Card skimming is the theft of card information by copying it with the help of a device.
Because it is very difficult to steal the data inside a chip, chip cards are much more secure than magnetic-stripe cards. Turkey is very advanced in card security technology. While almost all credit cards in Turkey are chip-based, many transactions in the United States and Far Eastern countries are still carried out by swiping the magnetic stripe. For this reason, the use of counterfeit cards is more common in the United States and Far Eastern countries. This is also the main reason why card information copied domestically is transferred abroad to carry out fraudulent transactions.
How is card information copied?
Copying via ATM
Card skimming is carried out using a copying device known as the “PARROT,” which is attached to the card reader slot of ATM devices. The data on the card's magnetic stripe (Track1, Track2, etc.) is copied with the help of this device. The copied data is then transferred onto blank plastic cards, and transactions can be carried out using the card without the cardholder's knowledge.
Technological improvements are also being made to ATM devices in this regard. The card-shaking feature found on some ATM devices is designed to prevent skimming devices from properly capturing the information on the card.
Since the magnetic data of ATM cards (debit cards) is generally what gets copied, and since entering a PIN is mandatory for transactions made with ATM cards, capturing the card's PIN is also important to fraudsters.
The card's PIN is obtained using a fake overlay placed on the keypad, or hidden cameras concealed inside the speaker cover. For this reason, hiding your PIN while carrying out a transaction is extremely important. Before carrying out a transaction, it is important to visually and physically check the ATM's keypad, speaker cover, and card slot for such devices. Since card skimming devices can be easily obtained online, preferring cardless cash withdrawal methods will reduce the level of risk.
Copying in POS transactions
In POS skimming, a card skimming device is placed somewhere in the store where customers cannot see it. The customer hands their card to the store clerk to use it for the purchase. A malicious store clerk swipes the card through the skimming device as quickly as possible, either just before running the transaction through the POS terminal or immediately afterward, to capture the card information.
For this reason, when carrying out a transaction via POS, make sure that your card is only passed through the POS device and that the transaction is carried out next to you and in plain sight. Do not allow the employee taking payment to take your card and walk away from you to process the payment. Having the POS device brought to you, or going to the register yourself to make the payment, will help prevent financial loss.
