Message from the Executive Director

lgunnAnother year draws to a close and it has been a very busy one for EAST.  On behalf of the Board I would like to thank all those who have worked so hard to provide information, time and resources to help us to meet our targets and objectives.  Some of the highlights are as follows:

EAST National Members - badgeWe held National Member meetings in Rome in February (hosted by Consorzio BANCOMAT), in The Hague in June (hosted by Europol) and in London in October (hosted by the LINK Scheme).  During 2015 we welcomed five new National Members representing South Africa (South Africa Banking Risk Information Centre – SABRIC), Serbia (Chamber of Commerce and Industry of Serbia – CCIS), Turkey (Bankalararasi Kart Merkezi A.S. – BKM), the United States (Citi Security & Investigative Services -CSIS) and Brazil (Tecnologia Bancaria S/A).

The EAST Expert Group on ATM Fraud - LogoThe EAST Expert Group on ATM Fraud (EGAF), chaired by Otto de Jong, held three meetings in January, May and September, all hosted by ING in Amsterdam.  In June EGAF produced guidelines for the Standardisation of Terminology for Locations of Card Data Compromise devices at ATMs and assisted Europol to produce Guidance & recommendations regarding logical attacks on ATMs.

The EAST Expert Group on ATM Physical Attacks - LogoThe EAST Expert Group on ATM Physical Attacks (EGAP), chaired by Graham Mott, held two meetings in March and September, both hosted by the LINK Scheme in London.  In September we sent out our first EAST ATM Physical Attack Alert in a format agreed by EGAP.

EAST Europol MoUIn June Europol’s European Cybercrime Centre (EC3) signed a Memorandum of Understanding with EAST in order to further strengthen a working partnership that has been in place since the first EAST meeting took place in February 2004 .

EAST FCS 2015 - 3 (1)In June we also held our second EAST FCS Forum in The Hague.  The event proved to be a successful platform in bringing together the perfect mix of banking representatives, security experts, police, payments associations, government agencies and many other stakeholders in the ATM crime prevention sector. It was planned and organised by EAST Development Director Úna Dillon, working with Liquid Nexxus, and will be followed by our third FCS Forum in June 2017.

Bogota PCF MeetingIn October EAST supported Europol at an International Payment Card Fraud Meeting in Colombia – Rui Carvalho, EAST Director and national representative for Portuguese National Member SIBs, participated in a two-day meeting in Bogota to discuss payment card fraud overseas and money withdrawals in Latin America.

Europol-Interpol- Event 1In November this support for Europol continued at an International Payment Card Fraud Meeting in Singapore. I participated in a two-day meeting that was held in the INTERPOL Global Complex for Innovation (IGCI) and was co-hosted by Europol and INTERPOL to discuss payment card fraud overseas and money withdrawals in the extended South East Asia region.

Una ATEFI 2Later in the month Úna Dillon presented the latest European Fraud Report to the first Annual Latin American Forum on Security in Payment Systems, held on 18th / 19th November 2015 in Asuncion, Paraguay.  The event was co-founded by ATEFI (Latin American Association of Operators Electronic Funds Transfer and Information Services) and Liquid Nexxus in order to raise awareness of payment-related crime in Latin America.

EAST - EUROPEAN FRAUD UPDATE 3 - 2015EAST continues to keep abreast of the latest fraud trends and crime information, publishing our European ATM Crime Reports and European Fraud Updates.  Our thanks go out to all the people and organisations that have shared information for the above, and for EAST ATM Fraud Alerts (27 sent out this year to date), and EAST ATM Physical Attack Alerts (2 sent out this year to date).

Seasons greetingsFinally, on behalf of EAST, I would like to wish all readers a wonderful festive break and a very happy and fulfilling New Year.

Kind regards

Lachlan

Thanks to all participants for making EAST FCS 2015 a success!

There was a full turnout at the EAST Financial Crime & Security (FCS) Forum 2015, held at the Grand Hotel Amrâth Kurhaus, Scheveningen in the Hague and feedback thus far has been enormously positive.

EAST FCS 2015 - 3 (1)The EAST team would like to thank all who attended EAST FCS 2015 and who helped to make the conference such a huge success! The event was overbooked several weeks in advance but the venue was happy to provide more space for the extra seating to squeeze in the extra participants.

Here is what a couple of delegates had to say about the event:

EAST FCS 2015 - 4 (1)“It was remarkable! The most important thing for any event – atmosphere – was great! It allowed everybody to contact and to get actual information. Balance between presentation time and live networking was perfect.” – Ukraine.

“It was a very interesting program, and the facilities were just great. I would not mind getting back there in two years.” – Norway.

If you did not have a chance to attend this year’s conference the next one is scheduled to take place in June 2017. In the meantime, keep an eye on the EAST website, Facebook page, on LinkedIn or follow us on Twitter to keep abreast of all EAST activities and news on the next open event.

EAST FCS 2015 - 2 (1)In her closing address, conference Chairman Úna Dillon, Development Director of EAST, summarised the two-day conference by noting the importance for industry to collaborate with law-enforcement. A number of case studies were provided during the event showing proof of the benefits both police and financial institutions gain from working together to fight crime.

One of EAST’s missions is to build strong relationships between police forces including, and especially, Europol (with which EAST signed an MOU during the week of the conference) and the financial services industry which is continuously under attack by every level of criminal; from on-the-street payment card theft to organised cybercrime.

This EAST FCS Forum, the second thus far, has proven to be a successful platform in bringing together the perfect mix of banking representatives, security experts, police, payments associations, government agencies and many other stakeholders in the ATM crime prevention sector  –  the dialogue and learning from right across Europe, the U.S. and South America will no doubt help all participants to better detect and prevent ATM Crime going forward.

EAST would like to thank our partners again without whom this conference would not have been possible at all. Our deepest appreciation to Liquid Nexxus, co-organisers of EAST FCS 2015 and to our sponsors BVK, Cyttek Group, CSPtec, Damage Control, Fortconsult, GMV, TMD Security and the ATM Security Association.

We appreciated very much the speakers who provided such meaningful content. Speakers came from 12 different countries, some traveling more than 5,000 miles to share their knowledge and enthusiasm for ATM crime prevention.

EAST is currently processing the feedback received from this event in an effort to ensure the next forum suits everyone’s needs, on every level. We hope to see you all at the next EAST FCS Forum – EAST FCS 2017!

EAST FCS 2015 - 5 (1)

U.S. Secret Service Update on High-Tech & Financial Crime in the U.S.

ECTFThe United States Secret Service (USSS) will present on Combating High-Tech and Financial Crime in the U.S. at the EAST Financial Crime & Security Forum (EAST FCS 2015).  Guest speaker Special Agent (SA) Jeffrey Dant will share challenges and trends in their work in combating Financial Crime.

Electronic Crimes Task Forces (ECTFs) and the Electronic Crimes Working Group initiatives prioritize investigative cases that involve electronic crimes.  These initiatives provide necessary support and resources to field investigations that meet specific criteria.

About Jeffrey Dant

SA Dant has been employed with the USSS since 2003.  He is currently assigned to the Financial Crimes Task Force of the Newark Field Office, where he investigates high tech financial crimes and emerging criminal trends.  While in his former position with the New York/New Jersey Electronic Crimes Task Force, he specialized in the investigation of skimming schemes involving ATMs and Point of Sale terminals, as well as payment system network intrusions.

SA Dant uses the knowledge and skills obtained from both Task Forces to initiate and test new investigative tactics for identifying group member structure and hierarchy of Eastern European Organized Crime Groups.  The intelligence gained through the analysis of many sources generates and enhances investigations throughout the world.  In response to specific intelligence and communication issues, he started a high-tech crimes working group, known as NJC4, which disseminates criminal intelligence, and provides training to local police agencies throughout the State of New Jersey.

Checkout the full Agenda here.  Book now to ensure you don’t miss your opportunity to attend the EAST Financial Crime and Security (FCS) Forum 2015, which will highlight emerging threats to the ATM Channel.

EAST FCS 2015 highlights emerging threats to the ATM Channel

malicious softwareOver the last few years there has been a spike in malicious software, capable of infecting and jackpotting ATMs, shifting the focus away from innovative, high-tech skimming devices and targeting a rapidly ageing ATM infrastructure. From Malware such as Plotous (originating in Mexico) to Tyupkin, attacks are evolving and growing both in sophistication and frequency.

EAST ATM Crime Report 2014In a European ATM Crime Report covering H1 2014 EAST reported an estimated 20 incidents of ATM Malware. These were ‘cash out’ or ‘jackpotting’ attacks and all occurred on the same ATM type from a single ATM deployer in one country.  The report stated that, while many ATM Malware attacks have been seen over the past few years in Russia, Ukraine and parts of Latin America, this was the first time that such attacks were reported in Western Europe.

In a European Crime Report covering the full year 2014 EAST reported 51 such incidents, with related losses of €1.23 million.

east thumbThe EAST Financial Crime and Security Forum (EAST FCS 2015), that will be held in The Hague on 11th and 12th June 2015, will include strategic and technical presentations about this emerging problem as follows:

ATM Jackpotting and Cyber-Skimming – an Update from Ukraine will highlight payment fraud issues identified in Ukraine and neighbouring countries, trends in skimming and recent developments in Jackpotting attacks

ATM Compromise with and without Whitelisting A demonstration to show how a Windows ATM platform can be compromised through malware infection

Pen-testing – Current and Future Exploits in ATM Networks  A Case Study on work carried out to secure a national ATM Network

Attending EAST FCS 2015? Reserve your Place at the Kurhaus – only 30 rooms left!

Hotel Amrath KurhausThe EAST Financial Crime and Security Forum (EAST FCS 2015) will take place on 11th/12th June 2015 at the Grand Hotel Amrâth Kurhaus, one of the most important landmarks in The Hague.

The  Hotel  is located at the beating heart of The Hague and dates back almost 200 years, to the year 1818, when Jacob Pronk opened a bathing establishment. The modestly sized wooden building had four rooms, each fitted with a bath tub. These tubs were filled with cold or heated seawater, bathing in these tubs was said to have a healing effect. Those with a more adventurous spirit could also opt for a more direct treatment. Pronk owned two carriages that were used to drive guests into the breakers.

The bathing resort was so successful, that in 1826 it was replaced by a stone building, this bathing house was owned by the local government. Here, guests could find hotel rooms, a library, a billiards room, dining rooms and bathing facilities.

EAST FCS 2015 has secured limited accommodation for those attending the event in June. Only 30 rooms remain at the preferential conference rate. If you are planning to attend sign up now to secure your room.

Who is attending?

Conference attendees-webThe conference will have over 150 delegates, responsible for ATM security strategy, fraud prevention, security and generally anyone with an interest in improving their overall understanding of ATM and Payment Card fraud and countermeasures including:

  • EAST National Members
  • EAST Associate Members
  • Law Enforcement & Intelligence Services
  • Banks and ATM Deployers
  • Payment Service Providers, Transaction Processors, Card Brands
  • ATM & security equipment manufacturers and vendors
  • Other stakeholders

Benefits of Attending

  • A unique opportunity to hear about the latest threats and counter-measures from industry experts
  • An agenda set by deployers, for deployers
  • A unique opportunity to network with peers and share experiences
  • Gain practical knowledge of what is being done to combat emerging threats

Book soon to ensure you don’t miss this great opportunity to attend what has already been hailed as an “excellent event for helping to make a difference in the area of financial crime prevention”. Places are limited and registration priority will be given to EAST Members, National and Associate

“Project Sandpiper”, an EU Project to fight Payment Card Fraud, will be presented at EAST FCS 2015

DCPCU LogoA Case Study on “Project Sandpiper” will be presented at the EAST Financial Crime and Security Forum (EAST FCS 2015). The successful project, an exercise in Private Sector & Law Enforcement cooperation, was initiated by UK authorities and headed by the Dedicated Card and Payment Crime Unit (DCPCU).

The DCPCU is a special police unit comprising police officers appointed from the City of London Police and Metropolitan Police Services who operate together with industry fraud investigators. The DCPCU secured European Commission funding in 2013 in order to finance the project specifically focused on tackling Romanian criminality affecting the UK payment industry at the time.

The project involved connecting the DCPCU with the UK payments industry as well as law enforcement officers in Romania, involved in tackling the country’s organised crime gangs.

The Case Study, which will be jointly presented by Ben Birtwistle from the Royal Bank of Scotland (RBS) and Russell Chinn from the DCPCU, will  explain how to effectively coordinate efforts to combat card fraud and ATM fraud through cooperation and information sharing.

Speaker Spotlight

Ben Birtwistle RBSBen Birtwistle is Manager – Customer Outcomes & Fraud – ATM Operations, at RBS Group. He heads the Customer Outcomes & Fraud unit in RBS ATM Operations, overseeing all deliverables designed to ensure customers are served correctly and securely at any RBS, NatWest, Ulster Bank or Tesco Bank ATM. Previous roles include Manager ATM Fraud Control, Intelligence & Co-Ordination Analyst and Customer Contact Training Manager. Ben started in the bank in 2003 after completing a Fine Arts degree and taking time out to travel.

Book soon to ensure you don’t miss your opportunity to attend the event. Places are limited and registration priority will be given to EAST Members, National and Associate.

How to combat ATM physical attacks – a perspective from ING

Gas AttackAcross several European countries there has been a spate of explosive gas and solid explosive attacks against ATMs.  Such attacks, while not always successful, result in extensive collateral damage to the ATM and its surrounding areas.

At EAST FCS 2015 Job Galesloot, Manager Security Branches for ING Bank, will present an overview of the changing modus operandi of attackers in the Netherlands and which counter-measures have been taken regarding ATM physical attacks.

The EAST FCS Forum 2015 (EAST FCS 2015) will be held in the Netherlands on 11th & 12th June 2015 at the  Grand Hotel Amrâth Kurhaus in The Hague.  Join Industry experts from around the globe to focus on security issues the ATM industry is currently facing, as highlighted by our EAST Expert Groups.

About Job Galesloot

Job GaleslootJob is a specialist in physical crimes against ING bank branches. Since 2007 he has been responsible for the first line of defence of ING branches (270 Branches, 400 service points and 1800 ATMs). His main concerns are explosive gas attacks on ATMs, physical attacks on the bank’s branches and physical or verbal aggression against branch staff. He has developed an extensive learning programme within ING’s branches, to create (security) awareness with bank employees. His team is responsible for analysis of possible physical threats on the branches and to advise on the countermeasures.

Who Is Attending?

Conference attendees-webOver 150 delegates will attend from ATM networks, banks, law enforcement, vendors, and EAST national and associate members.

Book soon to ensure you don’t miss this great opportunity to attend what has already been hailed as an “excellent event for helping to make a difference in the area of financial crime prevention”. Places are limited and registration priority will be given to EAST Members.

There are a couple of sponsor slots still available, so if you are in the business of ATM crime prevention and wish to take a space alongside a key audience, see our supporting organisations brochure for details.

Attend EAST FCS 2015 to see how 3D printing can help validate anti-skimming technology

images0QVOEJP3Join us at the EAST Financial Crime and Security Forum (EAST FCS 2015) in The Hague, The Netherlands, on 11-12 June 2015, where anti-fraud professionals from across the world will come together to share knowledge and expertise on financial crime prevention and detection.

This month we are delighted to announce that Dave O’Reilly, Chief Technologist at FTR Solutions, will be one of one of our key speakers at the event. He will provide an exciting demonstration showing how 3D printing can help validate the effectiveness of anti-skimming technologies.

During EAST FCS 2015 Dave will use a 3D printer to help validate the effectiveness of anti-skimming technologies. There are many anti-skimming technologies available, operating on different principles, with various degrees of effectiveness against different attacks. Financial institutions therefore require validation of their anti-skimming technology choices to ensure they are sufficiently protected against known and emerging skimming techniques and to understand their residual risk. This practical presentation will describe the use of 3D printing as a tool to develop a process for reliable, reproducible, evidence-based validation of the effectiveness of anti-skimming technologies.

About Dave O’Reilly

Dave O Reilly - webDave has been active in information security, high tech crime and technology based financial crime for more than fifteen years. He has provided expert witness statements to An Gárda Síochána (the Irish national police force) in various cyber and card fraud matters. His work also includes development of industry-wide cybercrime statistics, coordinated malware analysis and the development of coordinated incident response exercises for the banking sector.

He is an advisor to the Council of Europe on various cybercrime matters, including use of the Internet for money laundering purposes and developing strategies for law enforcement and judicial cybercrime capacity building and recently conducting a data protection audit of Facebook by performing all of the technical analysis involved in the audit.

Who Is Attending?

Conference attendees-webOver 150 delegates will attend EAST FCS 2015 from ATM networks, banks, law enforcement, vendors, and EAST national and associate members.

Book soon to ensure you don’t miss this great opportunity to attend what has already been hailed as an “excellent event for helping to make a difference in the area of financial crime prevention”. Places are limited and registration priority will be given to EAST Members, National and Associate.

There are a couple of sponsor slots still available, so if you are in the business of ATM crime prevention and wish to take a space alongside a key audience, see our sponsorship brochure for details.

Don’t miss this key event which be held at the Grand Hotel Amrâth Kurhaus, located in the popular seaside resort of Scheveningen in The Hague.

Places going fast for EAST FCS 2015. Register now to secure your seat at the event

The Kurhaus HotelDelegate registration for the EAST Financial Crime and Security (FCS) Forum 2015 is gaining momentum. Those already signed up include law-enforcement representatives from around the world, global heads of fraud for international banks, security experts; and many more. The conference takes place on the 11th and 12th of June this year at the Grand Hotel Amrâth Kurhaus in Scheveningen, the popular seaside resort located in The Hague.

Who is attending?

Conference attendees-webOver 150 delegates will attend from ATM networks, banks, law enforcement, vendors, and EAST national and associate members.

Book soon to ensure you don’t miss this great opportunity to attend what has already been hailed as an “excellent event for helping to make a difference in the area of financial crime prevention”. Places are limited and registration priority will be given to EAST Members, National and Associate

There are a couple of sponsor slots still available, so if you are in the business of ATM crime prevention and wish to take a space alongside a key audience, see our sponsorship brochure for details.

Early Bird Registration Discount – EAST FCS 2015

east thumbThe EAST FCS 2015 organisers wish to issue a friendly reminder to readers that Early Bird Registration is ending on 31st December for the EAST Financial Crime & Security Forum, being held on the 11th and 12th June 2015 in the Grand Hotel Amrâth Kurhaus, The Hague.

The Kurhaus Hotel

Don’t miss this opportunity for significant savings!

Register now to ensure your place at this gathering of global stakeholders in financial crime prevention.

The conference, which is co-organised by EAST and Liquid Nexxus, aims to share new information, the latest trends, innovations and modus operandi in the ATM Security field. The event will cover the impact of international financial crime and focus on practical and strategic measures to respond to ever-evolving threats.

A preliminary agenda is available on the event’s page.  We look forward to seeing you in The Hague!

If you require any further information or have questions, please contact us at:

EAST FCS (EAST) Event Coordinator
Una Dillon, Development Director, EAST (una.dillon@eas-team.eu)

EAST FCS (LNX) Event Coordinator
Lucas Allen, CEO, LiquidNexxus (east-fcs@liquidnexxus.com)