Saraswat Bank - Safe Banking

A Satark Banking Initiative

ATM Card Skimming

In this type of attack, the attacker targets ATM machines and places skimming devices which are used to steal data from ATM / Debit / Credit cards.

Modus operandi of ATM Card Skimming

  • Attacker places skimming device over the port where ATM / Debit / Credit cards are inserted.
  • When a individual unknowingly inserts his/her card in this targeted device to withdraw money, the PIN of card gets revealed to the attacker.
  • Attacker then attempts to place a dummy card in the device and withdraw money using the same PIN leading to deduction of money from the victim’s account.
  • Since there are multiple complexities involved in setting-up such skimming devices, the attackers also attempt to stand close to the customer withdrawing money and tries to see the PIN entered by the customer.
  • If the customer did not hide his/her hand while entering the PIN or did not notice shoulder-surfing, the PIN is revealed to the attacker.
  • Attacker then attempts to place a dummy card in the device and withdraw money using the same PIN leading to deduction of money from the victim’s account.