Cellular relay skimmers bring new threat to data security for c-stores.

The National Association of Convenience Stores (NACS) warns that thieves are using a new skimming technique to steal credit card information at the pump.

The U.S. Secret Service’s Philadelphia Field Office alerted NACS to the issue. According to the Secret Service, thieves are using a cellular relay skimmer located in the contactless near field communication (NFC) reader on the exterior of a gas pump. When customers make a contactless payment, the thief then gains the contactless card’s primary account number “over-the-air” before it reaches the point of interaction (payment terminal). NACS pointed out that point-to-point encryption cannot defend against this technique. It can also transmit the stolen data wirelessly via text message, allowing real-time use of the data.

Questions relating to this alert can be directed to the GIOC at [email protected] or 202-406-6009.