As you are aware by now, Foss National Leasing has been forced to make a difficult decision to terminate “pay-at-the-pump” with a FossExpress card.  This is due to a recent, severe spike in fraudulent card use that has affected Foss and many other fleet or regular credit card issuers and their customers.

Briefly, criminal organizations have developed very sophisticated processes along with equally sophisticated equipment to obtain the information contained on a card’s magnetic strip.
 
The older process is to engage someone “on the inside” who swipes a card a second time in a card reader in the kiosk.  This is still in use, but more difficult as misuse requires the insider involvement.  The newest process involves actually opening up a fuel pump and installing their equipment.  This is done at the same time the operator may be distracted by accomplices or the pump involved is shielded from the kiosk by a large van or truck.  The equipment consists of a second card reader that piggybacks on the normal one and installing a “pinhole” camera above the keypad to capture the Personal Identification Number [PIN] as it is entered.
 
With either method, all of the transaction information is captured on an electronic recording device.  All of the equipment is removed at a later time.  The recorded data is then dumped and recorded on blank plastic creating a cloned card.

By removing the access to the in-pump reader we feel that we may greatly reduce this potential for the cloning of a FossExpress card.  It also makes it more difficult for a thief to “steal” a transaction, as they must go in to sign for it. However, there is still potential for abuse and we recommend the following for the FossExpress card and any other card for that matter.  Note that by thieves having the ability to record the PIN number, a banking card with a PIN is also subject to reduced security.

• Treat your card like cash. Never leave it out in the open where it may be stolen or swiped without your knowledge.  Do not leave it in your vehicle, wherever possible.  This includes leaving your card with your service provider when it is in for service.
• Always be aware of how the card is handled by whoever you must give it to.  The card should only be swiped in a single Point Of Sale [POS] device in plain view.  It should never be swiped in a second POS device.
• Beware of “failed transactions”.  If you are told the transaction failed ensure that you get a receipt for this.  All POS devices will print a receipt with a failure notice on it.  We strongly advise that you keep both receipts for at least 90 days, in case you need to dispute a transaction.
• Report activity that affects the card security.  If you misplace your card, you think it has been stolen, or you have reason to believe that it may have been double swiped or otherwise compromised you should it report it as LOST or STOLEN immediately.

If for any reason you think your FossExpress card has been compromised this may be reported to 800.461.3677. A new card will be produced and sent out the next business day.