EAST Presents at ATEFI Forum on Security in Payment Systems

payment systemsEAST Development Director Rui Carvalho (pictured second from the right with Cristian Patti, Fernanda Romero and Oscar Castellano of ATEFI) presented an overview of Terminal Related Fraud and Transaction Fraud in Europe at the fourth Annual Latin American Forum on Security in Payment Systems, held on 24th / 25th October 2018 in Buenos Aires, Argentina.

The event was organised by ATEFI in order to raise awareness of payment-related crime in Latin America.  It focused on physical attacks and cyber threats to electronic payment systems in the region.  Over 180 people attended from:

  • Ministry of Security of the Province of Buenos Aires
  • Argentine Federal Police
  • AMERIPOL
  • Argentine Federal Administration of Public Revenues (AFIP)
  • Central Bank of the Argentine Republic (BCRA)
  • Compensating Chamber of the Argentine Republic (COELSA)
  • Office of the Prosecutor of the Government of the Province of Buenos Aires
  • Ministry of the Interior of Uruguay
  • European Association for Secure Transactions (EAST)
  • 12 ATEFI Member Networks from 10 regional countries: Brazil, Chile, Uruguay, Paraguay, Panama, Honduras, Guatemala, Ecuador, Colombia, Argentina
  • 22 Banks
  • Association of Banks of Argentina
  • Payment Card Schemes
  • Specialist Media Representatives

ATEFI is the Latin American Association of Operators Electronic Funds Transfer and Information Services and represents 20 ATM networks in 14 countries throughout Latin America.

In May 2016 EAST and ATEFI joined forces in order to further strengthen cross border cooperation in combating all types of payment crime including payment card fraud, hi-tech crime and ATM cyber and physical attacks.

EAST presents at Europol Training on Payment Card Fraud Forensics

card fraud forensics trainingOn 26 June 2018 EAST Development Director Rui Carvalho presented at the fourth edition of the Europol Training Course on Payment Card Fraud Forensics and Investigations at the Spanish National Police Academy in Ávila, Spain. His talk gave an overview of EAST and covered terminal and payment fraud in Europe from the perspective of the private sector.

The Europol training, which ran from 25 to 29 June 2018, covered a wide range of topics including cryptocurrencies, ATM malware, forensic tools for the examination of skimming equipment, Near Field Communication (NFC) technology, EU regulation in non-cash payment, and data breaches or cyber attacks.

The training course was attended by 74 Investigators, forensic experts, and future police officers from 27 countries in the European Union, as well as from Iceland, Gibraltar, Montenegro, Moldova, Canada, Ukraine and South Korea.  Presentations were given by 33 speakers from different law enforcement agencies, the European Commission, Europol and bodies from the private sector (including EAST) and academia.  Since the first training in 2015 over 200 international students have benefited from the training programme, which has been supported by EAST.

EAST presents at Portuguese Police Seminar

EAST presents at Portuguese Police SeminarEAST Development Director Rui Carvalho presented at a Seminar organised by the Portuguese Judicial Police (Policia Judiciaria) at their Headquarters in Lisbon.   The event entitled ‘Fraud in Electronic Payments – present and future’ took place on 14th/15th May 2018 and was attended by Police Inspectors from all over Portugal.

His presentation gave an overview of EAST and its activities, covered the latest fraud statistics published by EAST, and highlighted the latest trends in terminal and payment fraud.

EAST supports Europol Strategic Payment Card Fraud Meeting

On 20-21 November 2017, Europol’s European Cybercrime Centre (EC3), with the support of EAST, hosted an international meeting with a specific focus on combating payment card fraud across Europe and beyond.

In its sixth occurrence since it was first organised in Singapore in 2015, this meeting was held for the first time at Europol’s headquarters in The Hague, bringing together representatives from 3 regions of the world: 8 EU Member States (Portugal, Greece, France, Denmark, Spain, Romania, Bulgaria and Italy), Latin America (Argentina, Dominican Republic, Chile, Colombia and AMERIPOL) and Asia (Malaysia, Philippines, Thailand and ASEANAPOL).

The EAST presentation focused on combating payment card fraud from the perspective of the private sector – EAST Executive Director Lachlan Gunn gave an overview of EAST and presented the latest threats, criminal methodologies and crime and fraud statistics.  EAST Development Director Rui Carvalho, who chairs the EAST Payments Task Force (EPTF), covered the latest payment crime trends as reported at the 43rd EAST Meeting.

The latest European Central Bank Report estimates €1.44 billion losses in Payment card fraud in 2013 The overall losses were up 8%. Card Not Present (CNP) fraud has experienced significant increases in Europe in the last years and although Card Present Fraud (CP) within the EU decreased during the last years still remain significant as the EMV (chip and pin) protection has not yet been fully implemented. In fact, organised crime groups set up permanent bases in overseas locations where Chip is not implemented cashing out compromised European cards.

EAST has supported all the Europol Strategic Meetings on Payment Card Fraud held in the ASEAN and LATAM regions.

 

EAST Presents at Third Latin American Security Forum

Latin American SecurityRui Carvalho, EAST Development Director, presented at the third Annual Latin American Forum on Security in Payment Systems, held on 18th / 19th October 2017 in Lima, Peru.

The event was co-organised by ATEFI and Liquid Nexxus in order to raise awareness of payment-related crime in Latin America.

ATEFI is the Latin American Association of Operators Electronic Funds Transfer and Information Services and represents 20 ATM networks in 14 countries throughout Latin America.

Rui Carvalho (pictured on the left with Fernanda Romero and Oscar Castellano of ATEFI) presented an overview of Terminal Related Fraud and Transaction Fraud  in Europe from the perspective of the Electronic Payments Industry, as represented by EAST.

In May 2016 EAST and ATEFI joined forces in order to further strengthen cross border cooperation in combating all types of payment crime including payment card fraud, hi-tech crime and ATM cyber and physical attacks.

 

 

EAST presents at Europol Training on Payment Card Fraud Forensics

Payment Card FraudOn 29 June 2017 EAST Development Director Rui Carvalho presented at the third edition of the Europol Training Course on Payment Card Fraud Forensics and Investigations at the Spanish National Police Academy in Ávila, Spain. His talk gave an overview of EAST and covered ATM Crime and Transaction Fraud in Europe from the perspective of the private sector.

The Europol training, which ran from 26 to 30 June 2017,  focused on the forensic examination of skimming devices, payment card and ATM malware forensics, as well as investigative techniques to target criminal networks responsible for international payment fraud incidents.

The majority of participants were experts in forensically-examining skimming equipment and electronics, and  investigators in payment fraud. During the course, they took part in specific sessions that included card-not-present and card-present fraud modus operandi, trends and threats for investigators, as well as tools for payment card analysis. The course also provided common sessions, workshops and networking events with the private sector.

 

3rd EAST FCS Forum – the most successful yet!

EAST FCS ForumThe sun has set on another successful EAST Financial Crime & Security (FCS) Forum which was held for the second time at the Grand Hotel Amrâth Kurhaus, in Scheveningen, The Hague. Feedback from delegates has been hugely positive.  This year marked a new format which included plenary sessions covering expert information from global regions: Asia-Pacific (ASEAN), Latin America, USA, Russia and Europe. 19 expert speakers travelled from 14 countries around the world to share their knowledge of ATM crime prevention.

In addition an afternoon of breakout sessions was held covering topics related to ATM and payment terminal fraud, and to ATM physical attacks.

Networking opportunities were abundant – a welcome cocktail the evening before the event, ensured all delegates were comfortable to kick off the Forum having met with their peers in a relaxed environment. Exhibitors enjoyed increased traffic through the exhibition hall, giving demos to attendees during coffee breaks, lunch and demonstration sessions.

 

Day One of the EAST FCS Forum opened with keynote speaker Steven Wilson, Head of the Europol Cyber Crime Centre (EC3) who spoke about the multi-faceted approach to countering cybercrime and the success of public private partnerships, especially the cooperation between EC3, non-EU States and EAST members.

Lachlan Gunn, Executive Director EAST, provided relevant statistics from the EAST European ATM Crime Report. He also announced a name change for EAST which is now the European Association for Secure Transactions. A milestone for EAST which has mainly focused on issues facing the ATM industry thus far, but which will now look at all threats against payment terminals (ATM, SST and POS), as well the security of payments and transactions.

Lachlan was followed by presenters from ASEANAPOL, the US Secret Service, the Russian Mastercard Members Association, and from the Latin American Association of Operators Electronic Funds Transfer and Information Services (ATEFI), who all gave the audience the most current information on activity in their regions.

In the afternoon breakout sessions Otto de Jong, EAST EGAF Chair, led discussions which covered R&D by fraudsters on EMV and old school ATM Fraud, and Graham Mott, EAST EGAP Chair, facilitated discussions on banknote degradation, physical attack types and countermeasures and traditional attacks.

The day closed out nicely with a BBQ by the beach!

Day Two kicked off with Group-IB providing an overview on the evolution of logical attacks on financial institutions. This was followed by a case study on Black Box attacks from NCR Czech Republic and an update from ING Netherlands on the evolution of gas and solid explosive attacks. There was a case study on countering such explosive attacks from the UK’s West Midlands Regional Organised Crime Unit, and the final talk of the day came from Rui Carvalho, Development Director EAST, who is building the EAST Payments Task Force and provided an overview on current and future activities for EAST.

In her closing address, conference Chairman Úna Dillon, Development Director of EAST, summarised the two-day conference by noting the importance of cross-border public-private sector cooperation in the fight against financial crime – stressing the need for private sector industry stakeholders to collaborate with law-enforcement agencies. She added that whilst EAST delivered the conference, the people charged with building the event are also deeply involved in the collaborative work already going on. Their ‘on-the-ground’ involvement means the EAST FCS Forum agenda will always be relevant and current.

This 3rd EAST FCS Forum has proven to be a successful platform in bringing together the perfect mix of banking representatives, security experts, law enforcement, payments associations, government agencies and many other stakeholders in the ATM and payment crime prevention sector  –  the dialogue and learning from  across Europe, the USA, Latin America, Russia and Asia-Pacific will no doubt help all participants to better detect and prevent current and future financial crime threats.

The event could not have taken place without the support of sponsors, exhibitors, speakers and delegates. EAST hugely appreciates the participation of all who took part and thanks everyone for their contribution to making the event a success.

Overall sponsor of the EAST FCS Forum 2017 was 3SI Security Systems.

Other sponsors and exhibitors included, the ATM Security Association, ACG, BVK, GMV, MIB, Startech Ltd. and TMD Security.

EPTF holds First Meeting

EPTFThe First Meeting of the EAST Payments Task Force (EPTF) took place on Wednesday 19th April 2017 at the Banking and Payments Federation Ireland (BPFI) in Dublin.

The purpose of the EPTF is to provide a specialist task force for discussion of security issues affecting payments and transactions and for the gathering,collation and dissemination of related information, trends and statistics.

The meeting was chaired by Mr Rui Carvalho and was attended by key representatives from card issuers and payment processors.

The EPTF will take the following actions covering payments:

  • Explore, inter alia, potential improvements in security and other issues affecting payments and transactions
  • Engage with payment and transaction stakeholders on the impact of regulations
  • Establish what payment industry information (trends / general statistics) is currently available and what gaps the EPTF can cover through the collection of data from EAST’s extensive membership network (National and Associate).
  • Through Payment Updates, share information on trends and issues affecting payments and transactions.

Mr Carvalho will give a presentation on the EPTF and where it is heading at this year’s EAST Financial Crime & Security Forum (EAST FCS 2017).

EAST Presents at SAS Customer Connect

SAS Logo

EAST Director Rui Carvalho presented at the SAS Fraud & Security Intelligence Customer Connect event held in the USA from 15th to 17th August 2016 at the SAS World Headquarters in Cary, North Carolina.  SAS Customer Connections are networking events for SAS solutions users interested in sharing best practices and sparking innovation.

His talk, which took place on 16th August, covered ‘European Collaboration in Payments Fraud Prevention’. He presented to an audience made up of several dozen attendees from several major banks and processors worldwide.  The information shared was well received and resulted in a good interchange of views and discussion from the audience.  Participants from the United States were most interested in how EMV had affected European Payment Fraud, and the challenges faced by the industry during implementation

EAST participates in International Payment Card Fraud Meeting in Bogota

Bogota PCF MeetingRui Carvalho, EAST Director and national representative for Portuguese National Member SIBs (Sociedade Interbancaria de Servicos S.A.), participated in a two-day meeting in Bogota (Colombia) to discuss payment card fraud overseas and money withdrawals in Latin America.

The meeting, which took place on 28th and 29th October 2015, was organised by Europol in cooperation with the Colombian authorities (Policia Nacional and its Liaison Bureau at Europol) with the financial support of the Romanian authorities.

The meeting participants were 26 experts from EU Member States (Spain, Portugal and Romania), the United States and Latin America (Colombia, Brazil, Dominican Republic, Mexico and Chile).

The aim of the meeting was to increase awareness on card skimming and related overseas cash withdrawals, to share best practices, and to identify new logical attacks and malware targeting ATMs and Point-of-Sales (POS) Terminals.

A number of panel discussions took place to help improve the cooperation of police and judicial organisations in this area.  EAST participated in these discussions, along with representatives from the banking sector, the Colombian Prosecutor’s office and AMERIPOL, which provided an essential multi-stakeholder approach to fighting this transnational organised crime.

More information can be found on the Europol website.

Europol - AMERIPOL - Bogota