Up Close With A 3D-Printed Card Skimmer

John Biggs

Biggs is the East Coast Editor of TechCrunch. Biggs has written for the New York Times, InSync, USA Weekend, Popular Mechanics, Popular Science, Money and a number of other outlets on technology and wristwatches. He is the former editor-in-chief of Gizmodo.com and lives in Bay Ridge, Brooklyn. You can Tweet him here and G+ him here. Email him directly at... → Learn More

Thursday, December 8th, 2011
krebsonsecurity

I’ve recently fallen into the habit of pulling and tugging at ATM slots before I slide my card through because I fear that someone nefarious has stuck one of these 3D-printed card skimmers over the opening. This skimmer, found in California, was 3D-printed to resemble the real Chase ATM slot almost perfectly.

Wildly enough, there’s a pinhole camera connected to a full PCB hidden under the plate and the ports designed to assist the visually impaired seem to be unimpeded, which means nothing would seem amiss even as this thing grabbed your card account number, PIN, and, presumably, the security code on the back of your card in some cases. The fact that this barnacle of electronics is attached, parasitically, to one of the most secure and human-proof devices in existence is an amazing feat.

Krebsonsecurity writes:

Looking at the backside of the device shows the true geek factor of this ATM skimmer. The fraudster who built it appears to have cannibalized parts from a video camera or perhaps a smartphone (possibly to enable the transmission of PIN entry video and stolen card data to the fraudster wirelessly via SMS or Bluetooth). It’s too bad so much of the skimmer is obscured by yellow plastic. I’d welcome any feedback from readers who can easily identify these parts based on the limited information here.

I’ve noticed that since a pair of skimmers were caught in New York City using similar hardware, many of the Chase ATMs here have begun using a different design with blue transparent plastic. I worry that this sort of security by reaction will be a bit shortsighted but clearly Chase has begun the cat and mouse game with these guys. I wonder when those janky ATMs at delis and convenience stores will be hit?