Shoulder surfing is a type of social engineering technique used to obtain personal information such as passwords, PINs, and other confidential data by observing someone directly or from a distance). It is an effective way to steal information in crowded places because it is relatively easy to stand next to someone and watch as they fill out a form, enter a PIN at an ATM, or pay for something using a credit card. Shoulder surfing can also be done from a long distance with the aid of binoculars or other vision-enhancing devices. Examples of shoulder surfing include:
- Looking over someones shoulder to see their screen while they are typing in their password or PIN.
- Recording someones screen and keyboard with a hidden camera).
- Listening to someones conversation to obtain confidential information.
To protect yourself from shoulder surfing, experts recommend that people shield paperwork or their keypad from view by using their body or cupping their hand. Here are a few other helpful tips to avoid being victimized by shoulder surfing:
- Cover the ATM keypad when entering your PIN.
- Use strong passwords, a single sign-on password manager, two-factor authentication, or biometric authentication for an added layer of cybersecurity.
- Be aware of your surroundings and watch for people and recording devices.
- Sit with your back to the wall if youre in a public place and entering personal or financial information into your computer or cellphone.
- Use VPN if you do financial transactions on Wi-Fi.
In summary, shoulder surfing is a technique used to steal personal information by observing someone directly or from a distance. It is important to take precautions to protect yourself from shoulder surfing, such as shielding your keypad and being aware of your surroundings.