In light of an increase in skimmer attacks, Hyosung encourages you to review the nature attacks, your risk exposure and steps you can take to protect your fleet.

The Threat

There are 3 types of skimmers, all designed to read Track 2 data from the customer’s card:

  • Overlay Skimmers attach to the outside of the ATM that read the card as it enters the ATM
  • Throat Skimmers attach on the inside of the fascia that read the card as it enters the ATM
  • Deep Insert Skimmers are inserted into the card reader that read the card when it is inside the card reader

Risk Exposure

Not all card readers have anti-skim capabilities. The most accurate way to determine if you have a card reader with anti-skim capabilities is by the firmware version; the firmware version is available from VDM or by printing the SP/EP version from the NBS Supervisor menu

  • For DIP card readers with anti-skim capabilities the EP version will be either V4414-xxx or V5293-xxx.
  • For motorized card readers with anti-skim capabilities the EP version will be V5969-xxx or V4017-xxx.

Be aware DIP card readers with anti-skim capabilities can only detect external skimmers. Motorized card readers with anti-skim capabilities can detect internal and external skimmers.

Mitigation

Customers should:

  1. Install anti-shim plates on all card readers. These can be purchased through our WebOrders website (https://weborder.hyosungamericas.com/SU02310)
    • For DIP card readers see part number 5766000260
    • For motorized card readers see part number 5766000255
  2. Adopt a card reader with anti-skim capability.
  3. Schedule regular (morning) visual inspections of machines looking for overlays or foreign objects inside the card reader.

If you have any questions, please contact us at 1-877-Hyosung.

Written by

Keith Lennard
Executive Vice President Software

Related Posts

Are Your ATMs Ready for PCI TR-31 Key Block?

Are Your ATMs Ready for PCI TR-31 Key Block?

Hyosung retail ATMs have been updated to support a more secure method of transferring encryption keys from the host processor to the ATM as required by PCI (Payment Card Industry).  The new standard TR-31 (“key blocks”) will be mandated by PCI for the transfer of keys to ATMs starting January 1, 2025 Are all ATM […]

Continue Reading
ATM Security Bulletin | November 2023

ATM Security Bulletin | November 2023

Key takeaways: Hyosung Innovue is aware that ATM skimming attacks are on the rise in 2023. While non-bank owned ATMs skimming attacks are relatively flat year-over-year, according to FICO, there has been a year-over-year increase in Card skimming of 109% at bank-owned ATMs in the first half of 2023.  Furthermore, there is a shift in […]

Continue Reading