The ATM Industry Association has announced the publication of new best practices for accepting contactless payments in ATM systems.
"With banks like la Caixa in Spain pioneering the deployment of contactless ATMs, including plans for a few hundred more contactless ATMs in the near-future, ATMIA felt the time had come to be proactive and look at the security aspects of this evolving global technology," said ATMIA CEO, Mike Lee, in the announcement. "Even though there is little reliable evidence of fraud deriving from contactless payment methods as yet, some risks do remain which can be mitigated."
Examples of topics covered in the manual include:
- the contactless communications landscape — including NFC, RFID and passive contactless systems that use plastic payment cards — and describes how the contactless payments space works.
- threats to contactless payment methods — including potential attack and scam scenarios through remote capture of card data, or monitoring of electromagnetic emissions near an ATM during a transaction — and best practices to mitigate them.
- a glossary of terms is provided so readers can better understand all the important terminology associated with contactless ATMs.
- "The manual is not just for security practitioners looking ahead to prepare for future threats, but for all those in the industry who want to understand how contactless payments work and how they can be applied securely to ATM systems," Lee said.
The white paper is free to ATMIA members and is available for download at the ATMIA website.
For more on this topic, visit the EMV research center.
User Comments