A work collegue let me know that a card skimming device was found on an ATM in Post-office square this week.

I log in to check my account and low and behold...$750 withdrawal from Sydney 2 days ago and about 8 account enquiries fees from other banks. Got straight onto the phone to my bank to stop the card and have it investigated by the fraud division. Annoying thing is that I won't hear a result on this until 4-6 weeks time.

This has happened to my fiance's workmate yesterday and also found out one of my workmates had it happen to her when she checked accounts tonight.

Has this happened to anyone else recently? Have you checked your account for this that seems to have happened in the last few days?

What position does this put the bank in...Do they legally have to reimburse the money? I'm hoping so as it is their ATM security that is the flaw here.

You talking about the ones in the food court?

Have used all those ones :s

yes they have to. It's your money and you didn't authorise the withdrawal.

I use the suncorp atm out the front of post office square.

its the damn eastern europeans

Yep the CBA one in the food court.

here's a pic of what some look like. I was always wondering how someone could not notice something attached to the machine but after seeing this I can see why. Damn that's awesome.

http://www.members.optushome.com.au/gpahl/skimmer.jpg

Yep the CBA one in the food court.

wow, use that one fairly regularly.

Thats pretty impressive tho, that place is never quiet.

i guess thats why they say if you want money out, get it from coles or woolies when you do your grocery shopping

Ouch, I use the Suncorp ATMs in Post Office square quiet regularly. I'm familiar with the devices though, so I'd notice a skimmer. Thanks for the heads up!

^ Card skimmer

Heh, ever since I first heard about this happening on news if I see anything protruding where I put the card in I grab it and try to rip it off before I put my card in.

card skimming is fun!

http://i43.tinypic.com/1zxpbw1.jpg

(also failing at image editing)



last edited by 3x0dus at 04:06:39 15/May/09

the card i use day-to-day never has more than a few hundred bucks in it
i xfer cash to the account via the iphone if i ever need to make a bigger purchase y0

you're not paranoid if they're out to get you

Warning Educational

This is a good reason for standardisation of ATM designs. If they all looked the same, you'd much more easily be able to tell if one of them was suss.

Warning Educational

Oh nice! I saw this PDF a few weeks ago after it was leaked from an CBA employee as it was an internal document. Nice to see the CBA putting it up online for everyone to see though.

The pin hole camera in the brochure holder is pretty epic.

thats cool teq, but what about those of us that aren't poorby's?

Yeah same Ticman but I did a quick search before posting the leeked one and found CBA had released it

Just got word, someone at work got stung by it too.

That CBA guide thingy is awesome.

thats cool teq, but what about those of us that aren't poorby's?

not sure what you're getting at?

i keep my phat stax in one account which is only accessible from the internets, i xfer cash from that to my savings/visa whenever i need to spend it

cash is king baby!

thats cool teq, but what about those of us that aren't poorby's?

Posting to agree with teq. Your logic was flawed and I'm glad teq pointed that out.

sucks you lost your money but it's a pretty awesome scam they have going

ever since i was a kid and saw terminator 2 i thought how sick would it be to just plug in your laptop and get free cash and this is almost the same!

(ps: except it's really stealing, so that sarks)

ever since i was a kid and saw terminator 2 i thought how sick would it be to just plug in your laptop and get free cash and this is almost the same!

except for the bit about plugging the laptop in, its exactly the same!

holy s*** its DeePer

Why don't they show a picture of what the ATM is meant to look like when you first go up to it? On the screen I mean, not stuck on to the machine - that wouldn't work.

^^ actually a good idea. Must say some of these devices are pretty bloody cleverly designed.

Why don't they show a picture of what the ATM is meant to look like when you first go up to it? On the screen I mean, not stuck on to the machine - that wouldn't work.

not a bad idea, though the picture would have to be detailed enough to show intricacies. If they made the things dead flat and touch screens (like a big vertical iPhone) it'd be a piece of cake to tell if it was tampered with

well glad i've seen the pics.. at forst i thought they would be s***ty and easy to see.. but looks like i gotta be careful when using this s***

If they made the things dead flat and touch screens (like a big vertical iPhone) it'd be a piece of cake to tell if it was tampered with

except they could record you kestrokes visually (easy), or could put a transparent touch sensitive film over it (hard)..

imo
card + pin + iphone app/fob device like the blizzard authenticator.
Skimming instantly fails ...

Doesn't prevent stealing it then beating you until you cough up the pin before they kill you and throw you in the river, but if that happens then I doubt the lost money is much of an issue.

Why don't they show a picture of what the ATM is meant to look like when you first go up to it?

heh they could just put a fake picture over the top of it.

Not if it's part of the computer program.

lol didnt read his second sentence

Alot of people are required to use a token generator to log into netbanking, i'd be happy to use it when I'm at the atm as well.

Though I guess building one on to the card would work just as well; either way they have to physically steal something off you in order to access your account, rather than just swiping the number on the magnetic stripe and your pin number.

Do the chipped cards you can get these days have this functionality I wonder? They should, if they don't.

They could only access the account if they managed to log in before the token last used expired... and you could stop that by enforcing a policy whereby a user couldn't log in again for the expiration duration (so you wouldn't be able to log in for say, 60 seconds after you removed your card)

last edited by icewyrm at 00:48:08 16/May/09

I'm a CBA employee and I saw this PDF document a few weeks ago. I've been paranoid checking every ATM I've used since, but it still didn't stop me being skimmed for $750! I've got to admit, the guys running this scam are pretty switched on. Spoke with the Queen street branch manager today and he said that hundreds of people have been caught out. More coming in every day enquiring about it.

Guess the only way to really be safe is to cover up your pin number from anyone or any camera around.

pretty sure that fake pad on top of normal keypad is to get ur pin?

mate of mine got done, took out everything they could;

cba machine in post office square;

video of one being installed

The only semi recent police report on it

yer, havent seen anything in the news about this yet;

Thanks for this thread. It has made me realise how I am waaay too casual when it comes to withdrawing cash.

Guess the only way to really be safe is to cover up your pin number from anyone or any camera around.Guess the only way to really be safe is to cover up your pin number from anyone or any camera around.

nope, won't save you from fake keypads that skim your pin.

Interesting thing I heard the other day that this is apparently starting to become a problem with the eftpos machines cabbies use as well :/

Interesting thing I heard the other day that this is apparently starting to become a problem with the eftpos machines cabbies use as well :/

oh s***..

so they got your card number and pin.

how are they withdrawing the cash?

you cant just punch in your card number into an atm, you can with eftpos machines but you need still need to give them your eftpos card as proof, and even then only like 5% of store people will continue with the transaction.

edit: guess they are making counterfeit cards?

last edited by $ack at 11:34:44 16/May/09

token key ring generators are the future.. which company makes them so i can cash in please

edit: guess they are making counterfeit cards?

.

Yes. Quite easily.

you cant just punch in your card number into an atm, you can with eftpos machines but you need still need to give them your eftpos card as proof, and even then only like 5% of store people will continue with the transaction.

edit: guess they are making counterfeit cards?

Its very easy.

For 800 you'll get a fully featured mag strip encoder. 400 will get you something cheaper but probably just as likely to work.

And since these machines are unattended, they don't even need to print or impress the cards. mag strip ... done

The other day the Neighborhood watch newsletter that ends up in our mailbox every few months mentioned this. At the time I thought it must have just been an isolated thing.. but wow, its quite scary.

Teq has the right idea, I do the same thing. I have a savings account and spending account. The savings account is not linked to any card, and it can only have money transferred out of it (to my spending account) by internet banking. Like teq, i just keep all my money in the savings account and transfer it as needed. The benefits are twofold; 1) My money is always all in the interest account, accruing as much as possible.. and 2) Anyone trying to get unauthorized access to my funds isn't going to find anything in there.

that uk crime / con show did an awesome one... just set up their own fake atm.

For 800 you'll get a fully featured mag strip encoder. 400 will get you something cheaper but probably just as likely to work.

i bought a 2 track reader/write about 9years ago for $1500. 1 or 2 track readers where about $100 then. only need the reader on the machines. its too easy to clone cards.

last edited by mooby at 17:35:46 17/May/09