“Shoulder surfing” thefts occur when a thief stands very close to the thief victim as they enter a password, PIN number, or other information when making a transaction. This can take place in the context of:
- ATM withdrawals
- Bank deposits
- In-store purchases (i.e., credit card “swipe” machines)
- Various other public settings
Additionally, some shoulder surfing thefts may be accomplished through hidden cameras set up by the criminal beforehand. In many instances, a whole team of criminals may be conspiring on a single incident. Shoulder surfing can also be part of an overall identity theft scheme.
The practice dates back to the days when criminals spied on pay phone users as they typed in their phone card numbers to make calls. Following this, thieves observed their victims key in their PINs at ATMs, pay for gas at self-service pumps, or even make a purchase in a store.
When Does Shoulder Surfing Happen?
Sharing personal information in a public place can lead to shoulder surfing. It includes not only ATMs, payment kiosks, and PIN pads but also just about any place where you enter personal information on a laptop, tablet, or smartphone.
The original shoulder surfers didn’t loom over their victims’ shoulders to snoop around. They observed finger movements as people typed numbers on a keypad from a safe distance.
Similarly, today’s shoulder surfers often go unnoticed as they quietly watch others in public places such as airport lounges and shopping centers, bars, and restaurants, on trains or subways, or anywhere other people are at large.
Though you may feel safe from shoulder surfing because there is no one right behind you at the ATM, today’s sophisticated criminals often spy from a distance. Your screen or keypad might be viewed through high-powered binoculars, miniature cameras, or the camera on your phone or tablet. They may be listening (often using powerful microphones) as you read off credit card numbers or recount your Social Security number over the phone. Criminals often snap photos, record videos, or record audio of the information for later interpretation.
The following are some common places where shoulder surfing occurs:
- At a bar: You’re at a busy restaurant bar waiting for your date. You browse Instagram while you wait. Sadly, you don’t realize the person jammed against you is looking at your password, which happens to be the same password you have for your email account and banking information.
- At an ATM: You’re getting money at an ATM. You feel safe as you wait in line since the man behind you is looking at his phone at least 10 feet away (or so you think). In reality, he is recording your finger movements on his phone and quickly deciphering them to obtain your PIN.
- At the airport: Your flight got delayed, so you open your laptop and pass the time in the airport lounge with some online shopping. You’re so excited that the shoes you’ve been eyeing are on sale that you don’t notice the woman staring at your screen as you enter your credit card information.
What Are the Consequences of Shoulder Surfing?
Fraudulent purchases made with credit card information are just one example of the damage shoulder surfers can cause. Your bank account and financial well-being can be severely harmed if a criminal gathers more personal information about you.
If a thief installs a card skimmer at an ATM, they may be able to obtain both your PIN plus your account number and get access to your bank account. An intruder who sees your smartphone PIN and gains access to it could access all the account info, payment card data, and passwords stored on it.
A new credit card can easily correct one or two fraudulent purchases. However, if the fraud isn’t discovered right away, it could have long-term consequences. Shoulder surfers may also sell your information on the dark web.
Shoulder surfing can make you vulnerable to identity theft at worst. Your Social Security number may be used by a criminal to open new credit accounts, apply for loans, rent homes, or apply for jobs under your name. An identity thief can steal your tax refund, use your health insurance to get medical care or apply for government benefits using your name. They may even commit a crime and provide your personal information when questioned by police, resulting in a criminal record or a warrant out for your arrest.
Identity theft could take months or years to resolve, requiring you to make relentless telephone calls, take time away from work, and pay for services and reports needed to restore your identity. You can incur a lot of financial and emotional strain, and your credit score could be affected as well. Fraud and identity theft can harm a credit history, making it difficult to rent an apartment, buy a home, finance a car, or even get a job.
Are There Any Legal Consequences for Shoulder Surfing Crimes?
Obtaining access to a person’s bank account, personal records, or other information is considered a crime and may be punished harshly. The offenses can be classified as misdemeanors, resulting in criminal fines, jail time, and other penalties. When very large amounts of money or property are stolen, the charges may be elevated to felonies.
Additionally, shoulder surfing crimes may result in civil damages awards to compensate the victim for their losses. In some cases, the institution where the crime occurred may be required to increase or update its security policies.
How Can Shoulder Surfing Crimes Be Avoided?
You can prevent shoulder surfing crimes by:
- Keep your surroundings in mind when making important monetary transactions – don’t let anyone too close to you.
- When entering codes, cover your information with your hand or another object.
- When possible, please fill out as much information beforehand (e.g., get bank slips and fill them out at home).
Lastly, you should report any suspicious activity to the police and the store managers as soon as you notice it. Many shoulder surfing crimes go unpunished because people choose not to report suspicious behavior.
Monitor Your Credit Regularly
Getting a free credit report from AnnualCreditReport.com or directly from Experian is wise. Regular credit reports can help you protect yourself against fraud and identity theft. You can stay on top of your credit report by signing up for free credit monitoring. Some free credit monitoring services alert you to new inquiries and accounts, changes to your personal information, and suspicious activity on your credit report.
Consider adding a fraud alert to your credit reports if you’ve been the victim of fraud or suspect you may have been. If you place a fraud alert (also called a security alert), lenders will take additional steps to verify your identity before issuing new credit cards or loans in your name. You can place a fraud alert at any of the three major credit bureaus – Experian, Equifax, and TransUnion – and it will appear at all three.
You may risk having your personal data compromised by shoulder surfers. With a credit monitoring service and a little common sense when you’re in public, you can be at ease.
Should I Hire a Lawyer as the Victim of a Shoulder Surfing Crime?
Victims of shoulder surfing crimes can suffer serious losses. You may wish to hire a criminal lawyer if you believe that you have been victimized by shoulder surfing theft. You can get legal advice for your situation from an attorney who can explain your rights. Your lawyer will also be able to represent you in court during a trial.
