Monday, December 21, 2009

European EMV (Chip and PIN) Roll Out Results in Changing Fraud Pattern

EAST (the European ATM Security Team) has just appear a European ATM abomination address accoutrement the aboriginal 6 months of 2009. For the third after 6 ages advertisement period, the all-embracing amount of artifice incidents (6,197) is almost stable, assuming a bordering access of 1%. While agenda bribery incidents are down by 19% (from 5,693 to 4,629 incidents), agenda accoutrement incidents accept added by 640% (from 141 to 1,045 incidents). Losses due to agenda bribery are down by 30% (from €222 actor to €156 million), while losses due to agenda accoutrement accept risen about 900% (from €0.59 actor to €5.8 million).

This indicates that the EMV* rollout at ATMs in Europe (now 92% complete) is allowance to abate bribery losses, and aswell that artifice counter-measures, artifice ecology capabilities and artifice apprehension are improving.

The EAST address indicates that abyss accept now started to abduction EMV cards, as a captured EMV agenda can be acclimated at EMV adjustable ATMs and added transaction terminals, until it is blocked by the arising bank. EAST recommends that, if a agenda is retained by an ATM, the cardholder takes actual action to acquaint his bank. Losses due to agenda accoutrement are still a atom of bribery accompanying losses, but EAST is recognising it as an arising threat.

EAST Director and Coordinator, Lachlan Gunn said, "The actuality that bribery incidents and losses appear to be assuredly abbreviating is auspicious for the industry, afterwards the above investment that has been put into EMV. As added locations of the apple aswell cycle out EMV, affair charcoal that the USA appears to accept no affairs to chase suit. A cogent allotment of all-embracing European losses now action there. To abate this risk, a agitation is now aperture as to how it can be mitigated, and next ages EAST will be administering a accompanying website analysis poll.”

Data accommodation from cases of hacking or added artifice at abstracts processors is addition arising blackmail that EAST is monitoring. Initial cases accept been appear in the Ukraine, the USA and the Dominican Republic. Card abstracts acquired from such attacks can be acclimated to actualize affected cards for acceptance at ATMs which are not EMV adjustable or area the agenda issuer allows fallback (if the PIN has aswell been obtained), for affairs at signature based POS terminals, or for card-not-present (CNP) affairs (if alone the agenda amount and accomplishment date accept been obtained).

Physical attacks on European ATMs accept risen by 12%, with baby increases apparent in both ram raids and robberies. While the banknote losses for such attacks are able-bodied below artifice levels, the risks to humans and the accessory accident to acreage abide to abide of abundant affair to the industry. The deployment of banknote ink/dye staining systems continues and EAST maintains a account of such systems for the account of the industry.

* EMV is an industry accepted for Smart Cards and agenda readers, accurate by the European Payments Council and the above transaction schemes

The abounding address is accessible to EAST subscribers and data of how to subscribe to EAST can be begin at www.european-atm-security.eu

(Background abstracts on the address & EAST follow)
For added advice amuse acquaintance the EAST Co-ordinator, Lachlan Gunn:
Email coordinator@eas-team.eu Tel: + 44 131 5100268 or appointment www.european-atm-security.eu

EUROPEAN ATM CRIME REPORT 2009, Period: January to June 2009
The aloft absolution is based on a address able twice-yearly by EAST to accommodate an overview of the European ATM abomination bearings for law administration admiral and EAST members, application statistics provided from 20 European states. The afterward countries, with an estimated absolute installed abject of 356,302 ATMs, supplied abounding or fractional advice for this report:
Austria; Belgium; Cyprus; Finland; France; Germany; Greece; Ireland; Italy; Liechtenstein; Luxembourg; Malta; the Netherlands; Poland; Portugal; Slovakia; Spain; Sweden; Switzerland; the United Kingdom.

EAST intends to access such advice from all 27 European Union states as able-bodied as from Iceland, Liechtenstein, Norway and Switzerland.
EAST has taken reasonable measures to advance the address this columnist absolution is based on and to address in a fair, reasonable, open, and cold manner. However, EAST makes no claims, promises, or guarantees about the abyss of the basal data. In addition, as the advice in the address has been anesthetized to EAST by added parties, errors or mistakes may abide or be discovered. Neither EAST nor its members, authors, or agents shall be accountable for any loss, damage, or affirmation with account to any such advice accepting provided. All such liabilities, including direct, special, indirect, or consequential damages, are especially disclaimed and excluded.

ABOUT EAST
Founded in 2004, EAST is a ‘not-for-profit’ organisation whose associates are committed to acquisition advice from, and disseminating EAST letters to ATM deployers and networks aural their countries/regions. While the capital focus of EAST is on ATMs, the accumulation aswell focuses on all transaction terminals that accept a absolute appulse on abomination perpetrated at ATM locations.

Their mission is to accumulate and accommodate advice to the European ATM industry and to facilitate able representation of ATM accompanying aegis issues at accordant European axial institutions, through a pan-European adequation of ATM aegis resources.

EAST has set up a framework arrangement anatomy to advance co-operation with industry, law enforcement, and in accurate Europol, in adjustment to accomplish acquaintance and bigger after-effects in the action adjoin organised cross-border crime. Regular analysis acclamation are conducted through the EAST website. More advice can be begin at www.european-atm-security.eu

No comments:

Post a Comment