Cans
What is the risk of responding to such an offer? Will trying to earn extra money on someone else's bank card turn into a criminal case where you are not a victim at all?
It's frighteningly simple. You can get two cards with 30 thousand rubles on each one at the post office, or they will be delivered by courier. You only pay for delivery - 1000-2000 rubles. Next, you withdraw and transfer part of the amount to the employer's account, the remaining tens of thousands of rubles are yours, and you take the percentage immediately…
Most often, such offers are sent to schoolchildren and students. They are also replicated on their pages in social networks by young people, sometimes minors, who do not understand what such "cooperation"can turn out to be.
According to the expert, the cards get to the attackers in different ways. Most often, data is simply purchased online. Thus, there is a high probability that sellers were immediately going to deceive customers and the cards are most likely invalid.
Although it happens that organized scammers really look for people to cash out fakes (the so-called "drops"). Remember: participation in such schemes is fraught criminal liability under the article "Fraud" with all the consequences that follow from this, " V. Bakunin reminds. - Credit organizations take a variety of measures to counteract fraud. From monitoring operations to helping enforcement agencies apprehend intruders. But Nizhny Novgorod residents should also be vigilant - do not help cyber scammers.
With the development cashless payments and the market number of of. The above scheme is designed for financially illiterate citizens who are hungry for a stray income. Remember: money can't come out of nowhere! It cannot be ruled out that the authors of the "super - profitable" scheme, having collected money for "delivery", will soon disappear from the horizon, " says Alexander Yudin, financial adviser, director of the branch of a large financial company in Nizhny Novgorod.
The most common type of fraud is skimming (illegal creation of duplicate cards using special electronic readers on ATMs). And it causes the greatest damage , " says Alexander Yudin. - Despite the measures taken by the state, supervisory financial authorities and banks, most often the weak point in protecting money on the card is the carelessness of the citizens themselves. They often lose their cards, transfer them to someone else's hands, write down the PIN code directly on the credit card, use someone else's computer when shopping online, etc.
When making online payments, it is better to use a separate card that contains only the amount for a specific purchase. Don't keep a lot of money on this card! And when shopping online, use only verified sites.
It makes more sense to make purchases only from your own computer. It is useful to enable the SMS notification service for completed transactions. Ing mobile banking is quite vulnerable, experts admit. It has a wide range of issues related to the security of use. The first threat is related to unauthorized access to data stored in the memory of your mobile phone. If you don't have antivirus software, it won't be difficult for fraudsters to get hold of the bank's customer profile data.
Turn off Bluetooth when not in use;
Install antivirus software if you are actively accessing the Internet from your mobile phone.
Another common threat is the loss of your phone, either accidentally or due to theft. In this case, you should contact your bank's support service as soon as possible to block the provision of the Mobile Banking service for your account and save your personal savings. Be careful!
Officially
An offer to earn extra money using someone else's bank card should immediately raise doubts: why can't another person cash out the funds themselves? - reported "AiF-NN" in the press service of the Main Department of the Ministry of Internal Affairs of the Nizhny Novgorod region. - Of course, each case should be analyzed separately. So far, the Nizhny Novgorod Criminal Investigation Department has not received complaints from residents of Nizhny Novgorod about such schemes. If you receive such an offer, you should contact the police.
Cases of fraud with the use of bank cards in the region are common, according to law enforcement officers. Often, it is young people who are involved in such cases. The last sensational case: in the summer of 2013, three Borch residents appeared in court, accused of stealing 7 million rubles from 30 banks. According to the investigation, the attackers stole funds using fake bank payment cards. They used ATMs to withdraw large amounts from the accounts of clients of foreign banks.
According to the defendants, the scheme of embezzlement of funds they received from unknown people on the Internet: they sent young people data about bank customers. Using this information, the guys made a duplicate plastic card and received cash from ATMs. The information provider (who was also identified by the investigation) received 70-80% of the withdrawn amount.
Attention! Everything described in this article
illegal and falls under the jurisdiction of the Criminal Code of the Russian Federation.
The editors strongly recommend
use the methods listed here
provide information for general
development.
At the numerous requests of the fighters of our invisible front, I finally give you a small review about real plastic on the mountain. I hope that this will slightly reduce the number of questions that sometimes just get annoying. Therefore, I will try everything on my fingers and in simple words.
This case does not claim to cover everything in the world about real plastic, but simply gives some directions for reflection. And again – no ready-made recipes – you will have to chew, swallow, and find information yourself. The word
"credit cards" in this article refers only to VISA, MasterCard, JCB,Diners Club, Discover or AmEx, while debit cards and SMART-cards require a separate approach to the shell.
First, some terms to make it clearer for those who have not dealt with this at all, and then I will spread the thought along the tree:
next? Let's go from simple to complex:
And one last note – if see someone selling dumps with pins somewhere – don't believe your eyes. If you've read this case carefully from top to bottom, I hope it's clear that PIN dumps are like cash in your pocket. But no one has ever sold $100 for $20 yet. If $100 is printed in Washington, of course, and not in Grozny or Tehran.
PS. Do not forget that almost all ATMs have video recording equipment installed.
And video recordings are stored indefinitely-depending on the degree of mess in the bank that owns a particular
ATM.
Unauthorized copying of all information contained in the magnetic stripe of an active credit card in order to illegally create a fake credit card that can be used by cybercriminals to make purchases. Credit card drop-offs are used by fraudsters to collect valuable card data, such as the card number and expiration date. "Credit card surrender" is another term originally used underground that has found its way into widespread public awareness due to the growing prevalence of credit card forgery, identity theft, and other types of cybercrime.
In many cases, the consumer may not be aware that his or her credit card information has been dumped. Cybercriminals try their best to dump credit cards undetected, as cardholders can simply cancel their cards if they suspect that the card's security has been compromised. In fact, the first indication that data dumping has occurred frequently occurs either when a consumer detects an unauthorized purchase on his or her credit card, or when the consumer receives a notification from the merchant that credit card data may have been stolen due to a hacker attack.
A credit card dump that contains data for a US card can be sold in the underground economy for anywhere from $ 20 to $ 80. The value of this information is an incentive for hackers to try to break into the networks of established retailers. Once they succeed, it will be possible for them to get a dump for thousands of credit cards. The push for hacking attacks in recent years at a number of large, high-profile retailers suggests that this problem remains here.
It's probably no secret that credit card not a reliable means of storing money. Credit cards are taken away and cashed out online or in real stores. Today I would like to tell you about the most sophisticated method of fraud with plastic cards – when they steal a dump (a copy of a credit card) and pin code, and then withdraw money from ATMs. This is a multi-faceted case, so I will describe it in stages and at the same time support it all with photos.
Scammers who work with plastic cards are called "carders", but carding is a fraud with plastic cards. What does a carder need to withdraw money from your plastic card via bakomat? Its full copy or so-called dump (dupm) and your pin code (pin) – a four-digit number that the ATM asks each time to make sure that the card is yours.
You can get a credit card dump various ways, but the difficulty is that the plastic card does not store information about your PIN code, and if you steal only the dump, then it is useless to receive money from an ATM (credit cards without a pin are cashed out in a different way, and this is the topic of another article). This means that the fraudster needs to get a credit card dump along with the PIN, which makes the task much more difficult. You won't be able to get a job as a waiter or salesman and copy credit cards.The client must enter the pin code, and the pin code must become known to the fraudster. You can of course stupidly select a credit card and extract a pin threatening with something dangerous, but firstly this is not subtle, and secondly it falls under the article "robbery" where the terms are much cooler. And where are the guarantees that the "client" will tell the correct code? And even if it is correct, the "client" needs to be isolated somehow, so that he does not accidentally realize that he can call the bank and block the credit card or, even worse for the criminal, dial 02 and catch the thief warm at the ATM. The risk is high, and the card may have a very small amount on it, and it is , usually such "clients" have security guards who can knock on the head.
But an inquisitive mind will always find a way out (and scammers are savvy people). The only place where you can get a dump of a plastic card and PIN is an ATM. The conclusion suggests itself, you need to install special equipment so that it collects information that the fraudster could use in the future to enrich their pockets.
Skimmer – a fraudster's device that reads and stores information from the magnetic tape of a payment card in memory (options: sends an SMS or radio signal). So much for the dump. The skimmer is installed in front of the ATM card reader and is usually designed to match the design of a specific ATM, so that the cardholder does not suspect anything. When a person who wants to withdraw money from the card sticks the card into an ATM, the skimmer reads the data from his card, which gets to the fraudster. Below are photos of skimmers, so that you can better understand what they are:
This is the skimmer that fraudsters can use to get a plastic card dump. But as we found out earlier, one dump is not enough, you also need a pin code. That's why you need to install a skimmer on the ATM, so that you can find out the PIN at the same time as the dump. There are two ways to find out the PIN code of a particular card. The first is the simplest, install a camera next to the ATM, which will shoot the pin being dialed. You can hang a box with booklets on the ATM itself, where the hidden camera is mounted, or for example make a decorative canopy with a hidden camera over the ATM. See photo examples:
The second way is to make a fake keyboard overlay that will look like the real one. This overlay saves (sends) the PIN code. Looking at the photo:
If everything is done correctly and accurately, the client will not even notice that a dump was taken from his card and his pin was recorded, the card will fit into the ATM card reader through the skimmer and the ATM will process it, and a high-quality overlay will be pressed and duplicate what was typed on the real ATM keyboard.
Now we have dumps and pins credit cards, but the ATM has nothing to do with this information, it accepts cards. Next, we need white, clean plastic, on which we will record this information.
I have heard somewhere that they have managed to get hold of ATMs and now they "see" that the plastic is pristine white and stupidly swallow it, so the scammers began to apply a drawing on white plastic with the help of ordinary strings. By the way, I will say by the way that the magnetic tape on credit cards is rewritten, and nothing prevents the fraudster from typing real cards somewhere for a song and writing down information on them, and if by chance the PPS catches this case, then a real credit card is in the hands, and who writes what on it only to God (and the fraudster) it is known. Recording devices are sold quite legally, which is not surprising, since these devices also write a lot of things, such as bonus and discount supermarket cards. Looking at the photo:
By the way, usually included with the reader is a pair of white plastic cards for experiments. It's a small matter, write dumps on white plastic and withdraw money from an ATM. Yes, I foresee the next question, ATMs have cameras. So what? Who forbids a fraudster to make up a little, put on a wig, wide dark glasses and a cap? And in this case, the built-in camera is useless, like a milk goat.
How to protect yourself from this? There is new type card with electronic chip, there is an order of magnitude steeper protection and as far as I know, they are not hacked yet, so ask the bank for a card with a chip and no other way, it may be more expensive, but as you know, a miser pays twice.
Well, a universal way deal with any fraud, it is – CARE. If you see that the ATM card reader is bulging, that the ATM keyboard is unnaturally raised, made "somehow wrong" or moves, booklets are hanging on the ATM (banks themselves do not hang them on the ATM) or something else suspicious, do not be lazy, look for a more reliable ATM. Yes, and you need to use ATMs in crowded places, preferably in large shopping centers or supermarkets, since there are a lot of cameras, and fraudsters usually choose a less risky path and naturally choose some kind of ATM that stands somewhere on the outskirts of the city, than they will risk installing equipment in a large shopping center full of surveillance cameras and security.
What is the risk of responding to such an offer? Will trying to earn extra money on someone else's bank card turn into a criminal case where you are not a victim at all?
Profit or fraud?
The scheme of "work" is quite simple: you will receive a bank card by mail, and the PIN code will be included in the instructions attached to the card. The "employer" claims that it orders bank plastic from abroad, purchases a dump (electronic card information) from banks and writes it down on plastic. "These data are foreign - you have nothing to fear," the craftsmen assure in their ads.It's frighteningly simple. You can get two cards with 30 thousand rubles on each one at the post office, or they will be delivered by courier. You only pay for delivery - 1000-2000 rubles. Next, you withdraw and transfer part of the amount to the employer's account, the remaining tens of thousands of rubles are yours, and you take the percentage immediately…
Most often, such offers are sent to schoolchildren and students. They are also replicated on their pages in social networks by young people, sometimes minors, who do not understand what such "cooperation"can turn out to be.
Sad consequences
Banks are constantly confronted with the use of fake cards. This type of "earnings" is fraud, and fraudsters are both those who sell cards and those who are going to buy and use them, " says Vladimir Bakulin, head of the department of e-business monitoring at a large bank.According to the expert, the cards get to the attackers in different ways. Most often, data is simply purchased online. Thus, there is a high probability that sellers were immediately going to deceive customers and the cards are most likely invalid.
Although it happens that organized scammers really look for people to cash out fakes (the so-called "drops"). Remember: participation in such schemes is fraught criminal liability under the article "Fraud" with all the consequences that follow from this, " V. Bakunin reminds. - Credit organizations take a variety of measures to counteract fraud. From monitoring operations to helping enforcement agencies apprehend intruders. But Nizhny Novgorod residents should also be vigilant - do not help cyber scammers.
With the development cashless payments and the market number of of. The above scheme is designed for financially illiterate citizens who are hungry for a stray income. Remember: money can't come out of nowhere! It cannot be ruled out that the authors of the "super - profitable" scheme, having collected money for "delivery", will soon disappear from the horizon, " says Alexander Yudin, financial adviser, director of the branch of a large financial company in Nizhny Novgorod.
Be careful!
On what only tricks today do not go intruders to get hold of other people's money. They fake bank cards, create fake websites for payments via the Internet. Waiters and cashiers can discreetly withdraw your money from the card you gave away to pay.The most common type of fraud is skimming (illegal creation of duplicate cards using special electronic readers on ATMs). And it causes the greatest damage , " says Alexander Yudin. - Despite the measures taken by the state, supervisory financial authorities and banks, most often the weak point in protecting money on the card is the carelessness of the citizens themselves. They often lose their cards, transfer them to someone else's hands, write down the PIN code directly on the credit card, use someone else's computer when shopping online, etc.
When making online payments, it is better to use a separate card that contains only the amount for a specific purchase. Don't keep a lot of money on this card! And when shopping online, use only verified sites.
It makes more sense to make purchases only from your own computer. It is useful to enable the SMS notification service for completed transactions. Ing mobile banking is quite vulnerable, experts admit. It has a wide range of issues related to the security of use. The first threat is related to unauthorized access to data stored in the memory of your mobile phone. If you don't have antivirus software, it won't be difficult for fraudsters to get hold of the bank's customer profile data.
Turn off Bluetooth when not in use;
Install antivirus software if you are actively accessing the Internet from your mobile phone.
Another common threat is the loss of your phone, either accidentally or due to theft. In this case, you should contact your bank's support service as soon as possible to block the provision of the Mobile Banking service for your account and save your personal savings. Be careful!
Officially
An offer to earn extra money using someone else's bank card should immediately raise doubts: why can't another person cash out the funds themselves? - reported "AiF-NN" in the press service of the Main Department of the Ministry of Internal Affairs of the Nizhny Novgorod region. - Of course, each case should be analyzed separately. So far, the Nizhny Novgorod Criminal Investigation Department has not received complaints from residents of Nizhny Novgorod about such schemes. If you receive such an offer, you should contact the police.
Cases of fraud with the use of bank cards in the region are common, according to law enforcement officers. Often, it is young people who are involved in such cases. The last sensational case: in the summer of 2013, three Borch residents appeared in court, accused of stealing 7 million rubles from 30 banks. According to the investigation, the attackers stole funds using fake bank payment cards. They used ATMs to withdraw large amounts from the accounts of clients of foreign banks.
According to the defendants, the scheme of embezzlement of funds they received from unknown people on the Internet: they sent young people data about bank customers. Using this information, the guys made a duplicate plastic card and received cash from ATMs. The information provider (who was also identified by the investigation) received 70-80% of the withdrawn amount.
Attention! Everything described in this article
illegal and falls under the jurisdiction of the Criminal Code of the Russian Federation.
The editors strongly recommend
use the methods listed here
provide information for general
development.
At the numerous requests of the fighters of our invisible front, I finally give you a small review about real plastic on the mountain. I hope that this will slightly reduce the number of questions that sometimes just get annoying. Therefore, I will try everything on my fingers and in simple words.
This case does not claim to cover everything in the world about real plastic, but simply gives some directions for reflection. And again – no ready-made recipes – you will have to chew, swallow, and find information yourself. The word
"credit cards" in this article refers only to VISA, MasterCard, JCB,Diners Club, Discover or AmEx, while debit cards and SMART-cards require a separate approach to the shell.
First, some terms to make it clearer for those who have not dealt with this at all, and then I will spread the thought along the tree:
- A dump is a collection of information that is recorded on the magnetic stripe of a credit card. The dump can consist of tracks 1, 2, and 3, or 1 and 2, or 2 and 3
- A track is a text file with specific information that is recorded on the magnetic track of a credit card. The main functional load is carried by Truck 2 or the second road. If you have Track 2, you can manually create Track 1 based on the data available in Track 2. Functionally, for some recording methods, only the second track is sufficient to record on the map. Usually, they use tracks 1 and 2. Track 3 is used by various financial institutions on credit cards to record some additional information– for example, if the card was issued by Citibank in conjunction with American Airlines, then the third road may contain information about points scored on AA flights, and so on. For us, the third road is not interesting.
- For the production of credit cards, of , but in 90% of cases – the so-called CR-80, on which all sorts of passes, ids, casino membership cards and so on are made at the same time. That is, it is widely distributed worldwide
and is used not only for making credit cards. - POS terminal – a terminal for rolling credit cards when buying something there-you've seen it in stores.
- Pigeon and Globe – each VISA or MasterCard credit card currently has a hologram – a pigeon on the Visa, and hemispheres on the MC. We must pay tribute to the fact that there is no hologram on AmEx yet (although there is an Optima version of
). - The balance is not on your credit card!!! "Gy-bratva, how would you break 100 bucks of the balance for 10,000 on the loan? Gee?” - this is not my idea, these are the questions that are asked. I explain that the balance is NOT on the credit card, that is, the money is not physically there. A credit card is like a pass to the account of this credit card in the bank that issued it. In other words, the credit card simply identifies the account holder – whether he can withdraw money from the chest that is in the bank.
- Where to get dumps? – currently:
- Readers are bought, made, and obtained – portable battery-powered readers (like PMR-202, PMR-102, MSR300, MSR500, Smart Mag-DC), or stationary readers like AMC C722, MSR206 - and depending on the country of stay, experience, and circle of acquaintances, they are distributed to agents: currency prostitutes, cashiers in decent stores. shops, cafe workers, hotels – wherever there are foreigners who pay with credits. The cost of this work ranges from $ 10 to $ 200 for each dump collected by your agent.
- A very large processing center of a bank, or a processing network, through which payments from physical, not virtual stores, and all sorts of other things pass, breaks down, and the database is torn out of there.
- You agree in the bank with the banker who is responsible for issuing cards, or for their embossing, so that he gives you all the cards you have made on a floppy disk at the end of each working day. The most unrealistic way, but sometimes occurs, especially if the banker does not have a sense of self-preservation.
- Just buy dumps from those who took possession of them using one of the above methods.
next? Let's go from simple to complex:
- How do I push these dumps onto this white plastic so that everything goes right? Simply – for this purpose, there are scribblers, or in other words encoders (AMC C722, MSR206), connecting which to a computer, and having dealt with the program, you roll white clean plastic through the encoder, as a result of which you have plastic with a magnetic stripe applied at the output - a dump of a real credit card. In other words, you have a magnetic copy in your hands. If suddenly your agent, who took this dump from terpila, got him drunk to such an extent that he shouted out his PIN in ecstasy (or there in the notebook where he found it) – you can safely go to the ATM and try to get money. With a high probability, if there were no suspicions when taking the dump from the owner, and he does not suspect that a copy was taken from his card, you will receive money – another thing is that it is not known what the limit is, or whether there is any money on it at all. But, as practice shows, THEY do not scream even in ecstasy. Thus, you have a duplicate on white plastic, with which you, of course, will not go to the corner store or to the ATM, since there is no PIN. What should I do? Again - from simple to complex. First of the series quickly shallow
sleep.. uh, steal and get drunk on beer: you agree with the seller in some decent store there, who accepts cards, that, they say, Vasya, here I have such bullshit, I'll come to you, buy a laptop, then we'll sell it, and the money will be halved. It passes. For players of a heavier weight – a suitcase of such plastic is collected with recorded dumps, an office opens (probably, you can do it in the Union, you haven't tried it), it starts working – it sells some babies there. A bank account, an agreement with the bank, a POS terminal is placed, and at one point all this suitcase of white plastic is run through it. The money goes to the account. Take cash – and to the girls. Of course, everything is not so simple. At the beginning of any such topic, you need to carefully study the country, the banking system, possible pitfalls, the bank's security system (for which signs red flags are thrown), which put this terminal to your United Bratva office, the terms of crediting, the possibility of withdrawing money, think about ways to get out, of course you can't open such an office for yourself, calculate the costs , and much more. - Let's go further – to a more complex one. Initially, there is pure CR-80 plastic and dumps. How to print and make a credit card at most one to one? With this credit card, you can safely go to any store in any country, and something else, about which below. First, you need to buy ready-made plastic with doves or a globe, or buy these holograms separately. Then you need to find a printing house, or buy your own equipment that will allow
print something beautiful on pure CR-80 plastic – and practice shows that it doesn't matter which bank is listed there, and whether it corresponds real bank. Printing, of course, is two-sided. Pay special attention to the quality of the dove and globe-if something is wrong with them, it is very alarming to sellers and bankers. Printed with grief in half. Now you need to make these indented credit card number, name, and so on. Again – you can negotiate with the banker who will sponsor this case for you, or buy the equipment yourself. In addition to all this, you need to stick a strip of special paper on the back of the credit card, on which the cardholder's signature is put. In less than six months, you already have a suitcase full of duplicate credit cards that no one will touch. What are the options with a suitcase: if you are using your clothes – buy a ticket to Singapore, for example, or to Pretoria, and buy a lot of money there until your suitcase runs out. Then somehow somewhere it's all iron or silver-you build up gold, sell it, distribute it. Option two – dump absolutely do not give a damn what name you specify on the first road – or the real owner, or, for example, the name that you have in the second left passport, for example, bought from BezNogi, or in the international rights. You can manually change the name of the cardholder inside tracks. That is, the slip-e that climbs out of the POS terminal will have the name that you made in the dump. I hope it's clear that no one bothers you to emboss all the cards with the same name in the same way. Or, for example, make John Smith on 20 cards, Moisey Abramovich Petrov on another 20, and Boris Berezovsky on another 20. Order passports in these three names with rights for reliability. And feel free to go to the Main Cool Commercial Bank Ivanovo in the same Ivanovo or there in the Union Bank of Switzerland in Zurich, and, presenting a passport and credit card in the same name, withdraw money from it to the maximum. In cash. It is clear that you need to enter the country with a different passport, just in case. In general, think through everything. If you withdraw money from one bank – you go to another bank with a different credit card in the same name, and so on. Changing your country. And a new one. With a different passport and different credit cards. - Shura Balaganov was very surprised when Ostap bought an ink device for the Horns and Hooves office. "Ostap Ibrahimovich, were you not ashamed to pay REAL money for this ink set?"Shura was right. Option three – simple and classic. Stupidly acquire a left passport. Stupidly you go with it all the same to what bank and in what country, and just stupidly open an account with a credit card. As a result, you have a credit card with the name of Zhenya Sokolov with 5 dollars on it, and a passport in the name of Zhenya Sokolov with your photo. Erase all data from the magnetic stripe in Fig. Prepare a dump from those that you have – it doesn't matter whose and what country. Change your name to Zhenya Sokolova on the tracks in it. Write this dump to this credit card. And go ahead-even to the bank, even to the store-everything is there. You run out of money on this dump – you erase it again, prepare it, and record a new one. And so, until Zhenya Sokolov is searched all over the world by all banks and shops. Then you buy a new passport and go around the circle again. Well, if they already recognize the face-then only plastic surgery then.
And one last note – if see someone selling dumps with pins somewhere – don't believe your eyes. If you've read this case carefully from top to bottom, I hope it's clear that PIN dumps are like cash in your pocket. But no one has ever sold $100 for $20 yet. If $100 is printed in Washington, of course, and not in Grozny or Tehran.
PS. Do not forget that almost all ATMs have video recording equipment installed.
And video recordings are stored indefinitely-depending on the degree of mess in the bank that owns a particular
ATM.
Unauthorized copying of all information contained in the magnetic stripe of an active credit card in order to illegally create a fake credit card that can be used by cybercriminals to make purchases. Credit card drop-offs are used by fraudsters to collect valuable card data, such as the card number and expiration date. "Credit card surrender" is another term originally used underground that has found its way into widespread public awareness due to the growing prevalence of credit card forgery, identity theft, and other types of cybercrime.
BREAKING DOWN "Dump Dump"
There are several ways to get credit card returns. A popular method used by criminals is "skimming", in which an illegal card reader is used to copy data from a credit card. Other methods include hacking into the retailer's network or using a point of sale infected with malicious devices.In many cases, the consumer may not be aware that his or her credit card information has been dumped. Cybercriminals try their best to dump credit cards undetected, as cardholders can simply cancel their cards if they suspect that the card's security has been compromised. In fact, the first indication that data dumping has occurred frequently occurs either when a consumer detects an unauthorized purchase on his or her credit card, or when the consumer receives a notification from the merchant that credit card data may have been stolen due to a hacker attack.
A credit card dump that contains data for a US card can be sold in the underground economy for anywhere from $ 20 to $ 80. The value of this information is an incentive for hackers to try to break into the networks of established retailers. Once they succeed, it will be possible for them to get a dump for thousands of credit cards. The push for hacking attacks in recent years at a number of large, high-profile retailers suggests that this problem remains here.
It's probably no secret that credit card not a reliable means of storing money. Credit cards are taken away and cashed out online or in real stores. Today I would like to tell you about the most sophisticated method of fraud with plastic cards – when they steal a dump (a copy of a credit card) and pin code, and then withdraw money from ATMs. This is a multi-faceted case, so I will describe it in stages and at the same time support it all with photos.
Scammers who work with plastic cards are called "carders", but carding is a fraud with plastic cards. What does a carder need to withdraw money from your plastic card via bakomat? Its full copy or so-called dump (dupm) and your pin code (pin) – a four-digit number that the ATM asks each time to make sure that the card is yours.
You can get a credit card dump various ways, but the difficulty is that the plastic card does not store information about your PIN code, and if you steal only the dump, then it is useless to receive money from an ATM (credit cards without a pin are cashed out in a different way, and this is the topic of another article). This means that the fraudster needs to get a credit card dump along with the PIN, which makes the task much more difficult. You won't be able to get a job as a waiter or salesman and copy credit cards.The client must enter the pin code, and the pin code must become known to the fraudster. You can of course stupidly select a credit card and extract a pin threatening with something dangerous, but firstly this is not subtle, and secondly it falls under the article "robbery" where the terms are much cooler. And where are the guarantees that the "client" will tell the correct code? And even if it is correct, the "client" needs to be isolated somehow, so that he does not accidentally realize that he can call the bank and block the credit card or, even worse for the criminal, dial 02 and catch the thief warm at the ATM. The risk is high, and the card may have a very small amount on it, and it is , usually such "clients" have security guards who can knock on the head.
But an inquisitive mind will always find a way out (and scammers are savvy people). The only place where you can get a dump of a plastic card and PIN is an ATM. The conclusion suggests itself, you need to install special equipment so that it collects information that the fraudster could use in the future to enrich their pockets.
Skimmer – a fraudster's device that reads and stores information from the magnetic tape of a payment card in memory (options: sends an SMS or radio signal). So much for the dump. The skimmer is installed in front of the ATM card reader and is usually designed to match the design of a specific ATM, so that the cardholder does not suspect anything. When a person who wants to withdraw money from the card sticks the card into an ATM, the skimmer reads the data from his card, which gets to the fraudster. Below are photos of skimmers, so that you can better understand what they are:
This is the skimmer that fraudsters can use to get a plastic card dump. But as we found out earlier, one dump is not enough, you also need a pin code. That's why you need to install a skimmer on the ATM, so that you can find out the PIN at the same time as the dump. There are two ways to find out the PIN code of a particular card. The first is the simplest, install a camera next to the ATM, which will shoot the pin being dialed. You can hang a box with booklets on the ATM itself, where the hidden camera is mounted, or for example make a decorative canopy with a hidden camera over the ATM. See photo examples:
The second way is to make a fake keyboard overlay that will look like the real one. This overlay saves (sends) the PIN code. Looking at the photo:
If everything is done correctly and accurately, the client will not even notice that a dump was taken from his card and his pin was recorded, the card will fit into the ATM card reader through the skimmer and the ATM will process it, and a high-quality overlay will be pressed and duplicate what was typed on the real ATM keyboard.
Now we have dumps and pins credit cards, but the ATM has nothing to do with this information, it accepts cards. Next, we need white, clean plastic, on which we will record this information.
I have heard somewhere that they have managed to get hold of ATMs and now they "see" that the plastic is pristine white and stupidly swallow it, so the scammers began to apply a drawing on white plastic with the help of ordinary strings. By the way, I will say by the way that the magnetic tape on credit cards is rewritten, and nothing prevents the fraudster from typing real cards somewhere for a song and writing down information on them, and if by chance the PPS catches this case, then a real credit card is in the hands, and who writes what on it only to God (and the fraudster) it is known. Recording devices are sold quite legally, which is not surprising, since these devices also write a lot of things, such as bonus and discount supermarket cards. Looking at the photo:
By the way, usually included with the reader is a pair of white plastic cards for experiments. It's a small matter, write dumps on white plastic and withdraw money from an ATM. Yes, I foresee the next question, ATMs have cameras. So what? Who forbids a fraudster to make up a little, put on a wig, wide dark glasses and a cap? And in this case, the built-in camera is useless, like a milk goat.
How to protect yourself from this? There is new type card with electronic chip, there is an order of magnitude steeper protection and as far as I know, they are not hacked yet, so ask the bank for a card with a chip and no other way, it may be more expensive, but as you know, a miser pays twice.
Well, a universal way deal with any fraud, it is – CARE. If you see that the ATM card reader is bulging, that the ATM keyboard is unnaturally raised, made "somehow wrong" or moves, booklets are hanging on the ATM (banks themselves do not hang them on the ATM) or something else suspicious, do not be lazy, look for a more reliable ATM. Yes, and you need to use ATMs in crowded places, preferably in large shopping centers or supermarkets, since there are a lot of cameras, and fraudsters usually choose a less risky path and naturally choose some kind of ATM that stands somewhere on the outskirts of the city, than they will risk installing equipment in a large shopping center full of surveillance cameras and security.
