Leaving Transaction Live / Stuck Key Fraud

During March, police in India arrested a suspect for leaving transaction live fraud. The fraud involved gluing one of the ATM keys thus preventing completion of the transaction.

Transaction Reversal Fraud / Manipulation / Denomination Fraud / Cash Trapping

Cash trapping occurred in Thailand during March.

Card Trapping / Card Theft / Distraction / Card Swapping

The UK continued to experience a large number of card trapping incidents. Lebanese loop card traps were used in Thailand during March.

ATM Skimming / Skimming / Data Compromise

A suspect arrested by the US Secret Service swallowed a flash drive in an attempt to destroy evidence of ATM skimming. The USA experienced a number of both ATM and Fuel pump skimming incidents in March. ATM skimming continued in the UK throughout March. Canadian police recovered ATM skimming equipment and identified an ATM skimming ‘factory'. ATM skimming was also reported in Thailand and Australia. Russian police arrested two suspects from Bulgaria and recovered ATM skimming equipment from their hotel room. Bulgarian customs officers intercepted a package destined for the USA which contained a skimming device.

Phishing / Vishing /Smsishing / Advanced Fee / Funds Transfer Fraud

During March, vishing scams in the USA included automated voice calls advising that a card or account has been frozen and requires re-activation by entering PIN and card numbers. Variants of lottery scams were also reported and included phishing e-mails with links to a fraudulent web site requesting personal information. Commercial banks in Nigeria warned consumers of a fake phishing e-mail claiming to be from the Central Bank of Nigeria (CBN) advising that ATM cards required ‘upgrading'. Tax refund scam e-mails were also reported during March as were smishing (smsishing) text messages.

Data Compromise

Russian authorities arrested a suspect linked to the 2008 RBS WorldPay processor compromise and subsequent ATM fraud. In the USA, a former bank programmer was sentenced following involvement in various data compromises, including attacks on US retailer TJX.

Ram Raid Attacks / Theft of ATM / Smash-and-Grab

During March there were many thefts, and failed thefts, of ATMs globally. In Canada, a tow truck dragged an ATM for a short distance before police arrived. In Australia, one incident included a business being attacked for the fifth time in three months. Also in Australia, police arrested two suspects attempting to remove an ATM using an angle-grinder. In the UK, diggers continued to be vehicles of choice for ram raiding ATMs. In Malaysia, a security guard prevented the theft of an ATM from a factory. In Russia, a Sumo wrestler manually removed an ATM but was subsequently arrested. In the USA, vans, trucks and frontend loaders were use to attack ATMs. Strong anchoring, chains breaking, alarms, alert guards and members of the public were the main reasons for some of the failures during March.

Safe Cutting / Safe Breaking / Frontal Attacks / Theft from ATM

In the USA, incidents of thefts from ATMs included three suspects facing 100 charges including the use of power tools to compromise ATM security enclosures. In Ireland, an arrest was made following a failed attack on an ATM using a sledge hammer. An ATM caught fire in a UK attack using oxy-acetylene cutting tools.

Explosive Attacks

Improvised Explosive Devices (IEDs) were used to target ATMs in Thailand. During March, South Africa continued to report the use of explosives to obtain cash from ATMs.

Event Feedback

Evaluation results and feedback from the recent 'Combating ATM Fraud' training course is available to view from a link on http://www.dfrriskmanagement.com/articles/education-and-training-packages.html

The above digest is provided by DFR Risk Management, who provide consultancy services advising ATM and self-service terminal deployers and manufacturers, as well as law-enforcement agencies, on how to manage ATM and self-service terminal fraud and security threats.

Contact us: contact@dfrRiskManagement.com

www.dfrRiskManagement.com