Skimming Attacks with Task Light Pin Camera

Advisory Warning

FTSI recently uncovered a skimming attack at an ATM with a pin camera installed in the ATM’s task light. The original ATM task light had been completely removed and replaced by a replica, shown below, with the pin camera facing downward at the pin pad where the task light security screws would normally be.

The skimming device shown below was found inside the bezel, and is a new type of skimmer that is thin enough to bypasses the Card Protection Plate and can be inserted without having to file down the bezel.

It is crucial for branch staff to conduct daily ATM checks every morning and evening and look for signs of ATM tampering. Look for signs of task light tampering by checking the screws of the task lights and making sure they are fully illuminated. A compromised task light will not be fully illuminated and will be partially darkened. 

Pin cameras are still being found in the card orientation window as well. Remember to continue checking the card orientation window for a raised surface and if the orientation sticker is on the outside of the window, as shown below. 

Recommendations and Guidance

Please be aware that these forms of attacks are an industry-wide issue and there is no way to 100% guarantee the protection of your ATMs and your customers. Criminals are constantly evolving the skimming devices to bypass security in place, so it is important to have routine ATM checks to lookout for any signs of tampering. 

The best way to prevent this type of attack is to closely monitor your ATM activity. We recommend having branch staff inspect each ATM every morning to look for signs of suspicious activity. It is important to also regularly review your security footage as well to inspect for any suspicious activity at your ATMs. 

Compare your current ATMs against an image of what the ATM originally looked like to see if any surface changes have been made to it. If you notice anything suspicious, please contact local authorities immediately to investigate, and follow up with FTSI to assist in a thorough security check on your ATM fleet.

Please share this information with your branch staff so that everyone is aware of what to be on the lookout for.