Northwest Arkansas Democrat-Gazette
NYC police try out device to keep ATMs safe from card skimmers
GAINESVILLE, Fla. — Patrick Traynor, a cybersecurity expert, was in New York in February working with police to help identify a way to detect credit-card skimmers on ATMs when he got a financial fraud alert: his own information had been stolen while he was in town.
It wasn’t the first time. In five years, he’d had his personal information stolen by card skimmers — devices illegally installed on ATMs and gas station pumps that “skim” card numbers — a half-dozen times.
“I’ve got 15 years of experience in the field of information security. If I can’t protect myself reliably, who else possibly can?” said Traynor, a computer information science and engineering professor at University of Florida.
After three years of study, Traynor and two Florida graduate students invented a device they call the “Skim Reaper,” a credit-card thin gadget that slides into card reader slots and can easily and quickly detect if an ATM or gas pump has been compromised. The New York Police Department is testing the Skim Reaper with some early success in its effort to rid the streets of the pervasive devices. The AP was given exclusive access to the lab where the Skim Reaper was made, as well as New York City police tests of it in the field.
The Secret Service says skimmers steal more than $1 billion from U.S. consumers annually, money that often funds organized crime.
Most credit-card skimmers work by installing an extra “read head” inside or outside a machine. This extra read head allows criminals to make a copy of the card’s information as a consumer swipes it. Skim Reaper was built to detect when more than one read head is present, Traynor said.
The New York Police Department has four full-time, trained detectives working to find credit-card skimmers installed on ATMs at bodegas, but say the problem is too widespread to be stopped with those resources.
“The problem is that it’s transient, they come in and place the device and move on. In early January we were getting killed,” Deputy Inspector Christopher Flanagan of the police Financial Crimes Task Force said, referring to a January spike in skimmingrelated crimes.
In February, Traynor gave the department five Skim Reapers to test. The device looks like a long credit card
● that can be slid into a card slot. It’s attached by a wire to a cellphone-size box with a small readout screen that says “possible skimmer!” when multiple read heads are detected.
Part of the attraction to the Skim Reaper is its simplicity. Flanagan said officers in New York recently found the first skimmer using the device at an ATM in Brooklyn.
“I’ve been doing skimming for approximately five years now and I have never used anything like this or have known of anything like this,” said detective James Lilla. “It’s definitely an assist we can use to combat ATM skimming.”
The advent of debit and credit cards with protective chips that are inserted into special readers has helped some retail businesses combat skimming. But the higher cost of the new readers and complexity of switching over to a new technology has been an obstacle for small retailers and gas stations where criminals have flourished.
Steven Weisman, a cybersecurity expert and professor at Bentley University in Massachusetts, said the Skim