Mutual One Bank Content

Source: FDIC

How to help protect yourself from high-tech thieves who steal account information

You may have heard in the news that automated teller machines (ATMs) are being targeted by criminals who secretly attach high-tech devices to the machines in order to record consumers’ keystrokes and steal or, as it is sometimes called, “skim” personal identification numbers (PINs) along with credit or debit card account numbers. In addition, criminals are known to add similar devices to credit or debit card readers at checkout registers, especially at gas stations, convenience stores or other merchants where customers may be in a hurry and not notice or take the time to report something suspicious.

“Security experts and law enforcement officials warn that card skimming is present in many communities,” said Michael Benardo, manager of the FDIC’s Cyber Fraud and Financial Crimes Section. “With the information that can be skimmed, a thief can go on an online shopping spree or sell that valuable data to other con artists.”

And how do thieves retrieve the data they gather? Some return to the scene of the crime to remove their devices, while others can communicate electronically with their hardware using a laptop or mobile phone and wireless connections.

Through the years, FDIC Consumer News has warned readers to be on the lookout for keystroke-recording devices on ATMs or checkout registers.

Here’s a reminder of the different kinds of skimming devices and what to look for:

Card-reader overlays: The most common ATM skimmer, and perhaps the easiest device to detect, is the card-reader overlay. It is made of plastic and fits over the slot where you insert your card. As you insert your card, the device reads the data from your card and stores it. How can you tell if there’s an overlay hiding an illegal card reader? “Before inserting your card, look at the card reader for signs it has been altered,” said Amber Holmes, a financial crimes information specialist with the FDIC. “Be suspicious if your card doesn’t easily go into the machine or if the card reader appears loose, crooked or damaged, or if you notice scratches, glue, adhesive tape or other possible signs of tampering.”

Hidden cameras: While banks typically have security cameras near their ATMs to keep an eye on the area, thieves sometimes hide tiny cameras on or around ATMs. “If positioned correctly, a brochure holder on an ATM is the perfect place to hide a mini-camera that can record PIN numbers as customers type them,” warned Benardo. “Also check for tiny holes in the ATM housing or in something else that looks like it was hastily stuck onto the ATM to cover a small camera.”

PIN-capture overlays: Criminals have been known to attach dummy keypads over an ATM’s real keypad to record and capture PIN numbers as they are entered. The keypad might be fake if it looks too thick or different from what you’re used to seeing.

Fake ATM faceplates: Some thieves go as far as placing a fake ATM cover that could contain card-reader overlays, hidden cameras and PIN-capture overlays over some or all of a real, fully operating machine. “The best way to determine if an ATM has a false cover is to look for flaws like loose wires, seams that are not flush and slots or keypads that look out of place,” said Holmes.

What should you do if you believe your debit or credit card account has been compromised?

There are consumer protection regulations that can help. For example, the Electronic Funds Transfer Act (EFTA) and the Consumer Financial Protection Bureau’s (CFPB’s) “Regulation E” limit a consumer’s liability for losses from unauthorized transactions using his or her ATM or debit card or card numbers. If your debit card or the card number is used to make an unauthorized withdrawal from a checking or savings account, you can minimize your losses by contacting your bank as soon as possible. Your maximum liability under the EFTA is $50 if you notify your bank within two business days after learning of the loss. If you wait longer, you could lose more, according to the law. If it’s your credit card number that is used without your authorization, your liability is normally capped by the Truth in Lending Act (TILA) and the CFPB’s “Regulation Z” at $50 for all unauthorized transactions, and remaining credit card losses are typically absorbed by the card issuer.

“Even consumers who know the telltale signs of a skimming device may inadvertently use an ATM or a sales terminal that has been tampered with. That’s why it’s great to know that there are consumer protections available,” said Tracie Greenway Morris, an FDIC senior community affairs specialist.

Some other worthwhile precautions you can take include:

• Do not use an ATM or a credit or debit card reader if anything looks suspicious, such as loose or extra parts. Alert the machine owner or the police immediately.
• Avoid ATMs in remote places, especially if the area is not well lit or not visible to security cameras and the general public. “ATMs in secluded locations are more likely to be altered,” Benardo said.
• Go elsewhere if you see a sign directing you to only one of multiple ATMs in a location. It could be the machine that was tampered with by a crook.
• Shield the keypad with your hand when typing your PIN at the ATM or a retailer’s checkout area. Doing so won’t protect you from skimmers who use keypad overlays, but it will block the view of a hidden camera.
• Regularly check your bank and credit card accounts for unauthorized transactions, even small transactions that you think might not be worth reporting to your bank. “Thieves might make low-dollar withdrawals or charges as a way to test a counterfeit debit or credit card before they use it for big-dollar transactions,” Holmes explained. “If you spot a potential problem, notify your bank as quickly as possible.”

Source: Federal Trade Commission

Mobile payment apps can be a convenient way to send and receive money with your smartphone. These apps have become very popular — and scammers may try to use them to steal your money. Find out how mobile payment apps work and how to avoid sending money to a scammer.

How Mobile Payment Apps Work

You may have heard of mobile payment apps like Venmo, Cash App, or PayPal that let you send and receive money through your smartphone (or online). If you haven’t used one before, here’s how they work.

First, you download the mobile payment app, and create an account. You’ll have to choose a payment method or source of funds, like a bank account, a debit card, or a credit card.

Once you set up the account, you can send and receive money. When someone sends you money, the money doesn’t go directly to your bank account. It gets added to your balance in the app. You can leave the money there to use later or transfer it to your bank account.

How To Avoid Sending Money to a Scammer

Some scammers may try to trick you into sending them money through a mobile payment app. That’s because they know once you do, it’s hard for you to get your money back.

Scammers might pretend to be a loved one who’s in trouble and ask you for money to deal with an emergency. Others might say you won a prize or a sweepstakes but need to pay some fees to collect it.

Keep this advice in mind if you send money through a mobile payment app:

• Don’t send a payment to claim a prize or collect sweepstakes winnings.
• Don’t give your account credentials to anyone that contacts you.
• Protect your account with multi-factor authentication or a PIN.
• Before you submit any payment, double-check the recipient’s information to make sure you’re sending money to the right person.
• If you get an unexpected request for money from someone you do recognize, speak with them to make sure the request really is from them — and not a hacker who got access to their account.

How To Avoid Sending Money to a Scammer

If you find unauthorized payments or think you paid a scammer, here’s how to report it to the mobile payment app.

• Cash App. Cash App recommends chatting through their app for the fastest service. To do so, open the app, go to your profile, and choose Support. You can also get help through cash.app/help or by calling 1 (800) 969-1940.
• Venmo. Venmo recommends chatting through their app for the fastest service. To do so, open the app, go to your profile, and choose Get Help. You can also email Venmo through their contact form or call them at 1 (855) 812-4430.
• PayPal. Report it online through PayPal’s Resolution Center or call PayPal at 1 (888) 221-1161.

Report It to the FTC

If you paid a scammer with a mobile payment app, report it to the Federal Trade Commission at ReportFraud.ftc.gov. When you report a scam, you help the FTC and other law enforcement agencies stop scams.