Does the ATM look “normal”? This is how they steal your data and cash

At the end of October, there was a series of thefts from customer accounts of one of the popular banks. The trail led not to hacked applications, but to “old” methods – ATMs modified for skimming. Fraudsters used special overlays and recording elements to capture card data and PIN codes. As a result, investigators investigated approximately 600 transactions for a total amount of PLN 2 million. The nature of the case was particularly disturbing because the victims had their cards with them all the time and the money disappeared through cash withdrawals.

What is skimming?

Skimming involves copying the contents of a magnetic stripe or payment card details without the owner’s knowledge. To complete the “set”, criminals also need a PIN – its viewing is made easier by miniature cameras hidden next to the reader or fake keyboard overlays. Having complete information, fraudsters create duplicate cards and make withdrawals without the customer’s knowledge. Although the method has been known for years, it can still be effective, especially when the ATM modifications are aesthetically pleasing and difficult to notice.

That’s why a video published years ago showing what an “infected” ATM might look like has become popular again. What attracts attention are elements that should not be there: protruding frames next to the card reader, suspicious strips above the keyboard or unusual mountings. However, they cannot always be recognized at first glance, which makes it even more important to be careful with each withdrawal.

How to protect yourself?

How to minimize the risk? First, avoid devices that appear tampered with or damaged. Before inserting the card, take a few seconds to visually inspect the reader and keyboard – carefully check whether the elements are not “moving” or artificially inserted. Secondly, always cover the keyboard with your hand when entering the PIN, so that a possible camera does not record the sequence of numbers. This is a simple activity that can eliminate all the hardship of criminals.

If you notice any suspicious parts in the ATM or any irregularities in the operation of the machine, immediately notify the bank that owns the machine. Reporting can protect other users from losing their savings and help secure equipment faster. If you discover unauthorized withdrawals, do not delay in blocking the card and filing a complaint with the bank.

The most effective way to avoid skimming is to limit the use of your physical card at an ATM. More and more devices support contactless withdrawals, which reduces the risk of data interception. An equally safe alternative is BLIK, where authorization is done with a one-time code and the card data is not used at all. In practice, this means almost complete protection against magnetic stripe copying and PIN viewing.

The series of October thefts reminds us that threats do not only concern the online world. A modified ATM is a real risk in public spaces. Conscious habits – briefly checking the device, covering the PIN, choosing contactless or BLIK withdrawals – significantly reduce the chance of losing funds. It is worth implementing them with every transaction, especially in high-traffic places where fraudsters count on haste and inattention.