Threat to Chip and PIN Terminals

The BBC is reporting that criminals are POSing as repairmen and then tampering with POS terminals in order to swipe the PIN and card details, then make magstripe cards and use them in countries like the US where Chip and PIN is not used...

Criminals are tampering with chip-and-pin terminals in shops to steal customers' bank card details, Radio 4's Money Box program has learned.

The problem has led the bank cards industry to issue guidelines to retailers. The British Retail Consortium says it believes stricter security has eliminated the problem. The UK bank cards industry however believes this sort of fraud is continuing despite the new measures.

The British Retail Consortium and the UK Payments Administration both told Money Box they had heard of instances of criminals dressing up as engineers and entering shops, asking to examine chip-and-pin terminals. They then take one away to be 'repaired', but instead they alter it so it can record the pin and card details of all future customers who use it.The fraudsters cannot create a new chip-and-pin card, but they can use the details to create their own magnetic stripe bank cards to use in countries abroad which do not yet have chip-and-pin.

 Continue Reading

There's really nothing a customer can do because a compromised terminal will look exactly that same as a normal terminal

Steven Murdoch, The Computer Laboratory, Cambridge University