RSA 2009: Fake chip and PIN readers hit UK

Fraudsters are being given a fake chip and PIN reader cheaply in return for giving the criminal supplier a share of the data.

credit card lock

A security researcher has warned people to beware of fake chip and PIN readers swapped for real devices in the UK and around the world.

Uri Rivner, head of new technologies at RSA, said that criminals were stealing credit card data using fake Point of Sale (POS) devices.

RSA had also seen a new business model for the crime, where the suppliers of the readers and those using them against customers would both get a cut of the profits.

Advertisement - Article continues below

The fraudster at the POS would get one of the card readers subsidised from a criminal supplier, and swap it for a real device at the targeted store or restaurant in question. When a real customer swiped the card, the reader would work exactly as you would expect a real chip and PIN device to behave.

Speaking at RSA Conference Rivner said: "When a real customer swipes a card it will be like everything is okay. All of the cards will actually work, but all of that information will go to a web server. The mothership where all of this data is collected."

The operators would also have the chance to earn money from the fraud, as they would keep about 30 per cent of the credit card data.

Advertisement
Advertisement - Article continues below

"It's not phishing, it's not trojans it's very physical," said Rivner. "But on the other hand it's a very new business model where information resides over the internet."

Featured Resources

The case for a marketing content hub

Transform your digital marketing to deliver customer expectations

Download now

Fast, flexible and compliant e-signatures for global businesses

Be at the forefront of digital transformation with electronic signatures

Download now

Why CEOS should care about the move to SAP S/4HANA

And how they can accelerate business value

Download now

IT faces new security challenges in the wake of COVID-19

Beat the crisis by learning how to secure your network

Download now
Advertisement

Recommended

Visit/security/encryption/355820/k2view-innovates-in-data-management-with-new-encryption-patent
encryption

K2View innovates in data management with new encryption patent

28 May 2020
Visit/software/video-conferencing/355410/zoom-50-adds-256-bit-encryption-and-ui-refresh
video conferencing

Zoom 5.0 adds 256-bit encryption to address security concerns

23 Apr 2020
Visit/security/hacking/355382/whatsapps-flaw-shoulder-surfing
hacking

WhatsApp flaw leaves users open to 'shoulder surfing' attacks

21 Apr 2020
Visit/security/cyber-security/355368/microsoft-builds-ai-to-detect-security-flaws-with-99-accuracy
cyber security

Microsoft AI can detect security flaws with 99% accuracy

20 Apr 2020

Most Popular

Visit/operating-systems/microsoft-windows/355812/microsoft-warns-against-installing-windows-10-may-2020
Microsoft Windows

Microsoft warns users not to install Windows 10's May update

28 May 2020
Visit/security/cyber-security/355797/microsoft-bans-trend-micros-rootkit-buster-from-windows-10
cyber security

Microsoft bans Trend Micro driver from Windows 10 for "cheating" hardware tests

27 May 2020
Visit/policy-legislation/data-protection/355835/nhs-yet-to-understand-the-risks-of-holding-test-and-trace
data protection

NHS yet to understand risks of holding Test and Trace data for 20 years

29 May 2020