Shoulder surfing is a method of obtaining the victim's PIN, password or card information by physically observing them. It frequently occurs in places such as ATMs, cafes, offices.
Relevant Crime Types
- TCK art.245/1: Person who uses someone else's debit or credit card without permission: 3-6 years + criminal money
- TCK art.243: Entering the information system
- TCK art.158/1-f: Information system vehicle fraud as fraud
Common Scenarios
- Receiving ATM PIN with cameras/eyes
- Monitoring the online bank password of the person using the laptop in the cafe
- Saving the password in public transportation
- Retrieving the password of a colleague in the office by seeing it
- Taking notes by seeing the card information
What the Victim Should Do
- Call the bank immediately, have the card blocked
- If there is any movement, report "objection"
- Request camera recordings to be interrogated
- File a criminal complaint to the police station/prosecutor's office
- Change all your passwords/PINs
Preventive Measures
- Cover the keyboard with your hand when entering the PIN at the ATM
- Side/behind you see
- Do not bank on Public Wi-Fi
- Use a low-value card for online shopping
- Activate 2FA
Supreme Court 11. CD
11. CD adopts that "obtaining + using" card information by seeing will be punished by TCK Article 245/1 + 158/1-f.
Cyber crimes lawyer is recommended.