Not long ago, we mentioned that enterprising thieves had come with a way to scam ATMs via the Holy Grail of scamming techniques: in the data processing phase, from the moment you enter your PIN to the bank network.
Now, according to a Daily Telegraph report, it seems that entering your PIN might be the first point of weakness. And holding your hand over your PIN number is little defence against this complicated scam.
The gangs, which have been tracked as far away as Romania, are now reportedly installing false keyboards to be attached to ATMs to complete the ultimate PIN scam.
In recent weeks, reports of ATMs being blown up across Sydney in daring raids have prompted a heightened state of vigilance amongst banking and security officials.
In the past, skimming had relied on a delicate mix of hidden cameras and skimming overlays; but without the PIN, none of it is particularly valuable to the thieves (and especially if you followed the banks' advice by covering your hand over the pin keyboard).
But by using a false keyboard, where PIN details are entered, thieves are able to access the unique PIN data via Bluetooth on their mobile phones. The thieves need not even be around to collect the skimming device. The data they need is instantly transmitted to the thieves the moment you enter your PIN.
The devices are according to the article are very hard to detect to the naked eye. According to the Daily Telegraph, over 40 ATMs have been found to carry skimming devices in the past six months. That's a worrying sign for an invisible threat.
Indeed, if you notice a strange withdrawal from a country in the far flung corners of the world - you might want to call your bank. As technology improves, the rate of skimming seems to be increasing and unfortunately there appears little we can do except to remain vigilant.
The false keyboard trick has already surfaced in Europe some time ago, as shown in the pictures from security blog H online, which show exactly how the device looks when fitted to a regular ATM:
 |
How a false keyboard overlay might look. Image source: http://www.h-online.com/
|