News

New guide standardizes terms for ATM skimming device placement

The use of uniform terminology will assist in the reporting and analysis of card data compromise devices, EAST says.

June 12, 2015

Early skimming devices generally were simple overlays at the card reader throat. But as skimming technology has evolved, device placement has moved to other locations — both external and internal — around the card reader.

To assist in the reporting and analysis of card data compromise devices, and to set a common standard for describing their placement, the European ATM Security Team has developed a "glossary of terms" of sorts for the industry and law enforcement. 

The new document, "Standardization of Terminology for locations of Card Data Compromise devices at ATMs," was compiled by members of the EAST Expert Group on ATM Fraud, a press release from EAST said.

The guidelines can be applied to various types of ATM card compromise devices — both digital and analog, external and internal. These include eavesdropping devices used to tap data at card reader preread and read heads, and card reader electronics, and "shimming" devices that read data from a smart card chip or perform a relay attack.

EAST members may download the new guidelines from the EAST Intranet; a version for wider circulation is also available.

EAST associate membership is free for law enforcement officers.