07 February 2016

Fraudsters rigging Chip and PIN terminals to steal data - report

13 October 2008  |  13815 views  |  0 PED cradle

Hundreds of Chip and PIN terminals in shops and supermarkets across Europe have been rigged by criminals and used to steal shoppers' card details, according to US national counter-intelligence executive Joel Brenner.

Brenner told UK broadsheet The Daily Telegraph that an international criminal gang is suspected of tampering with the Chip and PIN devices during the manufacturing process in China.

The machines have been doctored and resealed perfectly - making it impossible to tell there is anything wrong with them - before being shipped to Britain, Ireland, the Netherlands, Denmark and Belgium.

The terminals have copied the account details and PIN numbers of thousands of cards over the past nine months, with the data sent to fraudsters in Lahore, Pakistan, via mobile phone networks, says the Telegraph.

The card details are then used to pay for Internet purchases or to make cloned cards to withdraw cash. Brenner says the scam has seen tens of millions of pounds stolen from accounts over the last few months.

The Telegraph says an investigation by Mastercard is thought to have found several of the doctored terminals at British branches of supermarkets Asda and Sainsbury's.

Retailers have weighed thousands of machines to find doctored machines - units which have been tampered with are slightly heavier than clean ones, says the paper.

Brenner told the Telegraph the scam is so sophisticated that "previously only a nation state's intelligence service would have been capable of pulling off this type of operation".

Brenner has called for Chip and PIN machine manufacturers to do more testing and to "guard that supply chain in ways that people guard the movement of jewellery".

In August UK police raided a counterfeit card factory in Birmingham and seized equipment that could be used to compromise retailer Chip & PIN terminals. Two suspects were arrested and charged with conspiracy to defraud.

Later that week a third man was arrested, believed to be the engineering brains behind a sophisticated programme to read and transmit customer PINs as they are entered at compromised Chip and PIN terminals in retailer check-outs.

Chip and pin scam 'has netted millions from British shoppers' - The Daily Telegraph

Comments: (0)

Comment on this story (membership required)
Log in to receive notifications when someone posts a comment

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board, sign up now.

Related stories

05 September, 2008
18 August, 2008
13 August, 2008
25 July, 2008
28 April, 2008
27 February, 2008
06 February, 2007
05 January, 2007
29 August, 2006

Related company news


Top topics

Most viewed Most shared
Fintech rising: Resistance is futile, says...
10399 views comments | 48 tweets | 40 linkedin
Digital transformation driving earnings at...
8826 views comments | 42 tweets | 35 linkedin
ECB eyes up European P2P payments
7663 views comments | 28 tweets | 38 linkedin
Visa opens up to developers
7165 views comments | 23 tweets | 40 linkedin
It may take ten years, but blockchain tech...
6134 views comments | 20 tweets | 19 linkedin

Featured job

to $120K base, double OTE, benefits
New York City, NY or Boston, MA (USA)

Find your next job