‘deep insert’ skimming tmd security card protection plate ... · ‘deep insert’ skimming tmd...
TRANSCRIPT
‘Deep Insert’ SkimmingTMD Security Card Protection Plate
(CPP)
Tom MooreMD North America
TMD Security
TMD Security Confidential 2016
Agenda
• Origins of Deep Insert skimming
• Progress to date with Card Protection Plate
• Deep Insert skimming in ATMs
• Card Protection Plate overview
TMD Security Confidential 2016
Internal skimming originated on SSTs
• Unattended self-service petrol pump payment terminals
• Fraudsters took advantage of excess space that the card does not use
TMD Security Confidential 2016
• Prevents the insertion and placement of skimming devices
• Cost effective, no impact on transactions, ‘transparent’ to card holder
• 12,000 CPPs installed in self-service petrol pumps
• 1,000 in ticket vending machines
• Top 10 US bank has certified CPP and is beginning a large scale roll out
• Several other top 20 banks are actively certifying CPP
• Successful protection against skimming
Success of Card Protection Plate
TMD Security Confidential 2016
Now growing problem for ATMs
Motorized - Card Reader Internal (M3) or ‘Deep Insert’ Skimming Device
TMD Security Confidential 2016
Now growing problem for ATMs
Motorized - Card Reader Internal (M3) or ‘Deep Insert’ Skimming Device
Source: EAST
TMD Security Confidential 2016
Now growing problem for ATMs
DIP - Card Reader Internal (D3) or ‘Deep Insert’ Skimming Device
TMD Security Confidential 2016
Now growing problem for ATMs
Card Reader Internal Shimming Device (S1)
Source: EAST
TMD Security Confidential 2016
CPPs are designed specifically for each card reader model
Current family includes:
SSTs
• CPP 1: Hopt-Schuler - DIP
• CPP 2: Panasonic - DIP
ATMs
• CPP 3: Sankyo - Motorized
• CPP 4: Sankyo – DIP
• CPP 5: Hitachi Omron – DIP (NCR SelfServ)
Card Protection Plate family
TMD Security Confidential 2016
Card Protection Plate Overview
• Prevents insertion and placement of fraud devices into the card reader
• Internal skimming (‘Deep Insert’)
• Shimming
• Multi-vendor - designed specifically for each card reader model
• Does not interfere with transactions
• Demagnetised - no negative effects on the mag stripe and chip
• Self-defense against attack
• Length of plate and security features
• Cannot be levered out of position or pushed away
• Sophisticated construction and design – strong but flexible
• Ease of installation
• Maintenance free
• Self-cleaning transparent window protecting sensor
• Patented
• Works with CPK and ADK for complete protection
TMD Security Confidential 2016
Card Protection Plate Features
A Curved and polished edge
D Transparent window
B Front Transport wheel
C Front Barbs
G Middle Barbs
H Magnetic track read heads
I Middle transport wheel
J Rear Barbs
M Rear Transport Wheel
F Chip Location
E Curved and polished edges
L Light Barrier
K INOX Steel material
Front
Back
TMD Security Confidential 2016
CPP Features continued
No impact on transactions
Curved, polished edges
• Front and cut-out areas for smooth card entry and exit• Worn cards will not get stuck
INOX material
• Does not corrode • ‘Spring’ quality so that there is flexibility• Low magnetic content - no interference with mag stripe or chip• Certified: magnetic characteristics, strength and durability
Only fills excess space criminals need
• Card transport wheels work freely• Chip area not covered• Magnetic track read heads have normal contact• Transparent window for optical sensors to detect card• Rear optical sensor behind plate
Curved, polished edges
TMD Security Confidential 2016
CPP Features continued
Self-defence against attack
Prevents unauthorized removal
• Curved front edge prevents plate from being levered out • Sticky surface under the right side of the plate adheres to the card reader• Three sets of barbs on the left side firmly ‘hook’ in place• Length of the plate means it cannot be pushed backwards
Install and forget!
Ease of installation
• Less than 15 minutes• Installation guide and tools
Maintenance free
• Self-cleaning window protects optical sensors from dust and dirt • Non-corrosive material
Barbs
