Bancomer ATM machine compromised
#1
Posted 10 March 2010 - 05:40 PM
Came home and checked my bank account and someone had used my card today to withdraw $6,000.00 pesos (my daily limit of approx. $500 US). I had just checked my account balance last night and did not see any activity.
There are only three machines that I have used in the past three weeks - Bancomer branch in San Antonio - Bancomer machine at Walmart lakeside - Bancomer machine at Costco on Lopez Mateos on Monday, March 1st. Mostly we try to use the Bancomer branch location as we feel it is safer...................?!
My card was used at an ATM machine in Ajijic today (never went there today) it says [Pri ATM #155COMMM5814].
I ALWAYS cover my hand when entering my PIN, I always check the machine to make sure there are no "fake" parts. Did they get inside, I mean physically, the ATM to install their hardware?
So there is Nothing one can do to stop this theft!! I do everything right and still get defrauded!!
#^%&^(*&(*^^&$#$@#$$%(*
#2
Posted 10 March 2010 - 06:15 PM
monica40, on 10 March 2010 - 03:40 PM, said:
Came home and checked my bank account and someone had used my card today to withdraw $6,000.00 pesos (my daily limit of approx. $500 US). I had just checked my account balance last night and did not see any activity.
There are only three machines that I have used in the past three weeks - Bancomer branch in San Antonio - Bancomer machine at Walmart lakeside - Bancomer machine at Costco on Lopez Mateos on Monday, March 1st. Mostly we try to use the Bancomer branch location as we feel it is safer...................?!
My card was used at an ATM machine in Ajijic today (never went there today) it says [Pri ATM #155COMMM5814].
I ALWAYS cover my hand when entering my PIN, I always check the machine to make sure there are no "fake" parts. Did they get inside, I mean physically, the ATM to install their hardware?
So there is Nothing one can do to stop this theft!! I do everything right and still get defrauded!!
#^%&^(*&(*^^&$#$@#$$%(*
For clarification, is the San Antonio machine to which you are referring the one at the Preferred Customer Unit on the Libramiento or is it a machine in the village? Thanks.
#3
Posted 10 March 2010 - 06:56 PM
monica40, on 10 March 2010 - 05:40 PM, said:
Came home and checked my bank account and someone had used my card today to withdraw $6,000.00 pesos (my daily limit of approx. $500 US). I had just checked my account balance last night and did not see any activity.
There are only three machines that I have used in the past three weeks - Bancomer branch in San Antonio - Bancomer machine at Walmart lakeside - Bancomer machine at Costco on Lopez Mateos on Monday, March 1st. Mostly we try to use the Bancomer branch location as we feel it is safer...................?!
My card was used at an ATM machine in Ajijic today (never went there today) it says [Pri ATM #155COMMM5814].
I ALWAYS cover my hand when entering my PIN, I always check the machine to make sure there are no "fake" parts. Did they get inside, I mean physically, the ATM to install their hardware?
So there is Nothing one can do to stop this theft!! I do everything right and still get defrauded!!
#^%&^(*&(*^^&$#$@#$$%(*
#4
Posted 10 March 2010 - 07:19 PM
monica40, on 10 March 2010 - 05:40 PM, said:
Came home and checked my bank account and someone had used my card today to withdraw $6,000.00 pesos (my daily limit of approx. $500 US). I had just checked my account balance last night and did not see any activity.
There are only three machines that I have used in the past three weeks - Bancomer branch in San Antonio - Bancomer machine at Walmart lakeside - Bancomer machine at Costco on Lopez Mateos on Monday, March 1st. Mostly we try to use the Bancomer branch location as we feel it is safer...................?!
My card was used at an ATM machine in Ajijic today (never went there today) it says [Pri ATM #155COMMM5814].
I ALWAYS cover my hand when entering my PIN, I always check the machine to make sure there are no "fake" parts. Did they get inside, I mean physically, the ATM to install their hardware?
So there is Nothing one can do to stop this theft!! I do everything right and still get defrauded!!
#^%&^(*&(*^^&$#$@#$$%(*
The criminals are getting very sophisticated. Here is a list from another forum with a lot of excellent information on what is going on re: ATM and credit card theft. In some cases, software is involved (hacked bank databases), so the skimming devices and small cameras hidden in brochure holders seem primitive by comparison. Some scamming ATM devices use a false keypad that covers the actual keypad, but records your PIN as you enter it.
http://www.utexas.ed...lerts/atm_scam/
Some ways ATMs are attacked
#1. Skimming -- The upswing in skimming at institutions has caught fraud experts' attention. "A higher percentage of criminals are going straight to a bank and installing a PIN pad overlay and card reader," Urban says. "This is where the transaction goes through, and the customer doesn't realize that their ATM card or debit card has been compromised. I've seen a steady increase over the last couple years on this type of fraud."
#2. Ghost ATMs -- There are also the "Ghost ATMs," where the entire ATM card reader is blocked off and customers can't perform a transaction. "The customer swipes their card, enters their PIN, and then the fake ATM says it can't complete the transaction," Urban explains. There were several of these types of ghost ATMs that popped up on the east coast back four years ago. One arrest was made in those cases, he notes.
#3. Ram Raids -- Criminals continue to target ATMs in various ways, with "ram" raids happening more often in the US. Ram raids are perpetrated when criminals physically break out ATMs from the wall at the institution. In Texas, the number of ram raids has spurred institutions to partner with law enforcement, and a task force has been formed to fight the raiders. "The opportunity that some non-hardened criminals see is an exterior ATM that can be pulled out, loaded with thousands of dollars," Urban says. "So in terms of crimes of opportunity, people feeling desperate will attempt this crime."
#4. PIN ID's -- One of the other trends Urban sees happening is where criminals are testing systems to identify PINs. One particular technique is where the criminal captures the magnetic stripe data from a retailer. They then go to an online bank site with a script written on several well known PINs, and run it against the site until they get a match.
#5. Automated PIN Changes -- Another trend Urban sees is criminals go through the financial institution's telephone banking service to change PIN numbers. "They will use the ANI to change the information on the phone they're calling out from to appear like they are calling from the consumer's phone," Urban notes. If they can find the basic information on the card holder, name, card account number, last four digits of the social security number, then they're trying to take that info and go to the call center and change the PIN number over the phone.
"Thus, while more time-consuming, the overhead cost is cut to near nothing other than their own work to deceive the bank call center," Urban says. Then with the changed PIN, the criminals drain the account. "The easier it is for the consumer to change their account, those are the financial institutions that will be targeted," Urban says.
#6. SMS attacks -- "Smishing" is the attack that comes through the Short Message Service (SMS) or text venue, onto a smart phone or a cell phone. Urban has personally seen three examples come through in the last month from institutions that he has no affiliation with, asking him for his account number and pin. Where the criminals are able to get the information from the customer, they then turn and clone the ATM or debit card and use it to withdraw cash.
The bank or credit union, if it is not checking for the CVV value, or the full name or expiration date, and just accepts the card transaction, will be hit with counterfeit cards made from data taken in this type of attack. These "smishing" attacks hit several midwest institutions in 2008.
#7. Malware -- Security researchers say they have found malware code that lets a criminal take control over ATMs. SpiderLabs, the forensics and research arm of TrustWave, found a Trojan family of malware that infected 20 ATMs in Eastern Europe. The researchers warn that the malware may be headed toward US banks and credit unions, as well as other parts of the world. The malware lets criminals take over the ATM to steal data, PINs and cash.
That report from SpiderLabs isn't the only malware found. Sophos researchers in March say they found a Trojan specifically designed to steal information from Diebold ATM users that had infected several ATMs in Russia. SpiderLabs researchers explain the Trojan collects magnetic stripe data and PINs from the Windows XP-based ATM's transaction application's private memory space. Researchers found it came with its own management function that allows the attacker take over the ATM with a custom interface that may controlled by the attacker when they insert a controller card into the ATM card reader.
Both research arms say that they expect the Trojans they discover to evolve and spread, infecting more ATMs. Trustwave recommends that all financial institutions with ATMs perform analysis to identify if this malware or similar malware is present.
__________________
#5
Posted 10 March 2010 - 10:36 PM
conejorapido, on 10 March 2010 - 06:15 PM, said:
The machine I used was at the Preferred Customer Unit in the Plaza on the Libramiento ....it is "secure", so we thought. I have never used my debit card for any other purpose than to withdraw money from the ATM - so beware.
Of course, since the thieves took the money from an ATM, not a point of purchase, our bank will probably not reimburse us for the funds. and of course, the icing on the cake, it happened in Mexico, ah well, they say, you are in Mexico, the land of fraud and theft..........
#6
Posted 10 March 2010 - 10:56 PM
monica40, on 10 March 2010 - 09:36 PM, said:
Shouldn't make any difference because it happened in Mexico. We had our cards hacked twice, once in the U.S. and just recently here in Mexico. Both times withdrawals were made from ATM's. Both times our bank covered the charges.
#7
Posted 11 March 2010 - 12:04 AM
monica40, on 10 March 2010 - 10:36 PM, said:
Of course, since the thieves took the money from an ATM, not a point of purchase, our bank will probably not reimburse us for the funds. and of course, the icing on the cake, it happened in Mexico, ah well, they say, you are in Mexico, the land of fraud and theft..........
THat is the price people have to pay to live in the BEST CLIMATE OF THE WORLD!
#8
Posted 11 March 2010 - 07:22 AM
DC5, on 10 March 2010 - 10:56 PM, said:
Which bank covered your fraudulent ATM withdrawals? Chase tells me they won't cover any fraud using a PIN since they have no way of knowing it was a fraudulent transaction if a PIN is used. What is your bank?
#9
Posted 11 March 2010 - 08:20 AM
monica40, on 10 March 2010 - 10:36 PM, said:
Of course, since the thieves took the money from an ATM, not a point of purchase, our bank will probably not reimburse us for the funds. and of course, the icing on the cake, it happened in Mexico, ah well, they say, you are in Mexico, the land of fraud and theft..........
#10
Posted 11 March 2010 - 09:27 AM
El respeto al derecho ajeno es la paz.
#11
Posted 11 March 2010 - 09:35 AM
Chippy, on 11 March 2010 - 06:22 AM, said:
We have our account with the San Diego County Credit Union. Not a bank exactly. But we have never had a problem getting our money back the 3 times that money was taken from our account,once was when my wife's purse was stolen in the U.S..
#12
Posted 11 March 2010 - 09:38 AM
Now also, I will never use my credit card here.
#14
Posted 11 March 2010 - 09:42 AM
Chippy, on 11 March 2010 - 06:22 AM, said:
Not true- Chase reimbursed my account with $2000 USD funds that were withdrawn from an ATM in Cabo over a 4 day week-end. The last time I used my card was at the free standing machine at the entrance to Plaza Bugambillias. The Chase rep told me they probably used a device that copies your account and pin number. I had to fill out affidavits saying that I nor any family member used the card to make a fraudulent withdrawal during their investigation. All charges were credited back.
#15
Posted 11 March 2010 - 10:02 AM
Jeannie, on 11 March 2010 - 09:38 AM, said:
Now also, I will never use my credit card here.
#16
Posted 11 March 2010 - 01:39 PM
doberwoman, on 11 March 2010 - 12:04 AM, said:
Best Climate??? What has that to do with ATM"S
I googled Best Climate in the World-
Lake Chapala is never mentioned-
checked the first 10 items on google
info in site below was most often mentioned -
Best weather in the world is the Canary Islands- off the coast of Spain and Redwood City Calif. has had the title for over 50 years.
http://www.post-gaze...0/703926-37.stm
#17
Posted 11 March 2010 - 01:55 PM
#18
Posted 15 March 2010 - 01:33 AM
DC5, on 11 March 2010 - 09:35 AM, said:
If US Credit Unions work like the Canadian, you should have no problem getting your money back, just report it fast.
#19
Posted 15 March 2010 - 09:48 AM
FYI, I read on a San Miguel blog that the problem got so bad there that a number of ATMs were shut down. Someone has clearly targeted expats where they live, not just here. This is no local petty theft ring operating, these people are pros.
#20
Posted 15 March 2010 - 10:52 AM
Mainecoons, on 15 March 2010 - 08:48 AM, said:
FYI, I read on a San Miguel blog that the problem got so bad there that a number of ATMs were shut down. Someone has clearly targeted expats where they live, not just here. This is no local petty theft ring operating, these people are pros.
Mainecoons, surely you jest. It's extremely unlikely that expats are the targets of this crime. It's some kind of bizarre inverted racism to believe that this bank card scam is related to expats. Foreigners are not the only people in SMA, at Lake Chapala, or anywhere in Mexico with ATM cards.
The target is the ATM and any debit/credit card that's used to withdraw money from any ATM. The identical ATM theft happened to a Mexican friend of mine in Mexico City; his card was cloned at an ATM in the DF and used within a day to withdraw money from an ATM in Bogotá, Colombia, where most of the actual theft has recently taken place.

Help












