Standard Practice for Examining Magnetic Card Readers

Importancia y uso:

4.1 As a skimming device is not typically deemed contraband in of itself, it is the responsibility of the examiner to determine if the device contains unauthorized account information. The purpose of this practice is to describe best practices for seizing, acquiring, and analyzing the data contained within magnetic card readers.

4.2 Limitations—Skimmers present unique examination challenges due to:

4.2.1 Rapid changes in technology;

4.2.2 Difficulty of device disassembly;

4.2.3 Use of alternate/repurposed components;

4.2.4 Use of encryption or examination countermeasures, or both;

4.2.5 Multiple data encoding/modulation formats;

4.2.6 Prevention of chip identification by obfuscation of the device;

4.2.7 Availability of training and documentation;

4.2.8 Lack of chip information/documentation;

4.2.9 Lack of adapters available for chip reading;

4.2.10 Expense of available equipment used in chip removal and reading;

4.2.11 Lack of software’s ability to support reading chip data; and

4.2.12 Lack of commercial software available to analyze encrypted data extracted from skimmers.

Subcomité:

E30.12

Referida por:

E1732-24E01

Volúmen:

14.02

Número ICS:

35.240.15 (Identification cards and related devices)

Palabras clave:

Bluetooth; examinations; magnetic card readers; skimmers;