Latest Skimming Attack: Pin Camera found taped behind task light

Advisory Warning

FTSI recently uncovered a skimming attack at an ATM with a pin camera attached by a molded plate taped to the ATM fascia. The molded plate, shown in the image below, was created to look like it was part of the ATM fascia and was attached by double sided tape.

The molded plate holding the pin camera was attached at the top of the fascia behind the task light, as shown highlighted in the image below. The pin camera was able to face downward from this location to capture ATM users typing their pin codes.

It is crucial for branch staff to conduct daily ATM checks every morning and evening and look for signs of ATM tampering. Continue to check for signs of task light tampering by checking the screws of the task lights and making sure they are fully illuminated. A compromised task light will not be fully illuminated and will be partially darkened. 

Pin cameras are still being found in the card orientation window as well. Remember to continue checking the card orientation window for a raised surface and if the orientation sticker is on the outside of the window, as shown below. 

Recommendations and Guidance

Please be aware that these forms of attacks are an industry-wide issue and there is no way to 100% guarantee the protection of your ATMs and your customers. Criminals are constantly evolving the skimming devices to bypass security in place, so it is important to have routine ATM checks to lookout for any signs of tampering. 

The best way to prevent this type of attack is to closely monitor your ATM activity. We recommend having branch staff inspect each ATM every morning to look for signs of suspicious activity. It is important to also regularly review your security footage as well to inspect for any suspicious activity at your ATMs. 

Compare your current ATMs against an image of what the ATM originally looked like to see if any surface changes have been made to it. Feel around the surface of the fascia for any signs of raised surfaces that might indicate a tampered piece might be attached to the ATM. If you notice anything suspicious, please contact local authorities immediately to investigate, and follow up with FTSI to assist in a thorough security check on your ATM fleet.

Please share this information with your branch staff so that everyone is aware of what to be on the lookout for. If you have any questions or would like more information, please reach out to one of the contacts below.