The Reynolds Center Horizontal Logo In Color

Two Minute Tips

Help your readers protect themselves from “e-skimming”—the latest consumer cybercrime

March 10, 2020

Share this article:

Look into these three ways that scammers are trying to worm their way into your readers' pocketbooks. (Image via Pixabay user mohamed_hassan)

What do the recent arrests of three hackers in Indonesia have to do with U.S. consumers?

Plenty. The three thieves are part of “Magecart,” a network of more than half a dozen cybercrime groups operating around the globe. Every day, users who enter their credit card information in checkout and payment forms has no idea that they’ve just become the next victim of “e-skimming,” which is the latest type of cybercrime to appear.

U.S. consumers know how to protect themselves from data breaches, identity theft and other types of online scams in this blog, but they may not have heard about e-skimming yet. As e-commerce becomes increasingly commonplace, business reporters can help their readers protect themselves by answering one or all the following questions:

What is “e-skimming?”

E-skimming plants malicious JavaScript code in online stores to steal data on credit card payments. This latest cybercrime has been on the Federal Bureau of Investigation’s (FBI) radar for about seven years, but these crimes have escalated since 2018. One reason for the uptick in this type of cybercrime? It’s become harder to steal that information from cash registers or Point-of-Sale (POS) terminals.  

Query your readers and ask if they were skimmed recently after making a purchase online.  Consumers know about skimmers, or hidden devices, that hack their information at gas stations and non-bank ATMS, but e-skimming is growing as cybercriminals share malware online. This report from threat researcher Yonathan Klijnsma at security firm RiskIQ will bring you up to speed.

How do I know if I’m a victim of “e-skimming?”

You won’t. The key to protecting yourself from e-skimming is preventing it from happening to you. The size of data breaches are startling: In 2019, data breaches increased 54 percent and exposed 4.1 billion records, according to cybersecurity firm Symantec. 

Have several cybersecurity experts weigh in to help answer this question. Good sources are Herb Stapleton, section chief for the FBI’s cyber division; Randy Pargman, senior director for threat hunting and counterintelligence at Binary Defense; and Klijnsma. 

I like to shop online. How can I protect myself?

This question lends itself to an online video. Consumers can take several steps. They should shop only at secure websites; know the site’s policies on privacy and security; be aware of computer “cookies,” which track and store your information; install security updates as soon as they are available; and never give out their Social Security number. Other tips: Use a credit card instead of debit card. Monitor your credit cards regularly for any unusual activity. Pay with a credit card instead of a debit card. Consider paying with a virtual credit card, a unique number used for specific transactions. The U.S. Department of Homeland Security adds a few more tips here. Develop your own list after talking with your consumer panel.


  • Dorianne Perrucci

    Since 2001, Dorianne's freelance bylines have appeared in leading print and digital news outlets, including The New York Times, Newsweek, The Wall Street Journal, TheStreet.com, The Star-Ledger and NJ Biz. During the financial crisis of 2007-2009, Do...

More Like This...

A new way to organize business investigations

A review of Google’s scan and search tool for journalists Imagine a research assistant that could help you analyze and organize large data collections, transcribe

Two Minute Tips

Sign up now.
Get one Tuesday.

Every Tuesday we send out a quick-read email with tips for business journalism.

Subscribers also get access to the Tip archive.


Get Two Minute Tips For Business Journalism Delivered To Your Email Every Tuesday

Two Minute Tips

Every Tuesday we send out a quick-read email with tips for business journalism. Sign up now and get one Tuesday.