Skimming at the Pump Threatens Retailers

NACS is working to educate retailers about master-key vulnerability, reminding its members that anyone of their operations could fall victim to a skimming scheme.

August 15, 2011

Last week NACS Daily reported that skimming debit and credit card numbers at gas pumps has become nearly epidemic. In a follow up article, bankinfosecurity.com spoke with NACS payments consultant and PCATS Executive Director Gray Taylor on how retailers can protect their operations from costly skimming schemes.

The news source notes that while skimming incidents at the fuel dispenser account for a relatively low percentage of card compromises, the use of master keys for access to pump enclosures is an industry problem, according to Taylor.

"There are 900,000 pay-at-the-pumps out there, and, literally, I have four keys in my desk that will open up every dispenser in the United States that has not been upgraded," Taylor commented, adding, "Today, you can buy new dispensers that have unique keys. The problem is doing something with the dispensers that are out there; getting these guys to upgrade."

However, ensuring pump enclosures have unique keys also reflects a greater need for "broader education, notes the news source.

"I've had operators come back to me to say their fire marshals are not allowing them to change the keys. The fire departments want one key that can open all of the enclosures," said Taylor. "NACS can try to educate some of these guys, but it is a challenge. They don't understand that you don't need to open the dispenser to turn off the gas. But getting that across to some of these fire departments is challenging."

NACS is working to educate retailers about master-key vulnerability, and through the WeCare security campaign (see below) that focuses on skimming at the pump, Taylor commented that NACS is making headway. "We're going to keep pressing, and that's why we keep putting these skimming updates on our website," he said. "You've got to get out there and learn how to fight this." NACS also has a fact sheet that examines retailer concerns about card skimming.

NACS Anti-Skimming Solution
The WeCare decal۬is a tamper-evident label that can help retailers identify potential security breaches if skimming devices are inserted at fuel dispensers or other unattended PIN-entry devices. The labels can also help retailers address some of the PCI compliance mandates that are now required.

The security labels are to be used on fuel dispensers near the credit/debit card transaction area. If the label is lifted to insert a skimming device, a "void" message appears on the label, providing a visual alert to store employees so that additional action can be taken. Because the labels clearly indicate that they are to prevent tampering, the labels help assure customers that their data is secure, and discourage criminals targeting the store.

Protect your business and your customers €" order the WeCare decals for your stores today.

Advertisement
Advertisement
Advertisement