Raising money is an almost automatic gesture, repeated daily by thousands of Portuguese. But there is a new scheme in the ATM that is worrying financial security experts: a sophisticated technique that allows you to copy card data and PIN code, leaving the bank balance exposed to those who know it explore.
The warning comes from the United States, but European authorities already admit that the method is going through borders and may soon reach Portugal.
Almost invisible devices
The method is ingenious and difficult to detect. Small devices are discreetly installed on the card reader or machine keyboard to collect essential user data. Once this information has been obtained, criminals can raise money, purchase online or even open bank accounts on behalf of the victim.
According to Fico, a US company specializing in risk analysis and cybersecurity, cases of automatic box fraud increased by 96% by 2024 in the United States, with more than 315,000 committed cards. The phenomenon, known as skimming, consists of using a false reader placed on the original to copy the magnetic band of the cards.
The Executive Digest website, a site specializing in economics and finance, explains that in some cases a disguised chamber is also used by the keyboard to record the PIN, or a fake keyboard that collects the introduced digits. These equipment is so discreet that most victims don’t even realize that something has been manipulated.
The new generation of electronic fraud
Traditional skimming has lost strength thanks to the adoption of inv chip cards, but new variants are emerging. One is shimming, which uses an ultra -thin blade inserted into the reader to capture data directly from the chip.
Another, more recent, is overlayless, a technique that uses hidden cameras and artificial intelligence algorithms capable of interpreting hand movements to deduce the PIN code.
According to SIBS, the Portuguese Multibanco network has been protected with anti-skimming technology since 2011, which considerably reduces the risk in integrated machines in the official system.
However, independent automatic boxes, especially those installed in tourist or poorly watched areas, remain vulnerable points.
The European response and precautions
To reinforce security, A approved the new Payment Services Regulation (PSR), which will come into force in 2026. The new rules will require banks and operators to share in real time information on fraud attempts, allowing a faster response from the authorities.
Until then, individual prevention remains the best defense. Experts recommend always checking whether there are loose parts or suspicious elements in the card groove, cover your hand when introducing PIN and, whenever possible, use boxes located inside bank branches or in places with surveillance.
It is also advisable to activate automatic notifications in banking application to detect suspicious movements. Small care can make a difference between a safe operation and a emptied bank account without warning.
Also read:
