Questioned Document: Card Skimming, Cloning, EMV and IT Act 66C/66D

This mock tests advanced knowledge of payment card fraud forensics, covering physical skimming attack anatomy (ATM card-slot skimmer, overlay keypad, pinhole camera), ISO/IEC 7811 magnetic stripe track structure (Track 1 IATA alpha-numeric at 210 bpi, Track 2 ABA numeric at 75 bpi, Track 3 read-write), magnetic stripe cloning via MSR writer, EMV chip security (dynamic ARQC, ARPC, Static Data Authentication vs Dynamic Data Authentication), shimming attacks and their limits, NFC/RFID contactless skimming at 13.56 MHz (ISO/IEC 14443), tokenization (Visa Token Service, Mastercard MDES), BIN range fraud analysis, CVV1 3DES computation, Luhn algorithm validation, and the Indian legal framework (IT Act 2000 Sections 43, 66, 66C, 66D; BNS 2023 Sections 318 and 336; BSA 2023 Section 63; Anvar P.V. v. Basheer 2014; Arjun Panditrao 2020).

The mock is designed for forensic science aspirants preparing for UGC-NET Paper II Unit IX, NFSU MSc entrance, and CFSL technical examinations. Questions test precise differentiation between Track 1 and Track 2 encoding parameters, ARQC vs ARPC roles, IT Act Section 66C (identity theft) vs 66D (cheating by personation), BNS Section 318 (cheating) vs 336 (forgery), and the mandatory Section 65B(4) certificate requirement affirmed in Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473 and clarified in Arjun Panditrao Khotkar (2020) 7 SCC 1. Indian regulatory context includes RBI Master Direction on Digital Payment Security Controls (2021), NPCI Negative Card List framework, and EMV chip liability shift. CFSL Hyderabad GSM skimmer casework and BLE-enabled skimmer forensics are also addressed.

Topics covered:

• ISO/IEC 7811 magnetic stripe track encoding (Tracks 1, 2, and 3)
• EMV chip security: ARQC, ARPC, and Dynamic Data Authentication
• Skimming, shimming, and NFC contactless skimming attacks
• Magnetic stripe cloning using MSR writers and coercivity classes
• Payment tokenization (Visa Token Service, Mastercard MDES)
• IT Act 2000 Sections 43, 66C, and 66D; BNS 2023 Sections 318 and 336
• Electronic evidence admissibility: BSA 2023 Section 63, Anvar P.V. v. Basheer (2014)
• RBI DPSC 2021, NPCI fraud frameworks, and EMV liability shift

Allow 30 minutes.