Debit Cards Are Different
With credit cards, users who spot fraudulent charges on their bill can simply decline the charges and not pay the bill. On the other hand, debit cards draw money directly from your checking account, rather than from an intermediary such as a credit card company.
"Any transaction you do outdoors at an open ATM is going to be higher risk exposure," McGoey says. "If the public has access to it, then someone has the ability to add skimming devices to it, position cameras on it and position themselves in a way where they could surveil it."
Stealing PINs at Gas Stations
"In a gas station where you do have a whole bunch of pay-at-the-pump kinds of things and minimal supervision, it's pretty easy for a bad guy to put a skimming device on and put a little pinpoint camera there and compromise debit cards that way," McNelley says. Thieves often use small cameras to capture footage of debit card users entering their PINs so they can have free access to their money.
The Web Is a Risky Place
"Online is the No. 1 place where consumers should not use their debit cards," she says. "It's susceptible at so many points. The consumer could have malware on their computer, so it could be at their endpoint that the data get compromised. It could be a man-in-the-middle attack where somebody is eavesdropping on their communications via the wireless network. And then at the other end, that data goes into a database at the merchant. As we've seen with some of the higher-profile breach events over the last year or so, that data is going to be vulnerable if (they're) not properly cared for."
Aside from the potential for hacking at many different points in a transaction, Abagnale says a fundamental problem with using debit cards online is it's impossible to know who is handling your information.
Restaurants Keep Customer Data on File
"Any place where the card is out of hand" can increase the chances of fraud, says McGoey. "The guy comes to your table, takes your card and disappears for a while, so he or she has privacy," giving the person the opportunity to copy your card information.
Even restaurants without sit-down service can present a threat. McNelley says using debit cards to order delivery can be risky because cashiers tend to keep customer payment information on file. That may make future orders more convenient, but small businesses rarely take the steps necessary to safeguard payment information, she says.