ATM Fraud: Four steps a credit union can take to minimize its impact

ATM Fraud: Four steps a credit union can take to minimize its impact
Posted: May 18, 2016
Comments: 0
Author: Barney Moore

The migration to EMV, sparked by the liability shift instituted by Visa and MasterCard, was primarily about upgrading terminals at the point-of-sale (POS), as well as re-issuing credit and debit cards to combat counterfeit cards being used to make purchases at brick and mortar stores. It was widely expected that fraudsters would not go away and that fraud would materialize in other forms; primarily online or card-not-present fraud.  But leave it up to the fraudsters to stay one step ahead of the good guys with an increase in fraud at ATMs.

ATMs, being always connected to an authorization network, and requiring PIN for any transaction, has historically been an environment where fraud was rarely seen. As fraudsters become more sophisticated, and chip card usage at the POS is growing, skimming mag stripes together with capturing the PIN entry using a tiny camera, has led to an alarming increase in ATM fraud rates. The number of ATMs in the US compromised by criminals rose 546 percent in 2015 over 2014. And whereas skimming previously was predominant at 3rd-party-owned ATMs such as those found in 7-Elevens (in 2014 3rd-party ATMs were 10 times more likely to have a skimmer than a bank-owned ATM), overwhelmingly, bank-owned ATMs have become the most popular location for a criminal to set up a card skim operation because it affords the ultimate opportunity to capture a member's card account and PIN number.

At the same time, fraudsters are becoming more elusive. According to FICO, fraudsters today favor rapid deployment and removal of skimming equipment resulting in a micro burst of fraudulent activity.  By doing this, they capture a steady but smaller stream of mag stripe cards which are then sold in the black market. This plan of attack has been quite successful for fraudsters.

However, credit unions are finding ways to fight back. For example, Trailhead Credit Union of Portland, Oregon currently posts this banner at the top of their home page:

“ALERT: Until further notice, we have turned off ATM capabilities at all 7-11 ATMs due to recent fraudulent activity. Please use our ATM locator for other locations. We are sorry for the inconvenience."

And if all this sounds gloom and doom, there is one bright spot – this is a problem that will solve itself eventually. As the U.S. chip card penetration and chip card-enabled POS terminal adoption increases, the stolen mag stripe becomes less useful. More importantly, there is strong incentive for both 3rd-party and bank-owned ATMs to be upgraded to be chip-enabled. Similar to the liability shift back in October 2015 for counterfeit fraud at POS terminals, MasterCard is effecting a liability shift for ATM terminals that are not chip-enabled, beginning October 2016. While Visa’s liability shift doesn’t take place until October 2017, it makes sense for the ATM owner to make the upgrade once, in time for the liability shift for both brands.

Here are four steps you can take to minimize the impact of ATM fraud:

1. Inspect ATMs.  Put in place a signoff sheet for regular inspections of ATMs at branch locations with a routine physical check for skimming devices.

2. Report fraud. Be diligent about reporting through Visa or MasterCard any and all fraud. This helps you in sorting out liability and can cut-off additional fraud on a compromised card.

3. Monitor for fraud. If you see a pattern of frequent skimming at certain 3rd-party locations, be aggressive, like the Trailhead Credit union example above, to protect your members (at the expense of some inconvenience), and more importantly, to protect your credit union.

4. Educate your members. Provide frequent reminders to your members about ATM fraud and ways they can protect themselves. One simple method is to tell your members to cover their hands when entering their PIN. (This is because most skimmers rely on pinhole cameras to capture pin entry.) If an ATM looks suspicious, or the card does not slide in smoothly, encourage your members to stop their transaction and go elsewhere for cash.  Remind members to report anything they see at the ATM that looks like it might have been tampered with. Be sure member emails and mobile numbers on file are up-to-date so that you can reach any of your members immediately to verify a transaction or shutdown suspected fraud. Also, stress the importance of checking online statements frequently for suspicious activity.

Rate this article:
No rating

Please login or register to post comments.


Featured Stories