[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiEWWh6pD1SiXyc7hmzJ5ih6yC4J0e7_sSTal9BGz864":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":20,"status":21,"created_at":22,"published_at":23,"article":24,"tags":28,"podcasts":41,"controls":42},"32a85d5f-e0ac-4a4b-b5b6-2d5d76cb311b","traditional-credit-card-fraud-remains-a-persistent-threat","141244d1-9734-43e6-b2f7-3b0f21d6e1a4","Traditional Credit Card Fraud Remains a Persistent Threat","Despite the focus on sophisticated AI-driven cyberattacks, physical and low-tech fraud methods — such as counterfeit card mailers and point-of-sale skimmers — continue to victimize consumers globally. These attacks succeed largely because individuals and organizations underestimate 'old-school' techniques and lower their guard against them. Physical skimmers on ATMs and POS terminals silently harvest card and PIN data, while fake replacement card mailers exploit victims' trust in their financial institutions. The persistence of these methods demonstrates that threat actors will continue using any technique that yields results, regardless of its age or simplicity. Security awareness must extend beyond digital threats to encompass physical and social engineering vectors.","**Immediate actions:**\n- Inspect any unsolicited card or financial document received by mail by contacting your bank directly via official channels before activating it.\n- Physically examine ATM and POS terminals for signs of tampering, loose parts, or suspicious overlays before inserting your card.\n\n**Long-term improvements:**\n- Enroll in real-time transaction alerts through your bank or card provider to detect unauthorized activity as soon as it occurs.\n- Conduct regular employee training programs that specifically include physical fraud scenarios such as skimmer recognition and suspicious mail handling.\n- Advocate for and adopt EMV chip, contactless payment, and tokenization technologies that reduce the value of skimmed card data.\n\n**Detection measures:**\n- Regularly review bank and card statements for small, unexplained test transactions that may indicate card compromise.\n- Implement tamper-evident seals and routine physical inspections of POS terminals in retail and hospitality environments.",[12,13,14,15,16,17,18,19],"CIS Control 14 - Security Awareness and Skills Training","CIS Control 3 - Data Protection","NIST SP 800-53 AT-2 (Security Awareness Training)","NIST SP 800-53 PE-3 (Physical Access Control)","PCI DSS Requirement 9.9 (Protect Devices from Skimming)","PCI DSS Requirement 12.6 (Security Awareness Program)","GDPR Article 32 (Security of Processing)","NIST CSF PR.AT-1 (Awareness and Training)",{},"published","2026-09-26T20:22:11.693358+00:00","2026-09-26T20:22:11.622+00:00",{"id":7,"url":25,"slug":26,"title":27},"https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fkernel-panic-old-timey-credit-card-scams\u002F","old-school-credit-card-scams-are-far-from-dead-52e73f","Old-School Credit Card Scams Are Far From Dead",[29,35],{"id":30,"name":31,"slug":32,"description":33,"color":34},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",{"id":36,"name":37,"slug":38,"description":39,"color":40},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[],[43,47,51],{"slug":44,"name":45,"problem":46},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",{"slug":48,"name":49,"problem":50},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",{"slug":52,"name":53,"problem":54},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them."]