ATM Awareness Guide
8 likes2,550 views
This document is a customer awareness guide from Commonwealth Bank of Australia addressing the issues of ATM card skimming and PIN capturing, methods used by criminals to obtain card data and PINs. It provides information on how to identify skimming and capturing devices that may be attached to ATMs, as well as preventive measures customers can take to protect their information. Key recommendations include familiarizing oneself with the appearance of ATMs, inspecting them for unusual characteristics, and shielding PIN entry.
ATM Awareness Guide
- 1. ATM Card Skimming & PIN capturing – Customer Awareness Guide Group Security Commonwealth Bank of Australia November 2009
- 2. What is ATM card skimming? ATM Skimming is a world-wide problem Skimming is a method used by criminals to capture data from the magnetic strip on the back of an ATM card The devices used are smaller than a deck of cards and are fastened in close proximity to, or over the top of the ATM‟s factory-installed card reader Commonwealth Bank Group Security 2
- 3. What is PIN capturing? Personal Identification Number (“PIN”) capturing is a world-wide problem PIN capturing refers to a method of strategically attaching cameras and various other imaging devices to ATMs to fraudulently capture PIN numbers Once captured, the electronic data is encoded onto fraudulent cards and the captured PINs are used to withdraw money from customers‟ accounts Commonwealth Bank Group Security 3
- 4. Spotting devices on an ATM • Light diffuser area 1 1 1 • Speaker area 2 2 • ATM side fascia 3 3 3 4 • Card reader entry slot 5 4 • ATM keyboard area 5 Commonwealth Bank Group Security 4
- 5. Skimming devices Could you tell if this ATM had a skimming device fitted to the card reader? Commonwealth Bank Group Security 5
- 6. Skimming devices: spot the difference - Normal fascia - Skimmer device attached near An unadulterated ATM fascia. The the card reader slot. flashing lead-through entry indicator Although the device has been given can be easily seen. the appearance of being a standard Note: Most skimming devices will part of the terminal, it is in fact an obscure the flashing entry indicator. additional fitted piece - clearly This detail serves as a vital clue in different from the photo on the left. identifying suspect tampering. Note: No flashing lead-through light can be seen & the shape of the bezel is clearly different. Commonwealth Bank Group Security 6
- 7. Skimming devices An example of a skimming device being „piggy-backed‟ onto the card reader Commonwealth Bank Group Security 7
- 8. Skimming devices Another example of a skimming device being installed on the ATM‟s card reader Commonwealth Bank Group Security 8
- 9. ….Now take a closer look Commonwealth Bank Group Security 9
- 10. Skimming devices An example of where a hole was made in the fascia to insert a skimming device. The fascia plate was then replaced to conceal the entry point Commonwealth Bank Group Security 10
- 11. PIN capturing devices The ATM fascia plate (highlighted in yellow) has a PIN capturing device fitted to the top of the ATM – typically, these devices are difficult for the untrained eye to detect Commonwealth Bank Group Security 11
- 12. PIN capturing devices Closed Open The PIN capturing device has been installed on the inner side of the fascia plate Commonwealth Bank Group Security 12
- 13. PIN capturing devices 1 A brochure holder has been placed on the side ATM fascia wall 2 Take a closer look at brochure holder….- a pin-hole camera has been installed. This is done to capture images of the keypad and customers‟ inputting their PIN Commonwealth Bank Group Security 13
- 14. PIN capturing devices – keyboard fascia A skimmer plate can be placed over the top of the existing keyboard as a method of PIN capturing Commonwealth Bank Group Security 14
- 15. PIN capturing devices An example of what an ATM skimmer plate can look like Commonwealth Bank Group Security 15
- 16. Facts on skimming devices 1 2 3 4 • Skimming • Length of time • Successful • Criminals may devices are skimming skimming stay nearby to normally devices can requires both observe affixed to be affixed can a card proceedings & ATMs during vary, but skimmer (card remove periods of low normally are reader) & equipment at traffic, e.g. no more than camera (PIN short notice in early for 24 hours capturing order to later morning/late device) to be download evening fitted to the information. ATM in order • This data may to steal card be transmitted data wirelessly to other devices located nearby Commonwealth Bank Group Security 16
- 17. How can you reduce the risk? 1 Familiarise yourself with the appearance of your ATM 2 Inspect the ATM for unusual or non-standard appearance 3 Familiarise yourself with the look/feel of the ATM fascia on the machines 4 Always use your hand to shield your PIN when entering it 5 Inspect all areas of the fascia 6 Is there anything unusual? (card reader, area immediately above the screen) 7 Report any unusual appearance immediately to branch staff or Police By being vigilant, you can reduce the risk of skimming Commonwealth Bank Group Security 17