Identity Theft and Plastic Card Security

I was recently the victim of identity theft by a local unknown a few cities away from me. I went to check my balance at an ATM and saw the balance was $0. I went to the bank, checked the transaction history and saw the person had used an ATM about 45 minutes away that morning without having the card in their possession. I changed cards and filed for fraud abuse with the bank who is hopefully going to reimbure soon; hopefully it won't happen again. My only idea as to the person is a possible family member, but I have no proof, only speculation. What should I do to avoid future financial loss? I'm already going cash only for the time being and won't be using the card if I can help it.

Watch out for any weird behaviour of ATM's. Stuff like modified card insertion slots. Try to see if the ATm has any cameras on itself that are not supposed to be there. Don't let people shoulder surf you while being on an ATM.

>>1005 Ask the bank if you can get footage of the person using the ATM, see if it's someone you know.

>>1006 Oh, and if you have tap-and-go on your card, have it disabled, I believe there are gadgets that'll access your card while it's still in your pocket.

>>1007 I'm not sure it has that. It's a new chip-based card and I only just got it.

>>1008 If it has a symbol on it that looks like a common symbol used for wireless/wifi then it supports tap-and-go. You don't really need to disable it, it's actually a pretty handy feature. Just stick a bit of tin foil into one of the pockets in your wallet out of the way. This will stop the card from being read when it's in your wallet. You can just stick a small piece (maybe 3/4 size of a credit card) into the back of one of the wallet's card holders. If you want to test it out, download the "NFC Tag Info" app for android and see if you can read the card when it's outside the wallet, in the wallet, and in the wallet with a layer of tin foil. You'll want to make sure the card is protected from all sides of the wallet.

>>1011 I don't see a wi-fi symbol on it. I don't think I'd really want the convenience of it anyways.

>>1023 After reading https://aediot.github.io/#fraud1 I think it's a good idea to disable that feature. How would one go about it? Call the bank?

>>1007 I can't believe those even exist or that anyone that it was a good idea.

I find the feature quite convenient. So long as the card is protected in your wallet all should be good. The way I look at it is that it means I don't have to go putting my pin into potentially compromised machines everywhere. There's a limit usually around $30 on how much can be spent using the feature.

>>1030 I can turn mine off from my banking app, it only blocks the transaction from completing at the bank end, the NFC is still active

RFID blocking wallet / passport holder (make sure the frequencies blocked are applicable to your use case) call the major credit bureaus and get your credit frozen. The "protections" in place for it normally are bullsoykaf. Also pick your phone provider very carefully and set up a secret code with them for porting numbers if possible. just my two cents.

>>1002 Literally any ghettolicouse cashier could be the culprit also, and is most likely the case.

>>1042 How common are RFID carding attacks? It seems like mostly hype to me, carders could just buy dumpz and not have to go through the process of setting up a RFID scanner and such.

>>1061 I Imagine it's virtually impossible for leos to separate cases of rfid scanning from a distance vs those fake scanners that people put on registers / atms so frequency of use would be difficult to determine. my rationale is that there are plenty of rfid scanner tutorials like https://www.bishopfox.com/resources/tools/rfid-hacking/attack-tools/ though and there have been tests that show the chips in passports can be scanned from 200+ feet. When I think about what "people" can learn about me that way, investing a few extra dollars in an rfid blocking wallet /passport seems reasonable. EFF still has some passport one iirc. I have one for my phone too, so maybe i'm paranoid? YMMV

>putting money in a bank Your first mistake

>>1002 Check for card skimmers whenever you use a card reader. Skimmers are card readers that are placed over the device's actual card reader. They're usually designed to look just like the normal reader. You can check for skimmers by looking at the design and tugging on the reader. If you tug on a reader and it's loose, there's a good chance it's a skimmer, since they're usually either popped into place or secured with glue/tape. You should also look for PIN pad overlays. These are PIN pads that are placed over the number pad and record which numbers you press. Look for small cameras that can see the number pad, too. With the rise of touch screen ATMs, the people who make skimmers have started putting cameras near the devices that record you entering your pin.

Don't banks in burgerstan have customer protection? Something like - Uhm, mr tech support, someone withdrew money from my card, I swear on me mum it wasn't me. Wat do? - Hold on sir, I'll check that. Last transaction to Lesotho for $500 000, right? - Yes, that's it. Cancel please. - Will be done in a minute. Please come to our nearest office and reissue your deit/credit card. it would be better if you choose our new 2-factor authentication with SMS verification and security token for your transactions. Have a nice day. - K tnx bye.

>>3139 if someone steals your identity you can usually get the credit card company to do a charge back and reimburse you there's really no security on the actual card though, only the number, expiration date and 3 digit code matter, and you just need 2 out of 3 to use a card that's why my money's in btc and eth, fuarrrk banks and credit cards, they're so insecure i have no idea how people put up with them i'll take a 4096 bit gpg key over a 3 digit security code or a zip that's public record any day of the week

>>1007 >>1031 Maybe if you weren't behind by 20 years, you would know that they are limited to like 20€. You can steal dust and if you get caught, good luck. >>3139 That's what is baffling as well. This would take a month at most everywhere. >>3147 Some people like to pay in shops, not wait days to have their transaction done and not pay fees with every transaction. You realize that you can steal almost anything when you uncover every security element of it... Only the wallet.dat in case of Bitcoin. OP ignored every precaution and just handed over/pushed in the card in obviously ATM that was tampered with.

>>1002 >What should I do to avoid future financial loss? checc ur card readers Don't just "randomly check your balance" at ATMs perhaps cashless a good

>>1002 >bank looks like you got skimmed brah

On the topic of duplicating and capturing card information, are there any solution-in-a-box reader/writers floating around for mag strips? All I've been able to find are in the range of $120-160 USD, coming from China. Being so pervasive, there's no way that's the case. RFID is half that price for the high end USB development equipment. Low end duplicators are as low as $10. What gives?

>>1002 First of all, check the pin area (number keys) if it has this transparent cover - it's a keylogger. Others use nano camera, advanced ones use sound recorder. Just sound. the card slot is easier to fool. Anyone can insert something in there thin as paper to copy your card and since the machines are dumb they won't know (if i were them i'd put a laser sensor at the machine to prevent this. The attacker will then draw out all the money on a lowsec machine (no security cameras)

Card sniffing is also an attack vector that is more commonly being exploited in meatspace. It is when the attacker uses a high-powered Near Field Communication [NFC] antenna that is capable of sniffing information from the card wirelessly. Simply by bumping into your back pocket. A small and very effective way to stop card sniffing attacks would be to disable the NFC [AKA; Tap Feature] technology. There are only two ways to achieve this. Contact your bank and request that they send you a new card without the NFC technology. Or my preferred method, disabling the NFC antenna thats on the inside of the card itself. PDF related.

>>3950 Supply and demand, bucko. Although I seen a cheapo phone mic card reader I didn't find a cheapo writer. Maybe you can make your own from the reader?

>>4081 >>3950 http://www.gae.ucm.es/~padilla/extrawork/magwrite.html This might help