{"id":3512,"date":"2009-12-25T22:22:42","date_gmt":"2009-12-26T03:22:42","guid":{"rendered":"http:\/\/www.raleighpublicrecord.org\/?p=3512"},"modified":"2009-12-25T23:17:28","modified_gmt":"2009-12-26T04:17:28","slug":"rpd-arrested-four-for-atm-skimming-in-2009","status":"publish","type":"post","link":"https:\/\/theraleighcommons.org\/raleighpublicrecord\/news\/2009\/12\/25\/rpd-arrested-four-for-atm-skimming-in-2009\/","title":{"rendered":"RPD arrested four for “ATM skimming” in 2009"},"content":{"rendered":"

Read an explanation of ATM skimming from one of the North Carolina State Employees Credit Union’s security officers here<\/a><\/em>.<\/p>\n

A form of bank fraud that can victimize hundreds within hours is growing in sophistication and increasingly targeting the Raleigh area.<\/p>\n

The Raleigh Police Department arrested four suspects in 2009 as a result of multiple investigations into cases of \u201cskimming,\u201d where thieves use electronic devices to steal financial information. Although the arrests stem from only three cases in 2008 and 2009, the crimes can impact a large number of people.<\/p>\n

\u201cIf you looked at the victims, there are hundreds,\u201d said Raleigh Police Sgt. Al O\u2019Connell, who worked on the cases. \u201cIt\u2019s crazy.\u201d<\/p>\n

The skimming devices can be attached to ATMs or gas pumps and are difficult to detect.<\/p>\n

\u201cTheir goal is to collect personal information while still allowing the transaction to continue,\u201d Karen Daeke, head of security administration for the State Employees Credit Union, said.<\/p>\n

The technique<\/b><\/p>\n

On ATMs, the card readers have a plastic covering painted to match the color of the ATM and are usually attached to the machine with glue or tape. Some criminals are only interested in collecting numbers stored on a debit or credit card\u2019s magnetic strip. If they\u2019re after cash, they\u2019ll employ a pinhole camera hidden inside a mirror or a brochure holder. The camera will record PIN numbers and allow criminals to match them with the stolen card numbers.<\/p>\n

Data from the card reader and the camera is captured using two different techniques. With Bluetooth, a wireless technology often used in cell phones, someone in a nearby car can download the information as people perform their transaction. Data can also be transmitted through a wireless router to a hidden laptop, which stores the information until the criminal can come back to retrieve it.<\/p>\n

That option represents an increased level of sophistication for criminals.<\/p>\n

\u201cIt used to be that the bad guy was sitting in the parking lot,\u201d O\u2019Connell said.<\/p>\n

After retrieving the skimmers, cameras and other equipment, criminals can sell the card numbers online. They can also load the card numbers onto blank gift cards, which Daeke said can be purchased or stolen, and steal cash or make in-store purchases using the PIN.<\/p>\n

Gas pump skimmers, which are hidden inside and undetectable to customers, are even more technical. O\u2019Connell said criminals use a \u201creadily available\u201d key to open the gas pump panel and attach what is essentially a small computer.<\/p>\n

\u201cIt was programmed in such a manner that it knows the sequence of numbers on the keypad and knows which ones to capture,\u201d he said.<\/p>\n

After an install that can take less than 30 seconds, the device can capture card numbers and PINs for hours before it\u2019s later recovered.<\/p>\n

\u201cThere\u2019s no way of knowing until the money is gone,\u201d O\u2019Connell said. <\/p>\n

Whether the device is on an ATM or a gas pump, Crimes often aren\u2019t reported until victims notice fraudulent activity on their bank records. O\u2019Connell said it\u2019s rare for authorities to actually recover the skimming device itself.<\/p>\n

\u201cThe big challenge is that we are a step behind,\u201d O\u2019Connell said. \u201cAt that point, the suspects are gone. They\u2019re not even in our area.\u201d<\/p>\n

But Raleigh police have managed to get their hands on several devices in two cases. Investigators found one skimmer this year on a State Employees Credit Union ATM on Six Forks Road. Another case netted 10 to 12 gas pump skimmers at locations across the area, which O\u2019Connell says were manufactured by two brothers from Cary.<\/p>\n

In that case, investigators say the men intended to expand their operation by selling skimmers in other states. For the most part however, O\u2019Connell said criminals involved in ATM skimming are from countries like Russia or Bulgaria who move around quickly to capture as much data as possible.<\/p>\n

\u201cIf there was a common denominator, it would be that the suspects are from outside the United States,\u201d O\u2019Connell said.<\/p>\n

And although the devices are technical, they can be manufactured with a little search engine savvy and parts from an electronic store.<\/p>\n

\u201cThey both have done a lot of research,\u201d O\u2019Connell said. \u201cBut 10 minutes on the Internet, you can learn how to make a device.\u201d<\/p>\n

Undoing the damage<\/b><\/p>\n

Despite few cases of ATM skimming, it can be difficult for financial institutions to clean up the mess \u2013 especially since it takes time for victims to report the activity.<\/p>\n

\u201cIf you can pinpoint when the skimmer was installed and removed, whoever owns the device should be able to provide a list of users,\u201d she said.<\/p>\n

From there, the incident is reported to the financial institutions, who in turn notify cardholders. Although banks may be insured or claim restitution from those convicted, how they get their money back depends on the type of fraudulent transaction.<\/p>\n

\u201cIf we can seek reimbursement, we would do so,\u201d Daeke said.<\/p>\n

Solving the problem can also be complicated because people use ATMs from multiple institutions.<\/p>\n

\u201cIf another financial institution found an ATM to be compromised, our member might have used it,\u201d Daeke said. \u201cOur member could have been a victim even if it didn\u2019t happen at the credit union.\u201d<\/p>\n

And with more than 1,000 ATMs across the state, preventing ATM skimming can be a difficult task for SECU.<\/p>\n

\u201cIt\u2019s up at the very top [of our priorities] because it\u2019s the up-and-coming crime,\u201d she said. \u201cWe can\u2019t let our guard down [on other crimes], now we just have skimming to add to the list.\u201d<\/p>\n

Daeke said the sheer volume of victims is one of the reasons why the crime has evolved from cases of handheld scanners at restaurants and retailers.<\/p>\n

\u201cIt\u2019s like anything else. The bad guys get more efficient and effective by targeting the activity that\u2019s most profitable,\u201d Daeke said. \u201cThe thieves just migrated to the ATM.\u201d<\/p>\n

Daeke said the average ATM transaction occurs in less than a minute. A few hours after the skimmer is installed, criminals have the potential to steal hundreds of numbers.<\/p>\n

\u201cIt goes to efficiency of scale,\u201d Daeke said. \u201cThey get more bang for their buck because you can do ATM transactions in under a minute.\u201d<\/p>\n

It\u2019s also attractive to criminals because of its relative simplicity.<\/p>\n

\u201cI wouldn\u2019t say it\u2019s harder to get caught, but [the crime] is easier,\u201d O\u2019Connell said. \u201cYou can start at home doing fraud on the Internet and cover your tracks.\u201d<\/p>\n

Fighting back<\/b><\/p>\n

To combat theft from ATM skimmers, the credit union has worked to inform members about what to look for when banking at an ATM. <\/p>\n

\u201cThe State Employees Credit Union has taken on a strong education initiative,\u201d she said. \u201cWe feel like we\u2019ve done a good job getting the word out on the street.\u201d<\/p>\n

She said that effort appears to be working, since credit union officials have received more calls reporting suspicious ATMs, which they can quickly shut down and investigate.<\/p>\n

Financial institutions have also worked closely with local law enforcement and the Secret Service to fight skimming. Raleigh police even meet monthly with banks and other agencies to share information.<\/p>\n

But Daeke said there\u2019s no substitute for awareness on the public\u2019s part.<\/p>\n

\u201cBe aware. Know your surroundings in the areas you do business,\u201d she said.<\/p>\n

O\u2019Connell said it\u2019s important to regularly review bank records and financial statements. Visiting familiar ATMs and looking for out-of-place objects can also help. <\/p>\n

\u201cMost ATMs have a flat panel where you insert your card,\u201d O\u2019Connell said. \u201cIf there\u2019s anything protruding, you need to look at that carefully.\u201d<\/p>\n

When in doubt, O\u2019Connell said he\u2019d rather consumers contact authorities, even if it turns out to be a false alarm.<\/p>\n

\u201cIf you call us, we\u2019ll be happy to look at it,\u201d he said.<\/p>\n","protected":false},"excerpt":{"rendered":"

A form of bank fraud that can victimize hundreds within hours is growing in sophistication and increasingly targeting the Raleigh area.<\/p>\n

The Raleigh Police Department arrested four suspects in 2009 as a result of multiple investigations into cases of \u201cskimming,\u201d where thieves use electronic devices to steal financial information. Although the arrests stem from only three cases in 2008 and 2009, the crimes can impact a large number of people.<\/p>\n","protected":false},"author":24022,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[15,23],"tags":[],"_links":{"self":[{"href":"https:\/\/theraleighcommons.org\/raleighpublicrecord\/wp-json\/wp\/v2\/posts\/3512"}],"collection":[{"href":"https:\/\/theraleighcommons.org\/raleighpublicrecord\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/theraleighcommons.org\/raleighpublicrecord\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/theraleighcommons.org\/raleighpublicrecord\/wp-json\/wp\/v2\/users\/24022"}],"replies":[{"embeddable":true,"href":"https:\/\/theraleighcommons.org\/raleighpublicrecord\/wp-json\/wp\/v2\/comments?post=3512"}],"version-history":[{"count":0,"href":"https:\/\/theraleighcommons.org\/raleighpublicrecord\/wp-json\/wp\/v2\/posts\/3512\/revisions"}],"wp:attachment":[{"href":"https:\/\/theraleighcommons.org\/raleighpublicrecord\/wp-json\/wp\/v2\/media?parent=3512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/theraleighcommons.org\/raleighpublicrecord\/wp-json\/wp\/v2\/categories?post=3512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/theraleighcommons.org\/raleighpublicrecord\/wp-json\/wp\/v2\/tags?post=3512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}