[deleted]

The vast majority of you wouldn't notice. It literally just slips on and looks almost identical. It takes half a second to install, you ever turn your back on someone?

You don't think that someone distracts the cashier while another person installs the skimmer? It's not like these stores are overstaffed.

Whenever possible I use the tap to pay option. I don’t trust card reader slots.

This might be a silly question but if you use the Tap to pay option can the skimmer still get your info? I was under the impression the skimming device took over the whole unit not just the "insert card" option.

I think tap to pay (and chips) work similar to a 2fa app on your phone, they generate a secret code every time you auth a payment so that the info can’t be stolen and reused through that method, though I might be wrong. When you swipe your card, the full card number is included which is why it can be reused

It’s my understanding that the skimmer picks up the info that’s inserted but not tapped. But I could be wrong and we are all fucked.

[deleted]

Always tap to pay! The 7-Eleven terminals accept tap. Even better if you can use Apple/Google/Samsung pay

Correct. Also added benefit of a public private key exchange to counter a man in middle listening in. Basically a lot more layers to make it a pain in the ass for would be attackers.

These skimmers work by grabbing info off your cards mag strip. Scratch that damn thing off. If you need the mag strip you shouldn't be shopping there.

Edit: I like how people are downloading me even when Mastercard is now encouraging partners to not include a mag strip.

The simple fact is currently the EMV chip cannot be skimmed. Those readers work on you sliding your card in and out and reading the mag strip.

Do not shop at places that want you use a mag strip. That means they are not EMV compliant. Which makes them 100% responsible for any reports of credit fraud, they do not get an appeal. The sad part is that it's not even expensive to become compliant.

So why would you shop at the credit card equivalent of an OSHA violator. Hell even the speed way on Dot ave is compliant, and it's falling apart.

[deleted]

Because no one knows what EMV actually is, than alone PCI compliance.

Why is that better?

Friendly reminder that you shouldn't use a debit card for day to day transactions like this whenever possible, especially at frequently hit businesses like 7-Eleven and gas pumps.

Even though they are zero-liability and that you should receive a full refund once the fraud investigation completes, you are out of your own money from your personal checking account if your debit card info gets stolen.

On a credit card, it is still the bank's money at that point and the charge is suspended while it is investigated.

It’s unlikely the skimmer can intercept the tap info and even if it could the info isn’t gonna be useful to a scammer, they can’t use it to make further purchases

[deleted]

PIN for debit card transaction but not if you specify that it’s a credit card transaction.

I wish banks had ATM cards again like back in the day. I never use my debit card for purchases and very, very rarely use it for ATMs. Used my debit card in an ATM once and the next day my bank detected a fraudulent purchase online with it. Even though I check for skimmers I'm fairly certain the ATM had one that was well hidden.

Skimmers, as far as I have seen, require a magnetic strip.

To skim chips would be way more complicated and less likely to be done.

Use Apple Pay. Makes a burner card for every transaction

Of course I see this right after shopping at one of these 7-Elevens.

i go to the 7/11 on comm ave multiple times a week😭

change your habits to default to contactless mobile pay (google pay, samsung pay, apple pay) or the tap to pay on your CC itself (if it has that wifi looking icon).

also acceptable is dipping your CC into a chip reader. make sure you're only inserting the tip.

*DO NOT* swipe your CC in 2022. it is the equivalent of clicking on the link inside a spam text. that goes double for at sketchy locations like gas stations and temporary ATMs. however card skimmers still do show up on bank ATMs and boujee stores like target.

when you swipe, your CC details 1) may have been intercepted by a skimmer as mentioned in the story, 2) are going to sit for years in the database of some payment processor with unknown security practices.

Fuck me, I go to the one on Cambridge St a lot. Glad I use tap to pay I guess.

They still do! I had one from citizens up until recently.

They can do it with RFID now. Happened to me a couple months ago in New York, I didn't use my card at all for anything and it still got skimmed.

I've heard of people running charges by tapping pockets but they got your full credit card info?

Debit card, I was staying with my fiance and one of their roommates snagged the info. I never left my wallet unattended even to go to the bathroom because the people living there are pretty disreputable so it had to have been contactless. Started getting small charges from bodegas and the landlord found receipts in the dudes room with my info on them for stuff I didn't buy. Did a little research and apparently it's possible to scan from 10 ft away then clone the info onto a blank card so you can physically use it.

Not sure about #2, that would be a pci violation to store the track data after its use