How to Look for Security Concerns for EMV (Credit Card) Readers
Step 1
Using the stylus, check the width of the EMV reader between the left side of the reader and the right side of the reader with the strain relief of the stylus hanging over about a quarter of an inch as seen in the picture below. The reader should NEVER be wider than the length of the stylus and strain relief.
Step 2
Again, using the stylus, check the width of the plastic to the outside of the magnetic stripe card track as seen in the picture below. The width of this area should be IDENTICAL to the width of the stylus. In the picture below, the area is about a quarter of an inch wider than the stylus and should be reported as a security concern.
Step 3
Verify that the stylus fits completely in the stylus holder on the left side of the terminal. In the picture below, the reader on the left has an overlay skimmer blocking the tray, and the reader on the right is an unblocked tray.
Step 4
Look at or feel the top of the terminal. If an edge is seen or felt, an overlay skimmer is likely present. The top edge of the terminal should be a continuous flat surface from the height and width of the design.
In the picture below, the red arrows show the seam-line created by the overlay skimmer casing. Also, note the protruding overhang of the larger skimmer case compared to the actual device.
Step 5
Visually observe and then fell the sides of the terminal. If a raised edge is seen or felt, an overlay skimmer is likely present. The sides of the terminal should be a continuous flat surface from the height and width of the design.
In the picture below, the side portont of the plastic on the overlay skimmer stops above the lock connector rather than going the full height. This creates a visible edge that is easily distinguished from the original terminal.
Step 6
Verify that the keypad is backlit while shielding the keypad from the room light.
In the picture below, the reader on the left is a powered-on reader viewed with the keypad shaded from light. The reader on the right is a powered-off or blocked keypad shaded from light.
Step 7
Verify the green LED is visible during card read transactions when the "Insert, Swipe or Tap Card" screen is shown on the reader as seen in the picture below.
Examples
In the picture below, the reader on the left has an overlay skimmer applied, and the reader on the right does not. Notice the size differences in the areas of the case as indicated by the red calipers in the picture.
What to do if you find any concern
First and foremost, STOP using the reader and terminal IMMEDIATELY.
Call the emergency HELP (4357) line from the store phone.
Call your District Manager.
Login to Zenput, go to your projects, and fill out your "EMV Reader Check".