By Tim Ferguson, 6 September 2007 13:05
NEWS
Retailers are being warned to beef up chip and PIN security to prevent fraudsters stealing card and PIN details by bugging terminals or 'shoulder-surfing' other customers.
The UK payments association Apacs has produced the Transactions with your chip and PIN terminal guidelines to highlight how card-accepting businesses can more effectively protect themselves and their customers.
The advice stresses the importance of raising staff awareness about how criminals target card data in shops and encouraging employees to report any issues or concerns they have.
Criminals can exploit chip and PIN readers by using bugging equipment or software to capture data or by installing fake equipment by posing as engineers, according to Apacs.
silicon.com Retail & Leisure
Get the latest retail and leisure news straight to your inbox. Sign up for the R&L newsletter today!
Sandra Quinn, director of communications at Apacs, said simple measures such as staff training will "significantly reduce" the chances of businesses falling victim to fraud or being targeted by fraudsters.
Other advice includes locating payment terminals where customers can use them without others being able to see their PIN number as they enter it.
Retailers are also advised to keep an inventory of terminal serial numbers and their location and use CCTV to monitor them.
Since chip and PIN was introduced Apacs says the technology has had a dramatic effect on reducing card fraud in the UK.
Since 2005 losses through face-to-face card fraud have fallen by 67 per cent.
Apacs also recently published guidelines advising consumers how to keep their PIN safe.
More than 900,000 UK shop terminals (98 per cent of all tills) have now been upgraded to chip and PIN, with more than 185 transactions taking place every second.
The chip and PIN security advice is available here.
Comments
There are 2 comments. Join the discussion
1. anonymous
I'm not sure how it can be true that the fraud has reduced in face to face transactions when the retailer sometimes doesn't even handle the card!
How would they know to whom it belongs??
2. anonymous
At my local Waitrose you can stand four or five back in the queue and still see the front customer's PIN being keyed. The card reader is on the far side of the counter and the customer has to stretch across to use it so there's no way of concealing the keystrokes.
This is not just the quick fix solution to meet the deadline, the upgrade is just as bad.
If a company the size of Waitrose can't exercisr common sense when it instals chip and PIN, what hope is there?