Nicks VR4

http://news.bbc.co.uk/1/hi/england/4980190.stm

Doesnt say how the Scum got the pins but you might want to check your Bank Balances just in case

Nick


Shell said the suspension of chip and pin was a temporary measure
Petrol giant Shell has suspended chip-and-pin payments in 600 UK petrol stations after more than £1m was siphoned out of customers' accounts.
Eight people, including one from Guildford, Surrey, and another from Portsmouth, Hants, have been arrested in connection with the fraud inquiry.

The Association of Payment Clearing Services (Apacs) said the fraud related to just one petrol chain.

Shell said it hoped to reintroduce chip-and-pin as soon as possible.

Plastic crime

The fraud is being investigated by the Metropolitan Police cheque and plastic crime unit.

"These Pin pads are supposed to be tamper resistant, they are supposed to shut down, so that has obviously failed," said Apacs spokeswoman Sandra Quinn.

She said Apacs was confident the problem was specific to Shell and not a systemic issue.

A Shell spokeswoman said: "Shell's chip-and-pin solution is fully accredited and complies with all relevant industry standards.


Chip and pin cards are designed to prevent fraud

"We have temporarily suspended chip-and-pin availability in our UK company-owned service stations.

"This is a precautionary measure to protect the security of our customers' transactions.

"You can still pay for your fuel, goods or services with your card by swipe and signature.

"We will reintroduce chip-and-pin as soon as it is possible, following consultation with the terminal manufacturer, card companies and the relevant authorities."

Shell has nearly 1,000 outlets in the UK, 400 of which are run by franchisees who will continue to use chip-and-pin.

BP is also looking into card fraud at petrol stations in Worcestershire but it is not known if this is connected to chip-and-pin.

gatecrasher3

That explains why I had to sign for my Optimax this afternoon

corradoboy

I filled up at a Tesco's a few weeks back and all I needed to do was feed my card into the pump. No PIN, no signature, no minimum wage attendant who doesn't give a **** anyhow and is probably in on the scam. It was the same when I bought petrol in France recently too. Surely having no security whatsoever is asking for trouble

Simon C

Buy the sounds of it they tampered with the card readers. Which ever way, chances are it was an inside job.

I will be asking support next time I'm on days. I know we could do it, but then thats hardly a suprise considering what the company does.

Spoon

If it's the same thing as I read weeks ago, then apparently a large percentage of the machines built for Shell allowed for a replacement chip to be inserted into the machines, to read and store card details, or something along those lines.

Customers I believe were then being charged twice.

Inside knowledge of the machines workings has to be favourite.

Fangoria

iTrader: (1)

Dont effect me....... I used to use Optimax all the time - now use Tesco 99 Ron which is much better.........

Chris L

Don't get too smug - there are only a few manufacturers of these machines around. It doesn't take a genius to work out of it can be done with one, it could well happen with another.

OllyK

For those who keep saying why worry about ID cards if you've got nothing to hide, well here's another example of supposedly secure electronic transactions being circumvented by criminals.

NWMark

ive been charged twice, on two occasions now by shell, but both time they have refunded the amount the following day. So i always check my shell payments thoroughly, not happened since.

both a few months ago now, doubt its related in anyway but did only happen with my new chip and pin card never before.

Mark

andyr

I like the statement from Shell -
"Shell's chip-and-pin solution is fully accredited and complies with all relevant industry standards. "

That doesn't exactly give a high level of confidence in the high level of security incorporated in the "industry standard " does it if it is easily overcome by the cashiers ?
Seems to me to be a case of the new secure chip-and-pin is not secure and very soon there will be a big change to it - new cards and card readers required maybe !?

Suresh

To my knowledge Chip and Pin has been functional in much of continental Europe for around a decade without mass fraud taking place.

Does this mean that British criminals are simply better than European ones or is it that the UK system is poorly designed and/or implemented?

OllyK

Mostly the latter, which is in part, why I have so many concerns about an ID card / database.

Suresh

and you'd be right to be concerned.
C&P is not rocket science, so I am confused how can it go so wrong.

ChrisB

I have one of the Trintech terminals, which seem to be the most common in Shell Garages I've used, on my desk at the moment for eval purposes.

Waiting for me on e-mail this morning was a firmware upgrade for it...

Andy Tang

iTrader: (3)

I received an email at work from a colleague who this happened to.

The staff positioned the camera to see the keypad, they then would pretend to drop your card, swipe it into a reader, and use the cctv camera to get the PIN later.

Or at least this is what my work colleague was told by Surrey Police.

For the locals, the Shell petrol stations in Guildford and Woking were in question, although I don't think Burnt Common was. Best check those credit card statements when they come in.

OllyK

I heard on the radio this morning that they had managed to fit skimming devices to the C&P readers.

There are plenty of ways to get a PIN, the easiest being to just look over the person's shoulder. But you can use cameras etc etc, and I've even come across one old dear in the Co-op who when asked to enter her PIN speaks it out loud as she enters it

cw42

iTrader: (1)

Had to sign for my petrol on saturday, now I know why

lozgti

Thought it was normally gangs of east europeans who do all the plastic frauds.

I pay cash.Don't trust anyone after having had a card cloned

brickboy

Sounds all too likely -- why bother hacking and developing bits of code when you can do it simply .....

Leslie

Thats not much good if it is all due to a second chip inside the reader hutton,

Just goes to show that any information which is converted digitally is unsafe somehow or other. What price the security of ID cards then?

Les

OllyK

So many things are possible. There are so many different types of PIN / Card reader that people may not notice differences or something odd about one. If somebody at the shop in question plans to clone cards, it wouldn't be a massive issue to replace the card reader with a faked one that just records the buttons you press and clones the card details. I don't know if such things are about yet - but expect to start seeing them, especially the wireless style ones that get used in restaurants. Scum has your card details and PIN in one easy step!

ScoobyJawa

Only safe Shell in Guildford was the one on Ladymead - all the others had been reported to be part of this scam............

Leslie

Ok thanks hutton.

Les