|
DFR Risk Management ATM Skimming Check List (ASK-)
Card Entry Area Skimming Devices
| Motorized Readers |
|
DIP Readers
|
|
Directly to card entry slot
|
M1
|
|
Directly to card entry slot
|
D1
|
|
|
Moulded around entry area
|
M2
|
|
Moulded overlay covering DIP reader
|
D2
|
|
|
False front covering larger area
|
M3
|
|
False front covering larger area
|
D3
|
|
|
Modified anti-fraud device inhibitor
|
M4
|
|
|
|
|
|
Overlay of anti-fraud inhibitor
|
M5
|
|
|
|
|
|
Attachment to anti-fraud inhibitor
|
M6
|
|
|
|
|
|
Other
|
M0
|
|
Other
|
D0
|
|
|
|
|
Swipe Readers
|
|
Contactless Readers
|
|
Overlay covering swipe reader
|
S1
|
|
Overlay covering contactless reader
|
C1
|
|
|
Mounted below or left of swipe reader
|
S2
|
|
|
|
|
|
Mounted above or right of swipe reader
|
S3
|
|
|
|
|
|
False front covering larger area
|
S4
|
|
|
|
|
|
Other
|
S0
|
|
Other
|
C0
|
|
Internal Skimming Devices
| Internal Compromise of Card Reader |
|
Internal Compromise of ATM System
|
|
Pre-head tap
|
IT1
|
|
Internal communications tap
|
IS1
|
|
|
Read head tap
|
IT2
|
|
Software / Malware / Trojan
|
IS2
|
|
|
Card reader PCB parasite
|
IT3
|
|
|
|
|
|
Card reader data line tap
|
IT4
|
|
|
|
|
|
|
|
|
|
|
|
|
Other
|
IT0
|
|
Other
|
IS0
|
|
Remote & Secondary Near-Proximity Skimming Devices
| Secondary swipe devices |
|
Hand-held skimming device
|
|
Door-access skimmer
|
RS1
|
|
Pocket-sized skimmer
|
RH1
|
|
|
Card cleaning device
|
RS2
|
|
|
|
|
|
Card activation / validation device
|
RS3
|
|
|
|
|
|
Stand alone terminal
|
RS4
|
|
|
|
|
|
|
|
|
|
|
|
|
Other
|
RS0
|
|
Other
|
RH0
|
|
|
|
|
Secondary DIP devices
|
|
External modem / Comms. hub
|
|
Door-access skimmer
|
RD1
|
|
Modem tap
|
RE1
|
|
|
Card cleaning device
|
RD2
|
|
Telephone exchange tap
|
RE2
|
|
|
Card activation / validation device
|
RD3
|
|
Communication hub tap
|
RE3
|
|
|
Stand alone terminal
|
RD4
|
|
Wi-Fi intercept
|
RE4
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Other
|
RD0
|
|
Other
|
RE0
|
|
Attachment Method & Power Source
| Attachment Method |
|
Power Source
|
|
Adhesive tape
|
AM1
|
|
Integrated non-rechargeable batteries
|
PS1
|
|
|
Glue
|
AM2
|
|
Integrated rechargeable batteries
|
PS2
|
|
|
Screw / Bolt
|
AM3
|
|
Separate battery pack
|
PS3
|
|
|
Friction fit
|
AM4
|
|
From ATM power
|
PS4
|
|
|
Weld / Fuse
|
AM5
|
|
From other constant power source
|
PS5
|
|
|
|
|
|
|
|
|
|
Other
|
AM0
|
|
Other
|
PS0
|
|
Storage Capability, Communication & Download Capability
| Storage |
|
Communications & Download
|
|
None
|
ST1
|
|
None
|
CD1
|
|
|
Local integrated chip
|
ST2
|
|
Socket / USB
|
CD2
|
|
|
Local data / SD card
|
ST3
|
|
Analogue RF
|
CD3
|
|
|
MP3 /MP4 or equivalent recorder
|
ST4
|
|
Bluetooth
|
CD4
|
|
|
Cell phone storage
|
ST5
|
|
Wi-Fi (802.11)
|
CD5
|
|
|
|
|
|
SMS / MMS / Text
|
CD6
|
|
|
|
|
|
GSM / Data
|
CD7
|
|
|
|
|
|
Digital RF (non specific)
|
CD8
|
|
|
Other
|
ST0
|
|
Other
|
CD0
|
|
Activation & Encryption
| Activation |
|
Encryption
|
|
Always on (switched)
|
AC1
|
|
None
|
EC1
|
|
|
Proximity detector
|
AC2
|
|
AES
|
EC2
|
|
|
Remote control
|
AC3
|
|
DES
|
EC3
|
|
|
Card / transaction activated
|
AC4
|
|
3DES
|
EC4
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Other
|
AC0
|
|
Other
|
EC0
|
|
Additional Features, Capacity & Endurance
| Features |
|
Capacity & Endurance
|
|
Integrated camera
|
FX1
|
|
Maximum endurance from power supply
|
|
|
|
Receiver for PIN compromise device
|
FX2
|
|
Maximum number of cards data stored
|
|
|
|
Screened for anti-skimming interference
|
FX3
|
|
|
|
|
|
Motorized card transport
|
FX4
|
|
|
|
|
|
|
|
|
|
|
|
|
Other
|
FX0
|
|
Other
|
|
|
|
