ATMIA Times October 2006

ATMIA Honors Inventor of the ATM
The ATM Industry Association (ATMIA) has announced the awarding of an honorary Lifetime Achievement Award to the inventor of the ATM, Mr. John Shepherd-Barron.
>> Read More

Upcoming ATMIA Events:
ATM SEC 06 is being held on the 23rd and 24th October, 2006 at the Radisson SAS Portman Hotel in London W1.
>> Read More

Multichannel Security and Identity Theft Prevention Best Practices Released
The Global ATM Security Alliance (GASA) and the ATM Industry Association (ATMIA) have collaborated on the publication announced today of “Best Practices for Protecting the Customer’s Personal Bank Account and Identity”. This international manual brings together for the first time best practices for both multichannel security for financial services and the prevention of identity theft.
>> Read More

ATMIA Pioneers Online Corporate Governance Assessments
The ATM Industry Association today announced that it has launched the pioneering concept of a self-service Corporate Governance assessment system for its members.
>> Read More

ATMIA Loyal Members Earn a Place in the 10th Anniversary Book
ATMIA believes that retention of existing members is as important as recruiting new members. The association’s goal is to build up a foundation of 1,000 loyal members. Plans are in the works to publish a full list of the Loyal Members of ATMIA in the ATMIA 10thAnniversary Commemorative book in January 2007. >> Read More

Ram Raid Gang Found Guilty
A gang of travellers who embarked on a year-long armed robbery spree across East Anglia were snared following one of the largest cross-border police operations the region has seen. >> Read More

ATMIA Intros Self-service ATM Risk Management
ATMIA has introduced an automated ATM risk
management service for its members. >> Read More

ATMIA’s Debit Council Publishes Cardholder Security Tips for POS Transactions
The ATM Industry Association’s Debit Council has published a POS Customer Guide which includes fourteen tips for preventing fraud during point of sale transactions.

Since much of ATM fraud originates through card and PIN compromises at POS terminals, ATMIA believes it is imperative to reach out to the POS sector and join forces and resources to counter cross-channel fraud in financial services worldwide. >> Read More

Cognito User Fee 15% Discount
Please see details of our special 15% discount for access to Cognito, our global fraud-fighting tool. >> Read More

NEWSFLASH!

ATMIA members can now view a wide range of ATM technology in our new virtual Gallery of Technology which is located on the Member Information Grid.

“Using our Gallery of Technology will be like window shopping to look for new or interesting ATM technology or services,” commented Sharon Lane, ATMIA’s Director of Finance and Membership Services.

Enquiries about the new Gallery should be directed to Sharon at sharon@atmia.com.

NEWSFLASH!

Potential Industry Threat: ATMs unsecured due to using original default settings

LOCATION: Random locations based upon Acquirer practice

On August 19, 2006 in Virginia Beach, VA, a thief managed to reprogram an ATM located in a gas station to debit each withdrawal in $5 denominations instead of the actual $20 dispensed. A male suspect, using a pre paid card, entered the gas station around 6:19 PM and proceeded to enter a series of numbers accessing the ATM operating system using manufacturer default codes that remained unchanged from the original installation of the equipment. Once the cassette value was changed, the suspect made a withdrawal and returned later the same day to make an additional withdrawal. The ATM continued to operate in this fashion for nine days until a conscientious cardholder reported the discrepancy. It is unknown if other ATMs in this area have been similarly tampered with.

BEST PRACTICES

• Immediately verify that every ATM operated by your financial institution has security codes that are not original manufacturer default settings. Leaving factory default settings is very common although an un-safe practice.
• ATM safe combinations should also be changed from original manufacturer settings.
• Consult your user guide to ensure optimum operating standards since ATM equipment varies by manufacturer.
• It is a good idea to ensure that sub layers within your security settings have also been reset to unique passwords or access codes.
• Balance your ATMs daily or as frequently as possible.
• Reconcile settlement account deposits with the actual ATM balances to identify possible irregularities.
• Increased security around all ATM equipment is recommended.
• Make sure all video equipment is working properly. Date your video surveillance tapes and keep them secure for 60 days when possible, in case you need to refer back to them.
• Report ATM tampering directly to Fair Isaac’s CardAlert Fraud Manager Team by using the “ATM Fraud Incident Report” (AFIR) available online at https://fraudforum.
fairisaac.com.
Membership is free but registration is required. The AFIR is located in the “Fraud Hotline” discussion area.