Gas Pump Skimmer Sends Card Data Via Text
Summary: Investigators in New York found gas pump skimmers that use cannibalized cell phone components and T-Mobile SIM cards to send stolen card data via GSM text message, the first such SMS pump skimmers KrebsOnSecurity is aware of. The devices were pulled this month from pumps at three New York filling stations, were wired to the pumps' internal power to run indefinitely, and officials in Arizona, California and Florida said they have not found GSM-based skimmers at their pumps.
What's compelling: A GSM skimmer texts card data in real time to a recipient anywhere in the world, so the crew never returns to the pump - and with Visa's liability shift for chip-capable fuel readers pushed from October 2017 to October 2020, card-issuing banks and consumers still absorb most of the fraud cost.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026