×

Warning

JUser: :_load: Unable to load user with ID: 3286
Thursday, 14 August 2008 15:10

Chip and Pin protection cracked like a rotten foreign egg

By
Chip and Pin has reduced payment card fraud in the UK by £145.8 million to 'just' £73 million in the three years since it was introduced. It has also driven overseas card fraud through the roof: up 77 percent in the past year alone. News of a new criminal exploit could push that figure even higher...

The Dedicated Chip and Plastic Crime Unit (DCPCU) does not have quite the same magnetic attraction as, say, the Flying Squad of old or even the more modern High Tech Crime Unit. Yet this team of specialist police are actively protecting UK citizens from those organised gangs who would clone our credit cards and siphon off our funds.

Perhaps the most important bit of that previous paragraph was use of the term 'magnetic attraction' as this really is at the heart of the latest attempt to bypass Chip and Pin credit card protection.

While Chip and Pin remains pretty much the safest method of making a credit card transaction, until the whole world jumps off the sinking magnetic strip card ship there will always be a risk of fraud.

Even to Chip and Pin card users it now seems.

Although banks covering most of Europe have agreed to introduce Chip and Pin cards by 2010, that still leaves an 18 month window of opportunity for criminals to exploit the insecurity of  magnetic strip cards.

In fact, the window of opportunity is wide open as the USA appears to have no plans to move to Chip and Pin at all.

Which will be good news for the organised gangs which are now targeting petrol stations in the UK for card skimming attacks on Chip and Pin readers. The DCPCU successfully raided an alleged card fraud factory in Birmingham earlier this week.

The Birmingham gang had managed to conceal card skimming devices inside the Chip and Pin readers at a total of 30 retail checkouts, mainly in petrol stations. These work like all card skimming scams of old.

But why bother, when all card transactions in the UK are now done via Chip and Pin? That's where the overseas connection comes in. More, including comment from Detective Inspector John Folan, head of the DCPCU, on page 2...

CONTINUES


As the chip on your card is accessed by the reader for the real transaction taking place, the concealed device also logs all the data including the PIN number as it is entered. When the device is later removed, all that data can be harvested.

The simplest way of doing this is to simply transfer it onto individual blank magnetic strip cards. Much cheaper and easier than complex Chip and Pin cards.

And while these cards can be used overseas to withdraw cash from ATMs, there is little incentive to even bother looking elsewhere.

The DCPCU raid on premises in Edgbaston, Birmingham, revealed stolen Chip and Pin terminals and card readers, cloned magnetic strip cards, dedicated computer software for cloning, and numerous cloned card account numbers.

Jane Milne of the British Retail Consortium said "Customers should be assured that UK retailers always take the protection of cardholder data seriously and are continuing to invest millions of pounds to enhance existing security measures."

While the head of the DCPCU, Detective Inspector John Folan, added “We are sending a very clear warning to fraudsters that these crimes will not be tolerated, and that we will continue to target them and disrupt their fraudulent activity."

Two people have been formally charged in relation to the raid, with conspiracy to defraud.
Read 10640 times

Please join our community here and become a VIP.

Subscribe to ITWIRE UPDATE Newsletter here
JOIN our iTWireTV our YouTube Community here
BACK TO LATEST NEWS here




EXL AI IN ACTION VIRTUAL EVENT 20 MARCH 2025

Industry leaders are looking to transform their businesses and achieve measurable outcomes with AI.

As organisations across APAC navigate the complexities of AI adoption, this must-attend event brings together industry leaders, real-world demonstrations, and visionary panel discussions to bridge the gap between proof-of-concepts and enterprise-wide AI implementation.

Learn how to overcome common challenges in deploying AI at scale.​

Unlock cost savings, efficiency, and better customer experiences with AI.

Discover how industry expertise and data intelligence enable practical AI deployment.

Register for the event now!

REGISTER!

PROMOTE YOUR WEBINAR ON ITWIRE

It's all about Webinars.

Marketing budgets are now focused on Webinars combined with Lead Generation.

If you wish to promote a Webinar we recommend at least a 3 to 4 week campaign prior to your event.

The iTWire campaign will include extensive adverts on our News Site itwire.com and prominent Newsletter promotion https://itwire.com/itwire-update.html and Promotional News & Editorial. Plus a video interview of the key speaker on iTWire TV https://www.youtube.com/c/iTWireTV/videos which will be used in Promotional Posts on the iTWire Home Page.

Now we are coming out of Lockdown iTWire will be focussed to assisting with your webinars and campaigns and assistance via part payments and extended terms, a Webinar Business Booster Pack and other supportive programs. We can also create your adverts and written content plus coordinate your video interview.

We look forward to discussing your campaign goals with you. Please click the button below.

MORE INFO HERE!

BACK TO HOME PAGE

Share News tips for the iTWire Journalists? Your tip will be anonymous

Subscribe to Newsletter

*  Enter the security code shown: img0

WEBINARS & EVENTS

CYBERSECURITY

PEOPLE MOVES

GUEST ARTICLES

Guest Opinion

ITWIRETV & INTERVIEWS

RESEARCH & CASE STUDIES

Channel News

Comments