If you find yourself in a difficult situation due to skimming, consider using financial advisors to help you negotiate with your bank and develop a recovery plan. By acting quickly and consciously, we can minimise the impact of skimming and return to normality.
FAQ – Skimming
Find out the answers to the most frequently asked questions about skimming!
What is skimming?
Skimming is a technique for stealing payment card data by unauthorised copying of cards using specialised devices called skimmers.
What are the types of skimming?
Types of skimming include ATM skimming, ordinary skimming at payment terminals in shops and proximity skimming, where proximity card data is captured using portable RFID readers.
How do you recognise skimmers?
Skimmers can be recognised by strange elements on ATMs and payment terminals, such as loose parts, keyboard caps or miniature cameras.
How to avoid skimming?
To avoid skimming, ATMs and terminals should be thoroughly checked, well-lit and monitored areas should be used, bank balances should be regularly tracked, the keypad should be covered when entering the PIN and RFID signal blocking cases should be used.
Is skimming punishable?
Yes, skimming is severely punishable under the Criminal Code, where the unauthorised acquisition and use of data and counterfeiting of means of payment is punishable by up to five years’ imprisonment.