The Terminal Physical Attack definitions and terminology used by EAST when issuing Physical Attack Alerts, or when compiling the statistics and other information for European Payment Terminal Crime Reports and Fraud Updates, are shown below. The definitions and terminology for Terminal Related Physical Attacks have been prepared by the EAST Expert Group on ATM and ATS Physical Attacks (EGAP). A summary document is available for view or download at the bottom of this page.
The aim is for these physical attack definitions and terminology to be adopted globally when describing or reporting terminal related physical attacks.
EAST also publishes Fraud Terminology, Fraud Definitions, Terminology for the Location of Fraudulent Devices, Terminal Fraud Definitions, Central/Host Fraud Definitions and Countermeasures against ATM Malware and Black Box Attacks.
Physical Attack Terminology
Main Classification | Subset |
---|---|
Explosive Attacks | • X1 - Gas explosives • X2 - Solid Explosives |
ATM Burglarly - In-Situ | • B1 - Torch Cutting • B2 - Drilling • B3 - Cutting • B4 - Force Open • B5 - Safe Door Rip-Outs |
ATM Theft - Rip-Out | None |
Robbery | • R1 - Staff On Site • R2 - CIT Staff On Site • R3 - Across the Pavement • R4 - Customer |
Non-Specific Attack | None |
Physical Attack Definitions
Explosive Attacks | Attacks that breach the safe of the ATM to gain access to cash using different kinds of explosive materials |
---|---|
X1 - Gas Explosives | Criminals fill the ATM safe with a gas mixture and ignite it to open the safe door. |
X2 - Solid Explosives | Criminals put solid explosives into the safe and ignite them to open the safe door. These attacks can be performed in a multiple step process. The first explosion is to gain access to an opening in the safe through which solid explosives are inserted and ignited to open the safe. |
Criminal benefit |
ATM Burglary - In-Situ | Attacks that breach the safe of the ATM by using different tools and techniques at the location of the ATM |
---|---|
B1- Torch Cutting | A blow or cutting torch is used to open the safe |
B2 - Drilling | A drill is used to open the safe |
B3 - Cutting | A saw or grinder is used to open the safe |
B4 - Force Open | The use of crowbars or hydraulic spreaders to open the safe |
B5 - Safe Door Rip outs | A hook and chain is attached to the safe door, which is ripped out by a vehicle |
Criminal benefit |
ATM Theft - Rip Out | Attacks that physically remove the ATM from the installation environment and typically result in breaching the safe at a different location at a later stage. Often involving construction vehicles to remove the ATM, or trucks with chains attached around the ATM |
---|---|
Criminal benefit |
Robbery | Attacks targeting customers using an ATM or staff working at an ATM. Staff can either be technicians, CIT staff, or bank personnel. |
---|---|
R1 - Staff On Site | Attacks targeting staff during ATM cash replenishment, or during servicing/repair |
R2 - CIT Staff On Site | Attacks occurring during the CIT replenishment at the ATM |
R3 - Across the Pavement | Attacks occurring when CIT staff are between the vehicle and the ATM |
R4 - Customer | Attacks targeting a customer while making a cash withdrawal at the ATM location, or after leaving the ATM location or bank premises |
Criminal benefit |
Non-Specific Attack | A physical attack without cash loss, which cannot be attributed to a specific attack type. This could be a vandalism case, theft of components, or any other damage at the ATM |
---|---|
Criminal benefit | Undefined |