We've already discussed a lo-tech but surprisingly effective attack on ATM users here and elsewhere.

However, Brian Krebs has recently posted on more conventional skimming attacks: Green Skimmers Skimming Green. An interesting and useful comment thread too. However, in view of the mentions there of chip and pin technology, it's worth pointing out that while chip and pin has been pretty successful in Europe and elsewhere in mitigating fraud, it's not the complete answer, as discussed previously here and here

* http://en.wikipedia.org/wiki/Hole_in_the_Wall_Gang

David Harley CITP FBCS CISSP
ESET Senior Research Fellow