Shoulder surfing is the practice of spying on the user of a cash-dispensing machine or other electronic device in order to obtain their personal identification number, password, or other confidential PII.