The increase in ATM skimming incidents reported by EAST for the period January to June 2010 continues, with eleven countries reporting increases in such incidents, and four countries decreases. One country has reported that instead of maximising fraudulent cash withdrawals at a single ATM, criminals are now visiting more ATMs and using fewer cards at each site. A new type of analogue skimming device, using audio technology, has been reported by five countries.
The trend of the majority of losses due to skimming occurring outside of EMV liability shift areas continues. Since the beginning of 2010 EAST members have reported such losses in 25 countries outside of the Single Euro Payments Area (SEPA), and in 12 countries within SEPA.
The main criminal groupings engaged in skimming at ATMs in Europe continue to be Romanian and Bulgarian nationals, and activity has also been reported by criminals from Moldavia, Montenegro, Serbia and Slovakia.
With regard to skimming attacks at other payment terminals, decreases in attacks against attended point of sales (POS) terminals were reported by one country due to continuing terminal migration to EMV.
Card trapping attacks, were reported by three countries and the number of incidents appears to be stable. Cash trapping attacks were reported in two countries, one of them reporting significant increases.
ATM malware attacks have been reported by one country, and no reports of card shimming at ATMs have been received.
Ram raids and ATM burglary were reported by seven countries, three reporting increases in such attacks and three decreases. Explosive and gas attacks were reported by four countries, and gas attacks are now a significant issue for two countries.
The full Update is available to EAST subscribers and details of how to subscribe to EAST can be found by visiting the EAST website.
European Fraud Update 3-2010
The above release is based on a European Fraud Update prepared three times a year by EAST, based on country crime updates given at its meetings. These Updates are prepared by EAST to provide interested parties with an overview of the European ATM crime situation. They are produced for EAST members, law enforcement officers and other EAST associates, and EAST subscribers.
The following countries supplied full or partial information for this Update: Austria; Belgium; Cyprus; Finland; France; Germany; Ireland; Italy; Liechtenstein; the Netherlands; Norway; Portugal; Russia; Spain; Sweden; Switzerland; the United Kingdom.
EAST has taken reasonable measures to develop this Update in a fair, reasonable, open, and objective manner. However, EAST makes no claims, promises, or guarantees about the completeness of the Update. In addition, as the information in the Update has been passed to EAST by other parties, errors or mistakes may exist or be discovered. Neither EAST nor its members, authors, or agents shall be liable for any loss, damage, or claim with respect to any such information being provided. All such liabilities, including direct, special, indirect, or consequential damages, are expressly disclaimed and excluded.
Founded in 2004, EAST (eas-team.eu) is a ‘non-profit’ organisation whose members are committed to gathering information from, and disseminating EAST reports to ATM deployers and networks within their countries/regions. While the main focus of EAST is on ATMs, the group also focuses on all payment terminals that have a direct impact on crime perpetrated at ATM locations.
Our mission is to gather and provide information to the European ATM industry and to facilitate effective representation of ATM related security issues at relevant European central institutions, through a pan-European co-ordination of ATM security resources.
EAST has set up a framework network structure to improve co-operation with industry, law enforcement, and in particular Europol, in order to achieve awareness and better results in the fight against organised cross-border crime. Regular research polls are conducted through the EAST website.