Old-School Credit Card Scams Are Far From Dead

You might still get a fake credit card offer in the mail with a QR code that leads to a phishing site.

Phishing scams using physical mail and credit card skimmers are resurfacing as effective criminal tactics, despite advancements in digital fraud. Criminals are mailing fake credit cards with QR codes or URLs to trick victims into visiting fraudulent websites and divulging personal information. This method has been observed in waves across Portugal, France, and Germany and is expected to spread. Concurrently, authorities have indicted individuals for using credit card skimmers, particularly targeting government SNAP benefits distributed via magnetic stripe-only EBT cards. These skimming operations, which cost over $1 billion annually in the US, exploit older technology where secure chips are bypassed by tampering with card readers. While major card issuers like Mastercard are phasing out magnetic stripes by 2033, many systems still rely on them, presenting ongoing vulnerabilities.

The resurgence of physical mail scams and magnetic stripe skimming highlights a strategic shift by criminals towards exploiting residual vulnerabilities in older payment systems, even as AI enhances digital fraud. The increasing sophistication and cost-effectiveness of producing realistic fake credit cards, coupled with the direct access to savings accounts these scams can provide, demonstrate an evolving threat landscape. This dual approach, blending physical deception with digital phishing, targets a broader range of victims and is expected to expand globally.

The continued prevalence of magnetic stripe EBT cards and vulnerabilities in point-of-sale systems means that credit card skimming remains a significant threat, costing the US over $1 billion annually. While chip technology offers greater security, older ATMs and smaller merchants can still force chip-enabled cards to use their less secure magnetic stripes. This persistent risk, particularly for government benefit recipients and anyone using non-chain payment terminals, underscores the ongoing need for vigilance against these seemingly antiquated, yet highly lucrative, fraud methods.