Chip and PIN CCTV security fears dismissed

Leading UK retailers have dismissed the threat that CCTV cameras pose to the security of the new chip and PIN bank card payment system.

The security issue has been raised by customers concerned that existing in-store CCTV cameras focused on checkout tills will inadvertently record them keying in their PIN numbers when using chip and PIN cards to pay for goods.

That footage could potentially be used by corrupt staff in collusion with card thieves to steal customers' bank card and PIN numbers.

Although most stores have CCTV cameras covering the checkout area to monitor for fraud, several silicon.com readers have expressed concern over the ability of those CCTV cameras to also inadvertently capture customers' PIN numbers.

But those claims have been dismissed by leading UK retailers contacted by silicon.com.

A spokesman for supermarket chain Tesco said: "Generally the customer will be standing in front of the PIN terminal so we don't see that it poses a risk."

Sainsbury's, however, failed to respond to repeated requests for comment on whether it had carried out any assessment of the risk posed by CCTV cameras to chip and PIN in its stores and whether any security advice or guidance had been issued to its staff.

Paul Smith, director at the retail industry body the British Retail Consortium, described it as a form of "electronic shoulder-surfing" but said that retailers can minimise the risk by taking sensible precautions and positioning the PIN pads away from cameras.

"Even if the number was captured it is no good in isolation. You still have to have that in conjunction with the card to complete any transaction," he said.

The advice of the chip and PIN organisation, which is backed by card payments body APACS, is that retailers should take adequate steps to ensure the security of customers' PIN numbers is not compromised.

A note on its website to retailers says: "You need to make sure your CCTV cameras cannot see the PIN being entered."

In the meantime contact us here at silicon.com if you believe you've been a victim of chip and PIN fraud and we'll look into it for you