The Terminal Physical Attack definitions and terminology used by EAST when issuing Physical Attack Alerts, or when compiling the statistics and other information for European Payment Terminal Crime Reports and Fraud Updates, are shown below. The definitions and terminology for Terminal Related Physical Attacks have been prepared by the EAST Expert Group on ATM and ATS Physical Attacks (EGAP). A summary document is available for view or download at the bottom of this page.
The aim is for these physical attack definitions and terminology to be adopted globally when describing or reporting terminal related physical attacks.
EAST also publishes Fraud Terminology, Fraud Definitions, Terminology for the Location of Fraudulent Devices, Terminal Fraud Definitions, Central/Host Fraud Definitions and Countermeasures against ATM Malware and Black Box Attacks.
Physical Attack Terminology
| Main Classification | Subset |
|---|---|
| Ram Raids / Burglary | • Rip out attacks • Pull out attacks • Attacks with tools • Explosive attacks |
| Robbery | • Attack on site • Attack on pavement • Attack on vehicle • Attack on customer |
Physical Attack Definitions
| Ram Raids / Burglary | The ATM (or ATS) is attacked and either ripped out (Ram Raid) or the safe attacked in-situ (Burglary). The attacks can be carried out by brute force, or by using explosives or gas |
|---|---|
| Rip out attacks | A vehicle is used to rip the ATM (or ATS) out of its location. Typically mechanical diggers are used, or forklift trucks. After the attack the safe of the ATM (or ATS) is either attacked close to the attack site, or is lifted into another vehicle to be transported to a different location. The safe is broken open and the cash removed. |
| Pull out attacks | Chains or ropes are attached around the ATM (or ATS) with the other end attached to a vehicle. The vehicle is driven off, pulling the ATM off its anchorage. After the attack the safe of the ATM (or ATS) is either attacked close to the attack site, or is lifted into another vehicle to be transported to a different location. The safe is broken open and the cash removed. |
| Attacks with tools | The ATM (or ATS) is attacked in-situ with tools – typically cutting discs or thermal lances. Once the safe has been cut open the criminals remove the cash. |
| Explosive attacks (Also known as ‘plofkraak’ in Dutch) | The criminals use either gas or solid explosive to blow open the ATM (or ATS) safe in-situ. Once the safe has been blown open the criminals remove the cash. |
| Criminal benefit |  |
| Robbery | Attacks on the persons replenishing the ATM (or ATS) either when moving the cash to / from the terminal, or while conducting cash replenishment activities. Also direct attacks on customers either at or near an ATM or bank premises. |
|---|---|
| Attack on site | Staff replenishing an ATM (or ATS) are attacked while at an ATM bunker, or in a bank premises, or in a retail store. |
| Attack on pavement | Staff carrying cash to replenish an ATM are attacked while moving between their vehicle and the ATM location. |
| Attack on vehicle | The vehicle carrying cash to replenish ATMs is either attacked while static at the replenishment location, or when moving between locations. |
| Attack on customer | A customer is either attacked while making a cash withdrawal at the ATM location, or after leaving the ATM location or bank premises. |
| Criminal benefit | |