Blog Posts Process Analysis

As ATM Fraud Jumps, We Need ATM Profiling

Blog: Enterprise Decision Management Blog

ATM with Hacked stamp

As the US payment card infrastructure continues to move to EMV, fraudsters are turning their targets toward unattended self-service terminals, such as US ATMs, most of which have not yet been upgraded to read EMV chips.

Globally, the European ATM Security Team reported a 19% increase in ATM-related fraud attacks from 2014 to 2015. Debit-card compromises at ATMs located on bank property in U.S. jumped 174% from January-April 2014 to January-April 2015, while successful attacks at nonbank machines increased by 317%, as reported in the Wall Street Journal. Earlier this year, FICO reported a six-fold increase in US ATM fraud from 2014 to 2015.

EMV is deployed in most European markets, but without tokenization and end-to-end encryption, fraudsters can still often intercept relevant card data. What can banks do to protect their ATM machines? Regularly inspect all ATM for skimming and shimming devices and routinely test ATM software for cybersecurity vulnerabilities.

What else can we do? FICO Global Intelligent Profiles (GIP) technology monitors individual ATM machines, allowing FICO® Falcon® Fraud Manager models to detect bursts of fraudulent activity in real time. Falcon profiles cardholders and looks for out-of-pattern behavior. GIP takes this approach to other entities, including ATMs, and spots when terminals show uncharacteristic behavior patterns or align with fraudulent past behaviors for other terminals.

The following plot shows that GIP quickly identified the burst of ATM fraudulent activity during a recent four-day sophisticated fraud attack.  This is based on the production data of one of FICO’s Falcon clients using the US Debit model with GIP.

Chart showing four-day spike in fraud scores

The plot shows the percentage of Falcon scores above 900 (risky) for transactions at the attacked ATM terminals. During the four day fraud attack, the score distribution at the ATMs saw a sudden increase in risky scores from almost nothing to more than 50%, detecting a fraud burst at impacted ATMs. This one issuer alone was able to avert a loss of nearly $400,000 loss during these four days!

The fraud-savvy issuer that has deployed Falcon Fraud Models with GIP technology can quickly identify these bursts of fraudulent activity, minimizing losses and cracking down on ATM fraud.
To learn more about this technology, see our white paper Putting a Wide-Angle Lens on Fraud. And follow me on Twitter at @ScottZoldi.

The post As ATM Fraud Jumps, We Need ATM Profiling appeared first on FICO.

Leave a Comment

Get the BPI Web Feed

Using the HTML code below, you can display this Business Process Incubator page content with the current filter and sorting inside your web site for FREE.

Copy/Paste this code in your website html code:

<iframe src="https://www.businessprocessincubator.com/content/as-atm-fraud-jumps-we-need-atm-profiling/?feed=html" frameborder="0" scrolling="auto" width="100%" height="700">

Customizing your BPI Web Feed

You can click on the Get the BPI Web Feed link on any of our page to create the best possible feed for your site. Here are a few tips to customize your BPI Web Feed.

Customizing the Content Filter
On any page, you can add filter criteria using the MORE FILTERS interface:

Customizing the Content Filter

Customizing the Content Sorting
Clicking on the sorting options will also change the way your BPI Web Feed will be ordered on your site:

Get the BPI Web Feed

Some integration examples

BPMN.org

XPDL.org

×