What is skimming and how to protect yourself from it?

Skimming is a so-called “man-in-the-middle” attack model. This fraud method consists of reading and copying bank card data without the user’s knowledge. The goal is to withdraw money or carry out illegal transactions with the stolen data.

Skimming involves reading and copying magnetic stripe or chip data of a credit card or EC card at ATMs. Criminals manipulate these ATMs in various ways, for example by installing a additional reader directly on the card reader or even on the access doors to bank branches, where a card is often required. To capture the PIN code, cameras are often hiddenespecially in the plastic strips above the ATM keypad. These devices are often so well concealed that they escape the attention of even attentive users. Furthermore, frequent use of fake keyboards allows you to record the PIN entry. There are even methods that use thermal cameras to record the PIN that has just been entered.

Skimming can also occur in other locations such as gas stations, money changers, and when paying in stores. In these situations, the card is read by a second fraudulent devicewithout the cardholder being informed. Once the card data is collected, it is transferred to a blank card, often called “White Plastic”. By using this duplicate card and PIN codecriminals can make cash withdrawals and payments. Skimming is possible because data on the magnetic stripe is freely accessible and are not protected by the card itself as is the case with modern smart cards.

Most banks try to detect and prevent ATM manipulations in time by equipping them with anti-skimming modules. These are special technologies that are integrated into cash withdrawal terminals in order to detect and prevent possible attempts. Different technologies can be used for this purpose:

• Data entry confusion : Some modules continuously emit jamming signals that prevent a malicious device from reading data from a card's magnetic stripe.
• Physical barriers : some anti-skimming modules prevent devices from attaching to the card feeder.
• Sensors and monitoring : Advanced modules use sensors and cameras to detect unusual activity on ATMs. In case of doubt, the ATM can even go out of service.
• Magnetic field analysis : Some anti-skimming systems work with induction coils that measure the magnetic field in the area of ​​the card slot and can thus detect changes made by skimming devices.

In principle, it is important to always be vigilant and take different precautions to prevent your card details from being stolen:

• Hide PIN entry : Cover the keypad with the other hand when entering the PIN code.
• Vigilance : Pay attention to any abnormalities on the ATM or payment terminal, such as loose or unusually sized card slots, or any other unusual accessories.
• Regular checks : regularly check account statements and immediately inform the bank of any unknown withdrawals or transactions.
• Maps update : if possible, use cards with an EMV chipbecause they are more difficult to copy than traditional magnetic stripe cards.
• Pay contactless : Use contactless cards or mobile payment apps like Google Pay to reduce the risk of skimming.
• Avoid public Wi-Fi networks : Be careful when using public Wi-Fi networks, as they could be used by criminals to retrieve your card data.

Skimming can sometimes be difficult to detect. However, there are a few signs that may indicate that you have been a victim of this type of fraud. To do this, it is essential to regularly check your account statements. Unknown and unexplained charges are a sure sign of skimming or that someone has accessed your account without your consent. Additionally, online purchases that you are not aware of may also indicate that you have been skimmed.

What to do if you are a victim of skimming?

If you think you have been a victim of skimming, you should act quickly. Of course, unusual activities are often already automatically detected by banks' security systems, but if this is not the case, you should notify your bank immediately of any suspicious activities. This can help limit financial damage. The following steps are recommended:

• Lock the card : This is the first and most important step. Contact your bank or credit card company immediately to have your card blocked. Most banks offer 24-hour assistance for this purpose.
• Filing complaint : file a complaint with the police about credit card fraud. This helps the law enforcement authorities identify the perpetrators of the offence and can provide you with legal support.
• Change passwords : If you suspect that other personal data has also been stolen, you should immediately change important passwords, especially those used for online banking. One possibility for better protection is a so-called one-time password.
• Preventive measures : think about how you can prevent future skimming attempts. This could include: use contactless payment methodsto check the status of ATMs or to set up notifications on your banking app for each transaction.

Even though the incident has been solved, it is still important to remain vigilant. Along with phishing and other scamming methods, skimming is just one of the many scam methods. Being extra vigilant can protect you from future financial losses.