Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Europol and law-enforcement partners notified 443 online merchants in October and November 2023 that customers’ payment-card data had been compromised in digital-skimming attacks. The operation supported Greece and involved authorities from 16 countries, private partners, the European Union Agency for Cybersecurity (ENISA), and national computer security incident response teams. The warning was reported in Europol’s Consolidated Annual Activity Report 2023; it is a historical operation, not a new alert issued in 2026.

What happened in the 2023 operation?

Europol’s 2023 annual report says the two-month operation enabled Europol and its partners to notify 443 online merchants that their customers’ credit-card or payment-card data had been compromised. The report does not say that every store was still infected when it received notice, how long any compromise lasted, or that every affected customer later experienced fraud.

Authorities from 16 countries took part, alongside private partners and ENISA. National Computer Security Incident Response Teams (CSIRTs) supported the action, which supported Greece. Separately, a contemporaneous SecurityWeek report published December 27, 2023 said the operation identified two dozen new digital skimmers. It also reported that Group-IB counted 132 digital-skimmer families at the time; that is a dated threat-intelligence estimate, not a current inventory.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What is digital skimming?

Europol defines it this way: “Digital skimming is the action of stealing credit card information or payment card data from customers of an online store.” The attack targets an online checkout form, not a physical payment terminal. It is also commonly called web skimming, online card skimming, e-skimming, formjacking, or Magecart. SecurityWeek uses the term JavaScript sniffers, or JS-sniffers. These labels overlap in general reporting; they do not mean every malware family or actor is the same.

#1 Best Overall
CTA Digital Universal Credit Card Reader Stand - Reader Terminal Stand for Verifone, Ingenico & Pax POS Stations - Bolt Down or Adhesive Anti-Theft Security - Easy Install
  • | DURABLE | Crafted with precision from high-quality, all-metal construction, our Universal Card Reader Stand is engineered to withstand the demands of busy POS environments. Its robust design ensures long-lasting durability, providing a firm and stable foundation for your POS terminal.
  • | COMPATIBLE | with most 2.8 – 4-inch card readers like Ingenico / Verifone / PAX and more.
  • | SECURE | Engineered with security in mind, this stand features a robust locking mechanism that deters unauthorized access and ensures the safety of your valuable POS terminal. The anti-theft design, combined with precision construction, provides a secure enclosure for your card reader, thwarting any attempts at tampering.
  • | EASY INSTALLATION | Transform your checkout experience effortlessly with our CTA Universal Card Reader Rotating Terminal Stand. Setting up and installing your stand is a breeze, thanks to our user-friendly design. No complicated instructions or lengthy assembly processes – just a straightforward setup that gets you up and running in minutes.
  • | WARRANTY | Pride in our quality, we offer a 1 year warranty on the purchase of this product.

How the attack works

  1. An attacker gains access to an online store’s source code or server, or to code from a third-party tool used by the store.
  2. The attacker inserts malicious code into the payment flow.
  3. When a shopper enters payment details, the code copies the data. It may be sent immediately or held on the server for later collection.

Europol’s digital-skimming explainer notes that checkout can appear normal: a shopper may successfully place an order and expect delivery without realizing the card details were copied. Delayed collection can also make a compromise harder to spot.

What should online merchants do?

Europol recommends layered defenses rather than relying on a single control. A merchant’s security program should cover both its own ecommerce code and the third-party components included in the payment experience.

Rank #2
Sale
POS Swivel Stand for Pax S300 & Pax A35, 360° Rotating Payment Terminal Mount, 50° Tilt, Durable Metal POS Stand Kit
  • 360° SWIVEL & 50° TILT FOR FLEXIBLE PAYMENT POSITIONING: The Hilipro POS Swivel Stand rotates 360° left and right and tilts up to 50°, making it easier for customers and employees to view and operate the payment terminal during transactions. Designed as a PAX S300 stand and PAX A35 stand for retail counters, restaurants, kiosks, hospitality businesses, and other point-of-sale environments.
  • DURABLE METAL CONSTRUCTION FOR EVERYDAY POS USE: Built from sturdy metal, this countertop payment terminal stand provides a stable mounting solution for daily checkout and payment processing. The durable design functions as a POS terminal holder, payment terminal stand, card machine holder, and card reader mount, helping keep the compatible PAX S300 or PAX A35 securely positioned on the counter.
  • CLEAN CABLE MANAGEMENT FOR AN ORGANIZED CHECKOUT: The integrated cable routing design helps guide the payment terminal cable neatly through the stand, reducing loose wires around the checkout area. This PAX payment terminal mount helps maintain a cleaner, more organized counter while providing convenient access to the terminal for customer payments.
  • COMPLETE POS STAND KIT FOR SIMPLE INSTALLATION: The Hilipro PAX S300 and PAX A35 POS stand is designed as a complete mounting solution for checkout counters and payment stations. The kit includes the components needed for installation, providing a practical setup for businesses looking for a payment terminal holder, POS countertop mount, card reader stand, or PAX card machine stand.
  • DESIGNED FOR PAX S300 & PAX A35 PAYMENT TERMINALS: Specifically designed for PAX S300 and PAX A35 payment terminals, this dedicated POS mount provides a practical fit for compatible devices. The 4.7-inch-tall countertop stand offers a convenient mounting position for card payments, contactless transactions, POS systems, checkout stations, and payment processing counters.
  • Install security patches and critical software updates promptly.
  • Require multi-factor authentication (MFA) and strong passwords for staff accounts; restrict control-panel access to specific IP addresses where practical.
  • Train staff to recognize and handle spearphishing attempts.
  • Monitor for malware with capabilities specific to web skimming.
  • Run regular automated vulnerability audits that include the ecommerce platform and installed third-party components.
  • Implement Content Security Policy (CSP) and Subresource Integrity (SRI) to help control and verify scripts used on the site.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What to do if a store may be infected

Europol advises merchants who suspect an infection to act promptly and preserve information that may help an investigation:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Change administrator and database passwords immediately.
  2. Use a malware scanner to look for backdoors.
  3. Collect available evidence and report the attack to national police.
  4. If personal data was breached, comply with applicable GDPR legislation.

The GDPR step is general guidance; the appropriate obligations depend on the circumstances and applicable law.

Best Value
Sale
Square Reader for contactless and chip (2nd Generation)
  • Use the, easy-to-use, and customizable POS to get started.
  • Accept contactless payments, chip cards, Apple Pay, and Google Pay from anywhere, with improved connectivity, extended battery life, and enhanced security. Pay one low rate for every tap or dip.
  • No long-term commitments or contracts, no monthly fees- and with offline payments, keep taking payments for up to 24 hours.
  • Safely and securely accepts payments anywhere. Plus, get data security, 24/7 fraud prevention, and payment-dispute management at no extra cost.
  • Use the, easy-to-use, and customizable POS to get started.
Rank #4
DCCStands Swivel and Tilt Ingenico Lane/3000/5000/7000 Terminal Stand, Screw-in and Adhesive
  • The Swivel and Tilt Ingenico Lane 3000/3600/5000/7000/8000/RX5000/RX7000 Screw-in and Adhesive POS system stand is a metal credit card terminal holder; stand is designed for Ingenico Lane 3000/3600/5000/7000/8000/RX5000/RX7000 terminal to make in-store card purchases stable and secure
  • Swivel and Tilt terminal stand is essential to enhance customer experience and merchant efficiency; metal stand can tilt up to 60 degrees and swivel a full 190 degrees, making moving POS terminal from customer to merchant easier; improves overall payment transaction
  • Adhesive or screw mount allows for more seamless customer interactions; comes with an additional locking screw to secure the terminal tightly into place; the stable design and height makes it a necessary staple for any checkout
  • Preserve your POS terminal; flange cover conveniently hides wires and mount keeps your terminal secure for minimized risk of theft or damage; made from robust mild steel, our mounts are strong and durable; key lock option to guard against terminal theft
  • Comes with 2 options for securing your holder: 4 screws and adhesive sticker; terminal NOT INCLUDED; fits Ingenico 3000/3600/5000/7000/8000/RX5000/RX7000 POS terminal; pole stands 7 inches tall; compatible with any round or square DCCStands Freestanding Plate
Rank #3
Square Handheld - Portable POS - Credit Card Machine to Accept Payments for Restaurants, Retail, Beauty, and Professional Services
  • With Square Handheld, you can accept payments, take tableside orders, or scan barcodes anywhere. With a slim design and comfortable grip, the POS is easy to carry in your palm or pocket. Square Handheld is designed to withstand water splashes and dust. Add an optional protective case for accidental drops. A long-lasting battery and offline payments let you keep selling.
  • Slim, pocketable, and lightweight so you can accept payments wherever your customers are.
  • Take tableside orders, bust lines, or use the built-in barcode scanner, all with one sleek device.
  • A battery that can power through your shift and offline payments let you keep selling, even if your internet is down.
  • Accept all major credit and debit cards and pay one simple rate with no hidden fees and no long-term contracts required.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.