The trend of skimming-related losses occurring outside of EMV chip liability shift areas continued, but for once, the US was not the top spot for this type of fraud.
July 24, 2015
The European ATM Security Team has published the second of three European fraud updates for 2015; the report is based on ATM crime statistics from 19 countries in the Single Euro Payments Area, as well as two non-SEPA countries.
Card skimming at ATMs was reported by 17 countries, with decreases reported by seven countries and increases by two, an EAST press release said. Six countries reported card data compromise through wiretapping or "eavesdropping," in which criminals cut a hole in the fascia by the card reader, insert a device that is then connected to the card reader, and cover the hole with a fake decal.
The trend of skimming-related losses occurring outside of EMV chip liability shift areas continues. These losses were reported in 49 countries and territories outside of the SEPA and in 10 within SEPA. For the first time Indonesia is the top location for such losses, displacing the United States. The Philippines ranked third.
Skimming attacks on other terminal types were reported by eight countries; overall the number of attacks appears to be decreasing, EAST said.
Fourteen countries reported cash-trapping attacks; seven reported incidents of transaction reversal fraud.
Four countries reported ATM malware incidents; in two, these were first-time occurrences. Attacks involved ATM cash-out or "jackpotting."
Ram raids and ATM burglary were reported by nine countries — one reported increases in this type of attack and another reported a new method for accessing the ATM from below. Eleven countries reported explosive gas attacks; two also reported attacks on ATMs using solid explosives.
A complete version of the second 2015 European fraud update is available for online access by EAST members and subscribers.
The following countries provided full or partial information for the update: Austria; Belgium; Cyprus; Denmark; Finland; France; Germany; Hungary; Ireland; Italy; Liechtenstein; the Netherlands; Norway; Portugal; Romania; Russia; Spain; Sweden; Switzerland; the United Kingdom; and Ukraine.