Krebs on Security reports that the United States Postal Inspection Service is investigating a series of skimming incidents on automated stamp vending machines across the U.S., with consumers having their card details swiped. While they're not elaborating on exactly how the skimming has been taking place, they have issued some advice to customers:
"USPIS recommends customers who use the APC machine should personally visually inspect the machine prior to use. Look for any type of plastic piece that looks like it has been slid over the actual credit card reader. Look for any other type of marking on the machine that looks as though it has been applied by a third-party."
Krebs suggests that the skimming started last November 2013, and appears to have taken place in Arizona, California, Colorado, Florida, Georgia, Kentucky, Massachusetts, Nebraska, New York, Oregon, Pennsylvania, Utah, Virginia, and Washington, D.C. In each case, it seems crooks have stolen card details and PINs, then made withdrawals of between $500 to $800 per card.
The advice remains the same as ever: if a machine looks suspicious, don't use it. And if all else fails, buy stamps with cash. [Krebs on Security]
Images by Catatronic under Creative Commons license.