EAST EGAP

The Terminal Physical Attack definitions and terminology used by EAST when issuing Physical Attack Alerts, or when compiling the statistics and other information for European Payment Terminal Crime Reports and Fraud Updates, are shown below.  The definitions and terminology for Terminal Related Physical Attacks have been prepared by the EAST Expert Group on ATM and ATS Physical Attacks (EGAP).  A summary document is available for view or download at the bottom of this page.

The aim is for these physical attack definitions and terminology to be adopted globally when describing or reporting  terminal related physical attacks.

EAST also publishes Fraud Terminology, Fraud Definitions, Terminology for the Location of Fraudulent Devices, Terminal Fraud Definitions, Central/Host Fraud Definitions and Countermeasures against ATM Malware and Black Box Attacks.

Physical Attack Terminology

Main ClassificationSubset
Explosive Attacks• X1 - Gas explosives
• X2 - Solid Explosives
ATM Burglarly - In-Situ• B1 - Torch Cutting
• B2 - Drilling
• B3 - Cutting
• B4 - Force Open
• B5 - Safe Door Rip-Outs
ATM Theft - Rip-OutNone
Robbery• R1 - Staff On Site
• R2 - CIT Staff On Site
• R3 - Across the Pavement
• R4 - Customer
Non-Specific AttackNone

Physical Attack Definitions

Explosive AttacksAttacks that breach the safe of the ATM to gain access to cash using different kinds of explosive materials
X1 - Gas ExplosivesCriminals fill the ATM safe with a gas mixture and ignite it to open the safe door.
X2 - Solid ExplosivesCriminals put solid explosives into the safe and ignite them to open the safe door. These attacks can be performed in a multiple step process. The first explosion is to gain access to an opening in the safe through which solid explosives are inserted and ignited to open the safe.
Criminal benefit
ATM Burglary - In-SituAttacks that breach the safe of the ATM by using different tools and techniques at the location of the ATM
B1- Torch CuttingA blow or cutting torch is used to open the safe
B2 - DrillingA drill is used to open the safe
B3 - CuttingA saw or grinder is used to open the safe
B4 - Force OpenThe use of crowbars or hydraulic spreaders to open the safe
B5 - Safe Door Rip outsA hook and chain is attached to the safe door, which is ripped out by a vehicle
Criminal benefit
ATM Theft - Rip OutAttacks that physically remove the ATM from the installation environment and typically result in breaching the safe at a different location at a later stage. Often involving construction vehicles to remove the ATM, or trucks with chains attached around the ATM
Criminal benefit
RobberyAttacks targeting customers using an ATM or staff working at an ATM. Staff can either be technicians, CIT staff, or bank personnel.
R1 - Staff On SiteAttacks targeting staff during ATM cash replenishment, or during servicing/repair
R2 - CIT Staff On SiteAttacks occurring during the CIT replenishment at the ATM
R3 - Across the PavementAttacks occurring when CIT staff are between the vehicle and the ATM
R4 - CustomerAttacks targeting a customer while making a cash withdrawal at the ATM location, or after leaving the ATM location or bank premises
Criminal benefit
Non-Specific Attack A physical attack without cash loss, which cannot be attributed to a specific attack type. This could be a vandalism case, theft of components, or any other damage at the ATM
Criminal benefitUndefined
VIEW

EAST Terminal Physical Attack Definitions & Terminology

A summary document is available to view or download by clicking on the button. EAST Members can find a copy of the definitions with a 'Reporting Summary' on the Intranet (log-in required).