March 24, 2017
The European ATM Security Team has published its first European Fraud Update for 2017, based on country crime updates given by representatives of 19 countries in the Single Euro Payments Area. According to a press release from EAST:
Eighteen countries reported card skimming at ATMs. Five countries reported the use of card reader internal skimming devices, in which the device is placed inside the motorized card reader behind the shutter. EAST has published four recent ATM fraud alerts related to this type of skimming.
Forty-five countries and territories reported international skimming-related losses outside of the Single Euro Payments Area; nine reported cross-border losses within SEPA.
India, Indonesia and the United States remain the top three locations for international skimming losses.
Eight countries reported skimming attacks on non-ATM terminal types; four countries reported such attacks on unattended payment terminals at fuel stations.
One country reported the use of a card reader internal skimming device at a public transport ticket machine, the first time this has been seen.
One country reported a new form of crime — "Cash-in" or "Cash Deposit" fraud. Criminals deposit fake bank notes into cash-accepting ATMs and then credit their cards or other accounts.
Eight countries reported ATM malware and logical security attacks, all of which involved the use — or attempted use — of "black-box" devices for unauthorized cash dispensing. EAST has published seven related ATM Fraud Alerts recently.
To help counter malware and logical security attacks, Europol has published "Guidance and Recommendations Regarding Logical Attacks on ATMs," which is available in English, German, Italian and Spanish.
Nine countries reported ram raids and ATM burglaries; nine countries also reported explosive gas attacks. The use of solid explosives continues to spread; seven countries reported this type of attack.
Five countries reported payment fraud issues. One country reported an increase in both vishing and phishing attacks; another reported criminal abuse of the chargeback system.