Utrecht, the Netherlands – The ATM Security Association is preparing to issue a white paper on ATM card compromising techniques and counter-measures. The paper will be the first result published by one of the associations working groups. These groups were established to focus on the four memberprioritized areas of skimming and card data compromise, cassette security, software security and encryption. The white paper is the result of the cross-industry collaboration within the skimming and card compromise working group. Several association members including ATM suppliers and service providers, financial institutions and ATM manufacturers participated in the working group. Cross-industry collaboration is a key feature of all other working groups as well as of the association’s activities in general.
The upcoming white paper addresses a central issue regarding the security of ATMs. With an estimated worldwide cost of over $2 billion annually and cross-border organized crime, skimming is a global threat concerning organizations of the card industry, authorities, financial institutions, independent ATM deployers and technology providers alike. The white paper summarizes the latest ATM skimming techniques and card data compromise methods such as eavesdropping and card trapping, the criminal devices used and future security threats like card shimming. Also included are risk mitigation options available to ATM deployers, active and passive countermeasures to identified security threats with an evaluation of each option. The conclusions underline the importance of the development of global ATM security standards for effective protection against skimming and card data compromise. Furthermore, it stresses the need for reliable, up-to-date information and exchange of knowledge on the latest ATM skimming techniques.
Since the set up of the working groups in May 2015, the skimming working group has met an ambitious timeline: the group aligned its charta in June and presented it together with a roadmap for the next steps to the Board of the ATM Security Association in September. The white paper as initial result is currently being finalized before it will be made available on the ATM Security Association’s website (www.atmsecurityassociation.com) in December. Further details will be announced at a later date.