November 15, 2016
The European ATM Security Team has published its third European fraud update for 2016. The report is based on country crime updates provided by representatives of 18 countries in the Single Euro Payments Area, and 6 non-SEPA countries.
Nineteen countries reported card skimming at ATMs. The use of card reader internal skimming devices continues. This type of device is placed at various locations inside the motorized card reader behind the shutter. Seven countries reported such attacks.
Fifty-seven countries and territories outside of SEPA reported international skimming-related losses, as did 10 SEPA countries. The top three locations for these losses were the U.S., Indonesia and India.
Eight countries reported skimming attacks on other terminal types and six countries reported such attacks on unattended payment terminals at petrol stations.
Eight countries reported ATM malware and logical security attacks, all involving the use (or attempted use) of black box devices to allow the unauthorized dispensing of cash.
Europol has published "Guidance and Recommendations Regarding Logical Attacks on ATMs," to help counter such attacks. The document is available in English, German, Italian and Spanish.
Nine countries reported ram raids and ATM burglary and 11 countries reported explosive gas attacks, including four countries that experienced significant increases in such attacks. The use of solid explosives continues to spread; six countries reported this type of attack.
The full fraud update is available to EAST members and subscribers at https://www.european-atm-security.eu