# How do thieves get money with a stolen ATM card?

**URL:** <https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359>\
**Category:** In My Humble Opinion\
**Created:** [January 7, 2013, 4:47pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359 "2013-01-07T16:47:29Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![janeslogin](https://avatars.discourse-cdn.com/v4/letter/j/df788c/32.png) [@janeslogin](https://boards.straightdope.com/u/janeslogin)\
**Post date:** [January 7, 2013, 4:47pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/1 "2013-01-07T16:47:29Z")

</div>

I have \*\*difficulty \*\ ***getting my own money** because I forget my password and cannot remember where I scribbled it down.

Latest story, these appear regularly, is about some dude is stealing cards from purses in theaters and harvesting money before the owner knows the card is missing. News reports he got significant amounts quickly. I don’t know how this is done.

---

<div class="post-metadata">

**Author:** ![DataX](https://avatars.discourse-cdn.com/v4/letter/d/e99b99/32.png) [@DataX](https://boards.straightdope.com/u/DataX)\
**Post date:** [January 7, 2013, 4:53pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/2 "2013-01-07T16:53:02Z")

</div>

You should not be able to get money without knowing the PIN. They tend to use fake card readers for this (that attach to the real card readers on ATMs - with fake keypad - to record actual PINs).

Is it possible these were ATM/Debit Cards? A thief could steal those - and buy stuff - like iPads from stores - and the net effect would be the same - money siphoned from their account. If it has a VISA logo - the transaction can be processed like any other credit card - no PIN used at all.

---

<div class="post-metadata">

**Author:** ![GrandWino](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/grandwino/32/67_2.png) [@GrandWino](https://boards.straightdope.com/u/GrandWino)\
**Post date:** [January 7, 2013, 4:57pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/3 "2013-01-07T16:57:43Z")

</div>

We had a debit card stolen and the guy racked up a ton of charged just in taxi cabs and bar tabs in one night. There are a lot of ways to steal money without actually taking cash.

---

<div class="post-metadata">

**Author:** ![Amateur\_Barbarian](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@Amateur\_Barbarian](https://boards.straightdope.com/u/Amateur_Barbarian)\
**Post date:** [January 7, 2013, 4:58pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/4 "2013-01-07T16:58:46Z")

</div>

There are many ways to pilfer or learn a PIN. Simplest is for them to watch you make a purchase, then pick-pocket, purse-snatch or scam you out of your card. Three minutes later the cash has been extracted and they will keep trying until the card goes bad.

---

<div class="post-metadata">

**Author:** ![tdn](https://avatars.discourse-cdn.com/v4/letter/t/94ad74/32.png) [@tdn](https://boards.straightdope.com/u/tdn)\
**Post date:** [January 7, 2013, 5:00pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/5 "2013-01-07T17:00:55Z")

</div>

> [@Bob Ducca](#):
>
> We had a debit card stolen and the guy racked up a ton of charged just in taxi cabs and bar tabs in one night. There are a lot of ways to steal money without actually taking cash.

It’s amazing how often I use my own card without ever putting in my PIN or showing ID. Cabs and restaurants top the list. But I don’t think that I ever get cash.

---

<div class="post-metadata">

**Author:** ![janeslogin](https://avatars.discourse-cdn.com/v4/letter/j/df788c/32.png) [@janeslogin](https://boards.straightdope.com/u/janeslogin)\
**Post date:** [January 7, 2013, 5:01pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/6 "2013-01-07T17:01:10Z")

</div>

Here is the second hand story, with a reference link. I remember the original as being about the same story.

[NEWS of the WEIRD - Current News](http://www.newsoftheweird.com/archive/index.html)

> [@](#):
>
> He was often able to finish up, leave the theater, and make cash-advance withdrawals from ATMs before the movie had ended. [Hartford Courant, 10-22-2012]

---

<div class="post-metadata">

**Author:** ![davidm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/davidm/32/225_2.png) [@davidm](https://boards.straightdope.com/u/davidm)\
**Post date:** [January 7, 2013, 5:07pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/7 "2013-01-07T17:07:51Z")

</div>

I think the key here is the term “cash-advance”. He wasn’t using them as a debit cards to withdraw money from a bank account. He was using them as credit cards to get cash advances on credit.

I don’t know for certain if a PIN is required for a cash advance but if the thief was able to do this then I assume not.

---

<div class="post-metadata">

**Author:** ![Defensive\_Indifference](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/defensive_indifference/32/6502_2.png) [@Defensive\_Indifference](https://boards.straightdope.com/u/Defensive_Indifference)\
**Post date:** [January 7, 2013, 5:10pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/8 "2013-01-07T17:10:26Z")

</div>

As others have noted, you can make a crapload of purchases without entering a PIN or signing a receipt (e.g., online purchases if it’s a debit card), so that’s the easiest way to get money from a stolen card.

Another way is to just guess the PIN. A lot of people pick crappy PINs ([cite](http://finance.yahoo.com/blogs/the-exchange/cracking-pin-code-easy-1-2-3-4-130143629.html), [cite](http://www.huffingtonpost.com/2012/09/20/the-worlds-safest-atm-pin-four-digit-combination_n_1901430.html)). If you steal a bunch of cards, you’re not trying to guess any one person’s PIN - you’re trying to find the knuckleheads in the bunch who have picked 1234 as their PIN.

---

<div class="post-metadata">

**Author:** ![Machine\_Elf](https://avatars.discourse-cdn.com/v4/letter/m/82dd89/32.png) [@Machine\_Elf](https://boards.straightdope.com/u/Machine_Elf)\
**Post date:** [January 7, 2013, 5:22pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/9 "2013-01-07T17:22:13Z")

</div>

> [@Bayard](#):
>
> Another way is to just guess the PIN. A lot of people pick crappy PINs ([cite](http://finance.yahoo.com/blogs/the-exchange/cracking-pin-code-easy-1-2-3-4-130143629.html), [cite](http://www.huffingtonpost.com/2012/09/20/the-worlds-safest-atm-pin-four-digit-combination_n_1901430.html)). If you steal a bunch of cards, you’re not trying to guess any one person’s PIN - you’re trying to find the knuckleheads in the bunch who have picked 1234 as their PIN.

This. A lot of people are dipshits when it comes to picking PINs. A person has many familiar four-digit sequences in their life that they can choose as a PIN - the last four of their brother’s ZIP code, the last four of their sister’s work phone number, their parents’ street address, etc. Any one of those are unlikely to be guesses chosen by a stranger who steals your card, or even (someone you formerly thought of as) a friend. But if you choose 0000 or 1111, well, that’s almost as dumb as writing your PIN right on the back of the card (which some _really_ dumb people probably do).

---

<div class="post-metadata">

**Author:** ![markdash](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@markdash](https://boards.straightdope.com/u/markdash)\
**Post date:** [January 7, 2013, 5:31pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/10 "2013-01-07T17:31:08Z")

</div>

That’s why my PINs are “SDMB”, “BBQPIT” and “TROLLU”.

---

<div class="post-metadata">

**Author:** ![Amateur\_Barbarian](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@Amateur\_Barbarian](https://boards.straightdope.com/u/Amateur_Barbarian)\
**Post date:** [January 7, 2013, 6:21pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/11 "2013-01-07T18:21:22Z")

</div>

> [@markdash](#):
>
> That’s why my PINs are “SDMB”, “BBQPIT” and “TROLLU”.

My PIN is “gullible” - _shhhh_.

---

<div class="post-metadata">

**Author:** ![alphaboi867](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/alphaboi867/32/3898_2.png) [@alphaboi867](https://boards.straightdope.com/u/alphaboi867)\
**Post date:** [January 7, 2013, 8:14pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/12 "2013-01-07T20:14:30Z")

</div>

> [@davidm](#):
>
> I think the key here is the term “cash-advance”. He wasn’t using them as a debit cards to withdraw money from a bank account. He was using them as credit cards to get cash advances on credit.
> 
> I don’t know for certain if a PIN is required for a cash advance but if the thief was able to do this then I assume not.

Absolutely a PIN is required to get a cash advance _from an ATM_. You can also get cash advances without a PIN by going to a bank or Western Union and doing it at the counter, but you’re supposed to have photo ID that matches the card.

---

<div class="post-metadata">

**Author:** ![tdn](https://avatars.discourse-cdn.com/v4/letter/t/94ad74/32.png) [@tdn](https://boards.straightdope.com/u/tdn)\
**Post date:** [January 7, 2013, 8:20pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/13 "2013-01-07T20:20:44Z")

</div>

> [@NitroPress](#):
>
> My PIN is “gullible” - _shhhh_.

At least it’s not something in the dictionary.

---

<div class="post-metadata">

**Author:** ![Apocalypso](https://avatars.discourse-cdn.com/v4/letter/a/f19dbf/32.png) [@Apocalypso](https://boards.straightdope.com/u/Apocalypso)\
**Post date:** [January 7, 2013, 9:38pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/14 "2013-01-07T21:38:34Z")

</div>

Most, if not all, POS terminals in retail stores allow you to use a debit card as a credit card. You sign the slip instead of entering a PIN. Unfortunately very few cashiers will ask to see your ID. When I worked a register back in the day and asked to see a customers identification, rather than being upset, most customers thanked me saying they’d rather have the security and put up with the minor inconvenience of digging their id out.

---

<div class="post-metadata">

**Author:** ![Dallas\_Jones](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dallas_jones/32/3277_2.png) [@Dallas\_Jones](https://boards.straightdope.com/u/Dallas_Jones)\
**Post date:** [January 7, 2013, 10:23pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/15 "2013-01-07T22:23:24Z")

</div>

> [@Apocalypso](#):
>
> Most, if not all, POS terminals in retail stores allow you to use a debit card as a credit card. You sign the slip instead of entering a PIN. Unfortunately very few cashiers will ask to see your ID. When I worked a register back in the day and asked to see a customers identification, rather than being upset, most customers thanked me saying they’d rather have the security and put up with the minor inconvenience of digging their id out.

These terminals require you to sign on the pad if you are using the card as a credit card, or enter a PIN if using it as a debit card. Both work equally well. If you sign there is a pause while it says it is verifying the signature.

But the machine is not really verifying anything apparently. You can sign Mickey Mouse, you can make a few XXXs, or you can do what I do and just scribble a wavy line. Every time the signature is verified and the purchase allowed.

And since you are doing all these things by yourself on the POS card reader no one ever looks at your card or ID.

I cannot remember the last time a retail clerk actually handled my card, it is all done by me at the card reader/PIN pad, and is always accepted once the clerk gets the OK.

---

<div class="post-metadata">

**Author:** ![Machine\_Elf](https://avatars.discourse-cdn.com/v4/letter/m/82dd89/32.png) [@Machine\_Elf](https://boards.straightdope.com/u/Machine_Elf)\
**Post date:** [January 8, 2013, 1:24pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/16 "2013-01-08T13:24:19Z")

</div>

> [@Dallas\_Jones](#):
>
> POS

\<hijack\>  
Does anyone else read this as “Piece Of Shit” every time they see it?  
\</hijack\>

[sub]Yes, I know it stands for Point Of Sale…[/sub]

---

<div class="post-metadata">

**Author:** ![Mama\_Zappa](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@Mama\_Zappa](https://boards.straightdope.com/u/Mama_Zappa)\
**Post date:** [January 9, 2013, 4:05pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/17 "2013-01-09T16:05:13Z")

</div>

> [@davidm](#):
>
> I think the key here is the term “cash-advance”. He wasn’t using them as a debit cards to withdraw money from a bank account. He was using them as credit cards to get cash advances on credit.
> 
> I don’t know for certain if a PIN is required for a cash advance but if the thief was able to do this then I assume not.

I’d have thought that the ATM would still require a PIN (and I’m not 100% sure you _can_ get a “cash advance” on a debit card).

You could certainly use it as a credit card for purchases (assuming it’s branded as such vs. a plain debit card).

---

<div class="post-metadata">

**Author:** ![Mama\_Zappa](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@Mama\_Zappa](https://boards.straightdope.com/u/Mama_Zappa)\
**Post date:** [February 11, 2013, 5:23pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/18 "2013-02-11T17:23:35Z")

</div>

Heh - was looking for something else, found this thread, and thought I’d pop in to mention that the information might have been useful a week or so ago :p.

I went to get money at an ATM, walked up to the machine, and saw the screen displaying something to the effect of “take your G\*\*\*\*\*\* CARD YOU FOOL”.

And someone’s ATM card, sticking forlornly halfway out of the slot.

Being an honest sort (well, and of course not knowing his PIN), I took it indoors (the place was open) and handed it over to an employee. Then got on my phone, looked up the guy’s name, found him quickly, and phoned him at home to let him know where his card was. Poor guy sounded surprised, I don’t think he’d even realized it was missing.

---

<div class="post-metadata">

**Author:** ![Steve\_MB](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steve_mb/32/5339_2.png) [@Steve\_MB](https://boards.straightdope.com/u/Steve_MB)\
**Post date:** [February 11, 2013, 5:53pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/19 "2013-02-11T17:53:16Z")

</div>

> [@Bayard](#):
>
> you’re trying to find the knuckleheads in the bunch who have picked 1234 as their PIN.

They wanted it to be 1-2-3-4-5 to match their luggage, but the ATM only takes four digits.

---

<div class="post-metadata">

**Author:** ![steviep24](https://avatars.discourse-cdn.com/v4/letter/s/5f9b8f/32.png) [@steviep24](https://boards.straightdope.com/u/steviep24)\
**Post date:** [February 11, 2013, 6:14pm UTC](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359/20 "2013-02-11T18:14:47Z")

</div>

This thread made me think of something. Why are four digit PIN numbers still being used? Debit/credit cards would be more secure if they used 7 or 10 digit PIN numbers. Most people have no problem remembering phone numbers so this shouldn’t be a problem for the average person.

[Next page](https://boards.straightdope.com/t/how-do-thieves-get-money-with-a-stolen-atm-card/646359.md?page=2)
