EAST EGAP holds 7th Meeting at Europol

The EAST Expert Group on ATM Physical Attacks (EGAP) - LogoThe seventh meeting of the EAST Expert Group on ATM Physical Attacks (EGAP) took place on Wednesday 8th March 2017 at Europol in The Hague.

EAST EGAP is a European specialist expert forum for discussion of ATM related physical attack trends, attack methodologies and counter-measures, threat protection, and for the provision of regularly updated lists of manufacturers of ATM protective devices.

The meeting was chaired by Mr Graham Mott and was attended by key representatives from ATM Deployers, ATM Networks, Security Equipment Vendors and Law Enforcement.

EAST EGAP, which meets twice each year, enables in-depth and technical discussion to take place. The areas covered include:

  • The latest incidents and criminal MOs
  • The collection and distribution of best practice guidelines
  • The evolution of threats and counter-measures
  • Lessons from and on law enforcement

The focus of the group is on topics and issues raised by EAST National Members, which represent 35 countries with an installed base of 1,411,870 ATMs. Outputs from EAST EGAP are presented to meetings of EAST National Members.

There will be an EAST EGAP workshop at this year’s EAST Financial Crime & Security Forum (EAST FCS 2017). On Day One of the event Graham Mott will cover ‘Traditional Attacks’, ‘Current Physical Attack Types’, ‘Counter-measures’ and ‘Banknote Degradation’.  The workshop is open to all those attending the Forum. On Day Two of the event there will be a presentation on the ‘Evolution of Explosive Attacks (Gas and Solid Explosives)’ from the Netherlands and a ‘Case Study on Countering Explosive Attacks’ from a Regional Intelligence Unit of the UK Police.

ATM Explosive Attacks surge in Europe

european-atm-crime-report-h1-2016In a European ATM Crime Report covering the first six months of 2016 EAST has reported that ATM explosive attacks were up 80% when compared to the same period in 2015.

A total of 492 explosive attacks were reported, up from 273 during the same period in 2015.  While the majority were explosive gas attacks, 110 were solid explosive attacks.  EAST Executive Director Lachlan Gunn said, “This rise in explosive attacks is of great concern to the industry in Europe as such attacks create a significant amount of collateral damage to equipment and buildings as well as a risk to life.  The EAST Expert Group on Physical Attacks (EGAP) is working to analyse the attacks and to share intelligence best practice information across the industry and law enforcement that can help to mitigate the threat.”

Overall ATM related physical attacks rose 30% when compared with H1 2015 (up from 1,232 to 1,604 incidents).  Losses due to ATM related physical attacks rose 3% to €27 million (up from €26.3 million in 2015).  The average cash loss for a ram raid or burglary attack is estimated at €17,327, the average cash loss per explosive attack is €16,631 and the average cash loss for a robbery is €20,017.  These figures do not take into account collateral damage to equipment or buildings, which can be significant and often exceeds the value of the cash lost in successful attacks.

EAST also reported a 28% increase in ATM related fraud attacks, up from 8,421 in H1 2015 to 10,820 in H1 2016.  This rise was mainly driven by a 281% increase in Transaction Reversal Fraud (up from 1,270 to 4,840 incidents).  The downward trend for card skimming continues with 1,573 card skimming incidents reported, down 21% from 1,986 in H1 2015.

Losses due to ATM related fraud attacks were up 12% when compared with H1 2015 (up from €156 million to €174 million).  This rise was largely driven by an 8% rise in international skimming losses (up from €131 million to €142 million).  The Asia-Pacific region (particularly Indonesia) and the USA are where the majority of such losses were reported.  Domestic skimming losses rose 24% over the same period.

The number of ATM logical attacks reported continues to rise.  28 incidents were reported (all ‘cash out’ or ‘jackpotting’ attacks), up from just 5 during the same period in 2015.  Related losses were €0.4 million.

A summary of the report statistics under the main headings is in the table below:

h1-2016-crime-report-summary-stats

The full Crime Report is available to EAST Members (National and Associate).

EAST EGAP publishes list of ATM Protective Devices

EAST EGAP - Logo

The EAST Expert Group on ATM Physical Attacks (EAST EGAP) has just published a document with lists of the Manufacturers of ATM Protective devices.  This document replaces two previous lists:

  • Ink Staining Devices (Cash Protection)
  • Other ATM Protective Devices

The new document has a list of Intelligent Banknote Neutralisation System (IBNS) manufacturers and a list of other manufacturers of ATM protective devices.

These lists have been put together to assist the industry and Law Enforcement to quickly identify the suppliers of systems and devices that can be used to protect ATMs from physical attacks and do not include suppliers of systems and devices used to protect ATMs from most fraud types. EAST has taken reasonable measures to develop the lists in a fair, reasonable, open, and objective manner. However, EAST makes no claims, promises, or guarantees about the completeness of the lists or of the effectiveness, or adequacy of the devices offered by the manufacturers listed.

The new document is available for EAST Members to download from the Intranet in the section ‘Industry Information’. This is a living document which includes instructions on how to submit details of manufacturers of systems and devices (if not shown) for consideration for inclusion.

EAST Expert Group on ATM Physical Attacks holds Fifth Meeting

The EAST Expert Group on ATM Physical Attacks - LogoThe fifth meeting of the EAST Expert Group on ATM Physical Attacks (EGAP) took place on Tuesday 8th March 2016 in London, hosted by the LINK Scheme.

EAST EGAP is a European specialist expert forum for discussion of ATM related physical attack trends, attack methodologies and counter-measures, threat protection, and for the provision of regularly updated lists of manufacturers of ATM protective devices.

The EAST EGAP meeting was chaired by Mr Graham Mott and was attended by key representatives from ATM Deployers, ATM Networks, ATM Vendors, Security Equipment Vendors and Law Enforcement.

EAST EGAP, which meets twice each year, enables in-depth and technical discussion to take place. The areas covered include:

  • The latest incidents and criminal MOs
  • The collection and distribution of best practice guidelines
  • The evolution of threats and counter-measures
  • Lessons from and on law enforcement

The focus of EAST EGAP is on topics and issues raised by EAST National Members, which represent 34 countries with an installed base of 1,337,000 ATMs.  Outputs from EAST EGAP are presented to meetings of EAST National Members.

EAST publishes ATM Physical Security Guidelines

ATM Physical Security GuidelinesEAST has published a document entitled ‘ATM Physical Security Guidelines.’

These Guidelines have been put together by members of the EAST Expert Group on ATM Physical Attacks (EGAP).

An ATM physical attack is defined as one where the criminals’ aim is obtain the cash from within the ATM, either entirely or partially, through a breach in the safe or ATM’s mechanism, or as it is being delivered.  It excludes attacks which are aimed getting relatively small amounts of cash such as cash trapping and also system attacks where the ATM does un-authorised transactions and functions, for example malware or system penetration.  These would be classed as “Fraud”.

ATM Physical attacks come in three main categories, Ram Raid, ATM Burglary and Robbery (ATM replenishment attack).

The document, which is designed to help ATM operators, ATM network operators and Law Enforcement, covers three main themes for the various physical attack types:

  • Identification
  • Advice for Police and Law Enforcement attending the scene
  • Prevention

These ATM Physical Security Guidelines are available for download on the EAST Intranet to EAST members (National and Associate), and there is a version available for wider circulation.  EAST Associate Membership is free for Law Enforcement Officers.

Message from the Executive Director

lgunnAnother year draws to a close and it has been a very busy one for EAST.  On behalf of the Board I would like to thank all those who have worked so hard to provide information, time and resources to help us to meet our targets and objectives.  Some of the highlights are as follows:

EAST National Members - badgeWe held National Member meetings in Rome in February (hosted by Consorzio BANCOMAT), in The Hague in June (hosted by Europol) and in London in October (hosted by the LINK Scheme).  During 2015 we welcomed five new National Members representing South Africa (South Africa Banking Risk Information Centre – SABRIC), Serbia (Chamber of Commerce and Industry of Serbia – CCIS), Turkey (Bankalararasi Kart Merkezi A.S. – BKM), the United States (Citi Security & Investigative Services -CSIS) and Brazil (Tecnologia Bancaria S/A).

The EAST Expert Group on ATM Fraud - LogoThe EAST Expert Group on ATM Fraud (EGAF), chaired by Otto de Jong, held three meetings in January, May and September, all hosted by ING in Amsterdam.  In June EGAF produced guidelines for the Standardisation of Terminology for Locations of Card Data Compromise devices at ATMs and assisted Europol to produce Guidance & recommendations regarding logical attacks on ATMs.

The EAST Expert Group on ATM Physical Attacks - LogoThe EAST Expert Group on ATM Physical Attacks (EGAP), chaired by Graham Mott, held two meetings in March and September, both hosted by the LINK Scheme in London.  In September we sent out our first EAST ATM Physical Attack Alert in a format agreed by EGAP.

EAST Europol MoUIn June Europol’s European Cybercrime Centre (EC3) signed a Memorandum of Understanding with EAST in order to further strengthen a working partnership that has been in place since the first EAST meeting took place in February 2004 .

EAST FCS 2015 - 3 (1)In June we also held our second EAST FCS Forum in The Hague.  The event proved to be a successful platform in bringing together the perfect mix of banking representatives, security experts, police, payments associations, government agencies and many other stakeholders in the ATM crime prevention sector. It was planned and organised by EAST Development Director Úna Dillon, working with Liquid Nexxus, and will be followed by our third FCS Forum in June 2017.

Bogota PCF MeetingIn October EAST supported Europol at an International Payment Card Fraud Meeting in Colombia – Rui Carvalho, EAST Director and national representative for Portuguese National Member SIBs, participated in a two-day meeting in Bogota to discuss payment card fraud overseas and money withdrawals in Latin America.

Europol-Interpol- Event 1In November this support for Europol continued at an International Payment Card Fraud Meeting in Singapore. I participated in a two-day meeting that was held in the INTERPOL Global Complex for Innovation (IGCI) and was co-hosted by Europol and INTERPOL to discuss payment card fraud overseas and money withdrawals in the extended South East Asia region.

Una ATEFI 2Later in the month Úna Dillon presented the latest European Fraud Report to the first Annual Latin American Forum on Security in Payment Systems, held on 18th / 19th November 2015 in Asuncion, Paraguay.  The event was co-founded by ATEFI (Latin American Association of Operators Electronic Funds Transfer and Information Services) and Liquid Nexxus in order to raise awareness of payment-related crime in Latin America.

EAST - EUROPEAN FRAUD UPDATE 3 - 2015EAST continues to keep abreast of the latest fraud trends and crime information, publishing our European ATM Crime Reports and European Fraud Updates.  Our thanks go out to all the people and organisations that have shared information for the above, and for EAST ATM Fraud Alerts (27 sent out this year to date), and EAST ATM Physical Attack Alerts (2 sent out this year to date).

Seasons greetingsFinally, on behalf of EAST, I would like to wish all readers a wonderful festive break and a very happy and fulfilling New Year.

Kind regards

Lachlan

EAST Expert Group on ATM Physical Attacks holds Fourth Meeting

The EAST Expert Group on ATM Physical Attacks - LogoThe fourth meeting of the EAST Expert Group on ATM Physical Attacks (EGAP) took place on Tuesday 8th September 2015 at UK Payments Administration in London, hosted by the LINK Scheme.

EAST EGAP is a European specialist expert forum for discussion of ATM related physical attack trends, attack methodologies and counter-measures, threat protection, and for the provision of regularly updated lists of manufacturers of ATM protective devices.

The EAST EGAP meeting was chaired by Mr Graham Mott and was attended by key representatives from ATM Deployers, ATM Networks, ATM Vendors, Security Equipment Vendors and Law Enforcement.

EAST EGAP, which meets two to three times each year, enables in-depth and technical discussion to take place. The areas covered include:

  • The latest incidents and criminal MOs
  • The collection and distribution of best practice guidelines
  • The evolution of threats and counter-measures
  • Lessons from and on law enforcement

The focus of EAST EGAP is on topics and issues raised by EAST National Members, which represent 31 countries with an installed base of 655,398 ATMs. Outputs from EAST EGAP are presented to meetings of EAST National Members.

EAST Expert Group on ATM Physical Attacks holds Third Meeting

The EAST Expert Group on ATM Physical Attacks - LogoThe third meeting of the EAST Expert Group on ATM Physical Attacks (EGAP) took place on Thursday 12th March 2015, hosted by the LINK ATM Scheme in London.

EAST EGAP is a European specialist expert forum for discussion of ATM related physical attack trends, attack methodologies and counter-measures, threat protection, and for the provision of regularly updated lists of known counter-measures.

The EAST EGAP meeting was chaired by Mr Graham Mott and was attended by key representatives from ATM Deployers, ATM Networks, ATM Vendors, Security Equipment Vendors, Specialist Consultants and Law Enforcement.

EAST EGAP, which meets two to three times each year, enables in-depth and technical discussion to take place. The areas covered include:

  • The latest incidents and criminal MOs
  • The collection and distribution of best practice guidelines
  • The evolution of threats and counter-measures
  • Lessons from and on law enforcement

The focus of EAST EGAP is on topics and issues raised by EAST National Members, which represent 29 countries with an installed base of 639,379 ATMs. Outputs from EAST EGAP are presented to meetings of EAST National Members.