Physical · Incident Response · Incident Response
Fake top-cover skimmer on a mall POS terminal · 47,000 cards read over 8 weeks
Mall management discovered 8 weeks ago that a POS terminal's top cover had been swapped with a fake device. In that period 47,000 cards were read and sent to the attacker via a Bluetooth chip. 1,200 frauds, averaging 1,800 TL. A bank alert arrived. You will make 11 critical decisions in sequence.
Before you start the scenario
- You are the decision-maker in this incident · every choice leaves time/cost/reputation behind
- There are no wrong answers · just like in real life · but some paths are more expensive
- You can restart it anytime · try different paths
- At the end, a 3-axis score + alternative routes are shown