Press
Presenting the Latest in ATM Scam Gear: The SMS-Sending Card Skimmer
Posted by John Mahoney at 11:30 PM on October 10, 2008
NYC is full of ATMs. It's one of the great things about living in this city--you're never more than a block or two away from cash. But a large, large percentage of NYC's ATMs are cut-rate bodega models that look like your card could catch something nasty from them once dipped. Helping spread the nasty is this, the newest development in ATM skimmers, with SMS capability. So now, if he's got $US8,500 to drop on the top of the line scam gear, the asshole who just jacked your card number and PIN doesn't even have to come back to the scene of the crime to retrieve it.
The folks at Zero Day uncovered a bunch of promotional material for the SMS-capable skimmer, which can send up to 1,856 coded numbers via a standard GSM SIM card for 24 hours on a single charge. The skimmer replaces an ATM's normal card reader, and is even painted with the exact same pigments and techniques used by the real manufacturer. When I logged on to my bank account online last year to find it had just been emptied by a series of huge withdrawals in Jordan ("Have you been to Jordan recently?" asked the bank fraud department innocently), maybe this was the enabler. [ZD Net]

Comments (AU Comments · US Comments)
There are currently no AU comments for this post.
Brookeorama
Posted 12:54 AM 11/10/08
@Jory:
And thats what really matters!
Brookeorama
Jory
Posted 12:53 AM 11/10/08
It practically pays for itself!
Jory
GHETTO.CHiLD
Posted 12:51 AM 11/10/08
Credit/Debit card fraud is huge. I only wish the U.S. would standardize ATM machines and enforce greater protection on credit cards and debit cards. I mean why work a 419 scam when you can do this twice as easy and without all of the trouble.
GHETTO.CHiLD
RE-L
Posted 12:47 AM 11/10/08
Wow this is very scary. I always feel a bit of concern when using those skanky ATM machines in bodegas and local deli shops. I guess from now on I'll make more of an effort to use my own bank's ATM.
RE-L
channelx
Posted 1:20 AM 11/10/08
@TBM-Fan: I'd like to know the same. Like how you can check the back of public PCs for hardware key logging devices, it would be nice to know how to check for the same with ATMs (if possible).
channelx
Pwnage
Posted 1:19 AM 11/10/08
That settles it -- I'm getting an ATM in my house!
Pwnage
TBM-Fan
Posted 1:11 AM 11/10/08
is there any chance to tell if it is been modified?
i don't know if it works but here in Europe ATM's are shutdown when they are alterated
TBM-Fan
MrBlahBlah
Posted 1:06 AM 11/10/08
ok, never using one of those again
MrBlahBlah
majortom1029
Posted 1:26 AM 11/10/08
first off never use those atms at delis and stuff. Only use a bank atm. You can also easily tell if a bank atm has been altered if something is covering the card slot.
majortom1029
Joseph
Posted 1:26 AM 11/10/08
@Jory: I could see Steve Ballmer doing a commercial for them and using that tag line.
Joseph
Noobs-R-Us
Posted 1:45 AM 11/10/08
Humm, I try to use my credit card for EVERYTHING. Then just pay it off every month. A much better strategy then geting cash to pay for things.
Plus, I have a 2% cash back credit card that each year, pays ME $300 to use it! Does your credit card company pay you to use their credit card?
Noobs-R-Us
draghkar
Posted 1:45 AM 11/10/08
Well, think about this:
If the bad guy sends all these credit card numbers to his iPhone, at least he can't copy and paste them... so who's the joke on now, huh?
draghkar
VideoVampire
Posted 2:19 AM 11/10/08
ATM's are a part of the Robot Rebel Alliance and are traitors, take them away!
VideoVampire
TheCrimsonOrder
Posted 2:18 AM 11/10/08
@wngchng87: More like what card are they trying to sell! ;)
TheCrimsonOrder
Nogard13
Posted 2:17 AM 11/10/08
Actually, my AmEx Blue pays me to use it. I got $479 last year and received 5% on my everyday purchases (groceries, gas, pharmacy) and 1.5% on everything else. Now my wife has decided to use her Blue for everything as well.
Anywho, I use an ATM about twice a month, if that. I pay for EVERYTHING with my credit card and pay it off at the end of the month. However, I could see how many people would get scammed. I'm just lucky that my bank has a $500 maximum daily withdraw limit and I look at my bank account every day.
BTW, those loses aren't insured, are they?
Nogard13
wngchng87
Posted 2:08 AM 11/10/08
@Noobs-R-Us: what card are you using?
wngchng87
urbanturban666
Posted 2:58 AM 11/10/08
@Nogard13: withdraw/debit limits are a good idea...
urbanturban666
urbanturban666
Posted 2:54 AM 11/10/08
thats why i only use atms that got those clear green plastic things on the card slot...
[www.uob.com.sg]
urbanturban666
urbanturban666
Posted 3:16 AM 11/10/08
@channelx: public computers cant be trusted at all... toting around a mini usb keyboard will beat most hardware logging... but it might not be that easy to tell if you have a software keylogger...
urbanturban666
lpranal
Posted 3:36 AM 11/10/08
Damn that's a pretty good deal (my citi card is only about 1.5%- 2%), but what is your interest rate like? I'm still paying off some debt i worked up while i was out of work for a few months, it's nice to have a low rate
lpranal
Silentheero
Posted 4:34 AM 11/10/08
Ya know, a few ideas on how to tell and/or beat these things would have been great in the article. :/
Silentheero
Navin R Johnson
Posted 5:09 AM 11/10/08
@urbanturban666: So you're saying I should make my SMS card skimmer out of clear green plastic?
Navin R Johnson
Navin R Johnson
Posted 5:07 AM 11/10/08
@RE-L: Won't matter, scammers just stick the card reader right over ANY ATM (your bank notwithstanding).
My brother pulled one right off an ATM and brought it to the police who had no idea what he was talking about and stared in confusion. It was double-back taped to the real machine.
Navin R Johnson
Discofunk
Posted 5:58 AM 11/10/08
I don't get what reading a card number will do for you? I was under the impression that your PIN wasn't stored on a debit card. Maybe this is just good for reading Credit Card numbers? Or does it somehow hack the machine to grab the pin number as well?
Discofunk
vicsells
Posted 6:30 AM 11/10/08
@Discofunk: You don't need a PIN to buy stuff online. you would need that little three digit number and the expiration date though, I don't know if the card reader gets that
vicsells
vicsells
Posted 6:29 AM 11/10/08
@draghkar: lmao so true
vicsells
sdowney83
Posted 1:57 AM 11/10/08
Some dude was on my local news last night talking about the cash only method of managing your finances, he paid off his cars in cash, then paid his home off in 9 years.
The only time I EVER use my account at all, is when Im using paypal or to tranfer funds to my or my daughters savings. I will admit though, when your at certain clubs watching boobies fly about, and you run out of cash, that ATM looks pretty nice, even with the $8 trans fee.
sdowney83
bud-strange
Posted 6:51 AM 11/10/08
I have cash (as well as credit cards). I prefer cash.
Just another reason Cash is better than plastic.
Nobodies ever lived to take my Cash!
bud-strange
Skeptical_Geezer
Posted 9:18 AM 11/10/08
@Navin R Johnson: Your brother should have called the Secret Service. They have jurisdiction (most peple don;t realize that the Secret Service is the police arm of the Treasury since they SOMEHOW got the job of protecting the President, V.P, candidates and families)
Skeptical_Geezer
infmom
Posted 10:25 AM 11/10/08
Someone must have discovered this in LA as well. My son's at the bank right now trying to get them to explain how some unauthorized person cleaned out his accounts.
infmom
banmojo
Posted 5:53 PM 11/10/08
thumbprint and iris scan - wouldn't biometrics make ATMs much more secure? Am I wrong in thinking this?
banmojo
TheBugMan
Posted 7:45 PM 11/10/08
@ banmojo
Then our eye and fingers will be chopped off by the thieves as well.
TheBugMan
zolielo
Posted 3:06 AM 12/10/08
Cut down on the possible scam by checking out all of the near by ATMs and compare the readers. Several times at gas stations and sport stadiums I have noticed odd readers compared to what is see on the next machines over.
zolielo
Full-Moto-Jacket
Posted 12:56 AM 13/10/08
Generic ATMs are privately owned. Anyone can buy them and set up shop. A good percentage are owned by organized crime types. The added bonus? While getting your PIN skimmed, you're helping to launder money!
Full-Moto-Jacket
Noobs-R-Us
Posted 12:40 AM 14/10/08
@wngchng87: Citibank's Dividend card.
Noobs-R-Us