Jump to Content
close
close
ABA: The American Bankers Association
Skip Section Navigation

In This Section

ATM Security

ATMs remain a prime target for criminals. Whether the criminals attempt to breach the machine through physical means or through malware infections, banks must remain knowledgeable about the evolving threats in their region.

ATMs are a convenient way for customers to access cash and account information. However, their convenience and accessibility also make them attractive targets for criminals. Whether the criminals attempt to breach the machine through physical attacks or through malware infections or other attack methods, banks must be aware of the existing and evolving threats in their regions.

The following are types of ATM attacks commonly reported by banks and resources that ABA members can use to assess and mitigate the risk to their customers and ATMs. These resources are based on information from ABA members, major ATM manufacturers and law enforcement agencies.

  • ATM Jackpotting. Criminal actors gain physical access to the ATM and download malware or install unauthorized devices to control the ATM’s cash dispense function or spoof the acquirer’s host system response, thereby allowing the criminals to withdraw unlimited amounts of cash.
  • ATM Shimming. A slim device containing a microprocessor and flash memory inserted into an ATM’s card reader to intercept or manipulate data passing between a payment card’s EMV/micro-chip and the ATM’s chip interface.
  • ATM Skimming. Criminal actors attach a scanning device onto the ATM card reader slot to record account details from a payment card’s magnetic strip. Once the information is captured, criminals use the details to create a cloned card.
  • Burglaries and Larcenies. Attempts to breach an ATM’s safe on site or at a secondary location using methods such as brute force, explosives, or hook and chains.
  • Cash Trapping. A contraption inserted into the cash-dispensing slot that blocks an ATM’s shutter so that bills cannot be presented to the customer. The criminal retrieves the cash once the customer leaves.
  • Robberies of Customers, ATMs Servicers/Technicians

ABA Resources

  • ATM Risk Assessment
  • Personal Safety Tips for Bank Customers
  • ATM Safety Tips
  • Tips for Financial Institutions: ATM and Vestibule Skimming Response Recommendations (Note: under review for updates)
  • ABA Physical Security Open Committee
  • ABA Security Exchange (online discussion group)

    • ABA ATM Security Trends and Mitigations Strategies Webinar Series Recordings

    Additional Resources

    Related to This