Can a PIN code be stolen? 5 ways

Carder

Professional
Messages
2,619
Reaction score
1,932
Points
113
Hello everyone, today I will tell you about 10 ways how money from your card can be stolen. (today 5, and 5 in the second part)

Method 1 - Writing the pin code on the card.​

The dumbest, but quite common, is to write down the pin code on the card.
In everyday life we have a lot of cards, what do you do - scribble a pin code with a blade, or write with a marker.

In this case, if you lose your wallet, the attacker will have not only your card, but also your PIN code. Accordingly, money can be easily withdrawn from an ATM.

Solution 1: Write down all PIN codes in electronic or paper form.

Record on the phone, record on the computer. But certainly not on the map itself.

And if on the card itself, then encrypt - increase each digit by 1.
If you lose, no one will understand anything, but you will understand everything.

Method 2 - Trapping​

Trap is translated from English as a trap. The essence of the method is as follows - you go to the ATM, insert the card, enter the pin code, but nothing happens.

Why isn't it happening? Because your card was caught by someone or something in the slot of the card reader. She missed the inside of the ATM.

You do not know what to do, you cannot press cancel (because the card has not yet entered the ATM), you do not know what to do.

The attacker had previously set up a "trap" made of thin film or any other suitable thin material.

23a2fa163ccaa9f5ea1f9.png

It folds, is inserted into the slot of the card reader, and your card is caught there.

At this moment, an attacker comes up, asks what the problem is, and offers to help. You answer that the card is stuck, you don't know what to do.

He says: "I also had it recently, enter the PIN code on a new one and it should work." You, suspecting nothing, enter your PIN code and nothing happens further. You are annoyed and go to the bank branch ...

At this moment, the attacker pulls out his trap from the ATM, with your own card, and calmly withdraws all the money from the ATM (he just spied the pin code when you entered it with him)

Solution 1. Don't listen to anyone's advice.

Solution 2. When entering the pin code, cover the keyboard with your hand.

Solution 3. If something happened to your card - solve all problems without leaving the ATM (call your bank)

Method 3. Skimming.​

A skimmer is a special device that is made in the form of a factory part of an ATM. This is a special overlay that is installed on the card capture reader.

c28e04ef3ea19e1016531.jpg

When you enter your card into the ATM, it goes through the intruder's skimmer, which dumps your card at this time.

Dump - all information that is recorded on the magnetic stripe. It's enough to counterfeit your bank card.

Your card went through the skimmer and hit the ATM.

You, without noticing anything, do what you wanted at the ATM, take the card and leave.

These cards fell into the hands of the attacker.

There are skimmers with built-in memory, there are also more advanced ones - with a module in which information about the card is automatically sent to the mail or SMS to the attacker.

How to find out the PIN code? (you cannot withdraw money without a pin code)

Removing a pin code while skimming is also a kind of art.

First, it can be camouflaged cameras that are attached to the side of the ATM, or something else ...

Secondly, it can be overhead keyboards. They look like real ones and it is almost impossible to tell them apart.

80bd0a012ef81922010a9.jpg

Thus, if we are dealing with skimming, our card is practically not protected in any way.

Solution 1. Carefully inspect the slot of the card reader, card reader, whether there are any extraneous overlays. We also look at the keyboard.

Solution 2. It is recommended to use ATM machines that are used indoors. It is much more difficult for a fraudster to install his escutcheon unnoticed.

Skimmers are very expensive. Starts at $ 8,000.

Method 4. Shimmer.​

You might think a skimmer is the worst thing that can happen to your credit card. But no.

Shimm is the same as a skimmer, but it differs in that it is a thin flexible board, much thinner than a human hair, which is placed on a carrier card (on a regular card), inserted into an ATM and attached to the ATM contacts, which are responsible for reading the card.

If you can still notice the skimmer, then you will never notice the shim installed inside the card capture reader.

50301955518d520df5b67.png

Method 5. Fake POS terminals, ATMs, payment terminals.​

For the first time such methods of theft were described in 1988 in the United States. The scammers built an automatic machine that accepted any card with a pin code and gave out a pack of cigarettes in return.

You, again not noticing nothing, take a pack of cigarettes and leave.

What happens next is that all your card details are transferred to scammers. (dump).

A duplicate of the card is made and the money is withdrawn from the ATM.

Also, there are fake ATMs:

f10d3a59ca8666543c666.jpg

But, fake POS terminals are much more common:

1929f768416fd56213676.jpg

For example, you are having lunch in a restaurant and they bring you a terminal to pay. You pay, but the transaction does not go through for some reason. Any error will be written on the screen.

In fact, they brought you a fake terminal that recorded your card details and pin code.

After that, they may bring you another terminal, from another bank, and say that it does not work.

Solution 1. If, in the case of ATMs, the decision to use ATMs in the premises of banks or shops, then in the case of fake terminals (reprogrammed to remove and write dumps), there is no way to protect yourself from this, except not to pay by card in questionable places and tourist countries, such like:

Turkey
Egypt
Thailand ...
 
Top