Post by DIzzIE on Jul 27, 2003 22:15:02 GMT -5
Just a few words about the Lebanese Loop….
This was a very popular scam a few years ago, practiced in many countries (with the first half of the title suggesting the country of origin…). The scam works by making a device that is easily extractable itself, yet prevents the card from being ejected, and then getting the PIN code, thus being able to use the ATM card…
Step one is making the actual ‘loop.’ The loop, was actually used in the early stages of this device, whilst later versions started using light plastic card sleeves, and still newer versions are equipped with portable card skimmers that are capable of ripping the data off the cards automatically (thus avoiding any shoulder surfing/social engineering). However, these later models are much more complex, and as such are much harder to implement, thus I shall focus on the original models.
The traditional loop is made by acquiring a strip of tape (thin/narrow electrical tape is the usual choice), which should be slightly longer than the length of a standard credit card; roughly 20 centimeters.
The ends of the loop are then attached to the top/bottom of the card slot, and the rest of the loop is prodded into the card slot (with a thin prod such as a pocket knife blade…). Care is taken to assure that the tape ends sticking out are as minimal and unnoticeable as possible.
And thus you have the earliest model of the infamous Lebanese Loop.
However, while prodding the tape inwards does work, it takes a little amount of time. Thus, a much faster device is often used: a classic plastic card slip or envelope, such as the one pictured below:
A protrusion is simply made along the shorter side of the slip, and it is then inserted into the ATM card slot. Of course, the problem that arises with using slips is to assure that the card will fit into the slip, which can be achieved by widening the gap by adding a little padding made of a rolled up ball of tape…
Finally, if you have a little more time/equipment, you may also wish to manufacture your own card slot opening in the first place, thus eradicating the need for pulling out the sleeve/tape, and thus risking the target noticing any protrusions sticking out of the slot. However, the downfall is perhaps leaving a noticeable ‘bulge’ and thus risking tipping off frequenters of that particular ATM. Nonetheless, after cutting a suitable piece of sheet metal and coloring it to match the ATM as closely as possible, your Lebanese Loop will look something like this:
Well, now that you have made the actual loop, you will need to obtain the PIN code to be able to use the card. The PIN is obtained by either installing a miniscule camera
on the edge of the ATM, overlooking the keypad, or by the more riskier shoulder surfing (watching the target input the PIN over his shoulder…)
Depending on the ATM model, the ATM may or may not automatically prompt the target for his PIN when the Lebanese Loop is in place, thus it may also be necessary to place a small plaque (complete with the bank’s logo) explaining that if the machine does not seem to be doing anything to input the PIN and press a selected sequence of buttons, or by acting the role of a disgruntled former ATM user, who would say ‘yeah I had the same problem, the bank tellers just told me to input the PIN and hit Enter….’
As the target leaves, you then extract the card, and with the knowledge of the PIN proceed to extract the maximum possible amount…
Naturally, disguises must be used to avoid later detection by surveillance cameras, as well as all fingerprints and other identifying marks being wiped from the loop prior to placement.
I hope this text has been beneficial
For other ATM scams, perform a Google search, or browse some of the texts available in various online text mills such as TOTSE’s ‘Bad Ideas’ area: www.totse.com/en/bad_ideas/scams_and_rip_offs/index.html (For example, there is an excellent text describing another ingenious scam: superglueing the cash return slot before a holiday, only to pry it open later…)
-
Standard Disclaimer: It is understood that the above is written for educational/informational/theoretical/entertainment purpose only. The poster does not accept any responsibility for any actions you may take and does not condone any activity which goes against the law.
-
This was a very popular scam a few years ago, practiced in many countries (with the first half of the title suggesting the country of origin…). The scam works by making a device that is easily extractable itself, yet prevents the card from being ejected, and then getting the PIN code, thus being able to use the ATM card…
Step one is making the actual ‘loop.’ The loop, was actually used in the early stages of this device, whilst later versions started using light plastic card sleeves, and still newer versions are equipped with portable card skimmers that are capable of ripping the data off the cards automatically (thus avoiding any shoulder surfing/social engineering). However, these later models are much more complex, and as such are much harder to implement, thus I shall focus on the original models.
The traditional loop is made by acquiring a strip of tape (thin/narrow electrical tape is the usual choice), which should be slightly longer than the length of a standard credit card; roughly 20 centimeters.
The ends of the loop are then attached to the top/bottom of the card slot, and the rest of the loop is prodded into the card slot (with a thin prod such as a pocket knife blade…). Care is taken to assure that the tape ends sticking out are as minimal and unnoticeable as possible.
And thus you have the earliest model of the infamous Lebanese Loop.
However, while prodding the tape inwards does work, it takes a little amount of time. Thus, a much faster device is often used: a classic plastic card slip or envelope, such as the one pictured below:
A protrusion is simply made along the shorter side of the slip, and it is then inserted into the ATM card slot. Of course, the problem that arises with using slips is to assure that the card will fit into the slip, which can be achieved by widening the gap by adding a little padding made of a rolled up ball of tape…
Finally, if you have a little more time/equipment, you may also wish to manufacture your own card slot opening in the first place, thus eradicating the need for pulling out the sleeve/tape, and thus risking the target noticing any protrusions sticking out of the slot. However, the downfall is perhaps leaving a noticeable ‘bulge’ and thus risking tipping off frequenters of that particular ATM. Nonetheless, after cutting a suitable piece of sheet metal and coloring it to match the ATM as closely as possible, your Lebanese Loop will look something like this:
Well, now that you have made the actual loop, you will need to obtain the PIN code to be able to use the card. The PIN is obtained by either installing a miniscule camera
on the edge of the ATM, overlooking the keypad, or by the more riskier shoulder surfing (watching the target input the PIN over his shoulder…)Depending on the ATM model, the ATM may or may not automatically prompt the target for his PIN when the Lebanese Loop is in place, thus it may also be necessary to place a small plaque (complete with the bank’s logo) explaining that if the machine does not seem to be doing anything to input the PIN and press a selected sequence of buttons, or by acting the role of a disgruntled former ATM user, who would say ‘yeah I had the same problem, the bank tellers just told me to input the PIN and hit Enter….’
As the target leaves, you then extract the card, and with the knowledge of the PIN proceed to extract the maximum possible amount…
Naturally, disguises must be used to avoid later detection by surveillance cameras, as well as all fingerprints and other identifying marks being wiped from the loop prior to placement.
I hope this text has been beneficial
For other ATM scams, perform a Google search, or browse some of the texts available in various online text mills such as TOTSE’s ‘Bad Ideas’ area: www.totse.com/en/bad_ideas/scams_and_rip_offs/index.html (For example, there is an excellent text describing another ingenious scam: superglueing the cash return slot before a holiday, only to pry it open later…)
-
Standard Disclaimer: It is understood that the above is written for educational/informational/theoretical/entertainment purpose only. The poster does not accept any responsibility for any actions you may take and does not condone any activity which goes against the law.
-
