Chapala.com Webboard: Bancomer ATM machine compromised - Chapala.com Webboard

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Bancomer ATM machine compromised

#1 User is offline   monica40 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 74
  • Joined: 14-May 06

Posted 10 March 2010 - 05:40 PM

Went to use my debit card today (US card) at the Bancomer branch in San Antonio and told I was over my limit.

Came home and checked my bank account and someone had used my card today to withdraw $6,000.00 pesos (my daily limit of approx. $500 US). I had just checked my account balance last night and did not see any activity.

There are only three machines that I have used in the past three weeks - Bancomer branch in San Antonio - Bancomer machine at Walmart lakeside - Bancomer machine at Costco on Lopez Mateos on Monday, March 1st. Mostly we try to use the Bancomer branch location as we feel it is safer...................?!

My card was used at an ATM machine in Ajijic today (never went there today) it says [Pri ATM #155COMMM5814].

I ALWAYS cover my hand when entering my PIN, I always check the machine to make sure there are no "fake" parts. Did they get inside, I mean physically, the ATM to install their hardware?

So there is Nothing one can do to stop this theft!! I do everything right and still get defrauded!!

#^%&^(*&(*^^&$#$@#$$%(*
0

#2 User is offline   conejorapido 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 192
  • Joined: 14-March 09

Posted 10 March 2010 - 06:15 PM

View Postmonica40, on 10 March 2010 - 03:40 PM, said:

Went to use my debit card today (US card) at the Bancomer branch in San Antonio and told I was over my limit.

Came home and checked my bank account and someone had used my card today to withdraw $6,000.00 pesos (my daily limit of approx. $500 US). I had just checked my account balance last night and did not see any activity.

There are only three machines that I have used in the past three weeks - Bancomer branch in San Antonio - Bancomer machine at Walmart lakeside - Bancomer machine at Costco on Lopez Mateos on Monday, March 1st. Mostly we try to use the Bancomer branch location as we feel it is safer...................?!

My card was used at an ATM machine in Ajijic today (never went there today) it says [Pri ATM #155COMMM5814].

I ALWAYS cover my hand when entering my PIN, I always check the machine to make sure there are no "fake" parts. Did they get inside, I mean physically, the ATM to install their hardware?

So there is Nothing one can do to stop this theft!! I do everything right and still get defrauded!!

#^%&^(*&(*^^&$#$@#$$%(*

For clarification, is the San Antonio machine to which you are referring the one at the Preferred Customer Unit on the Libramiento or is it a machine in the village? Thanks.
0

#3 User is offline   cedros 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 788
  • Joined: 28-February 09
  • Gender:Male
  • Location:San Juan Cosala
  • Interests:Genealogy, plants, birds

Posted 10 March 2010 - 06:56 PM

I think if you use a bank machine at a BANK you are much less likely to have a problem. I never use one that is in a grocery store or stand alone. I think the bank ones are much less likely to be fiddled. Where is the Bancomer branch in San Antonio-is it a bank or just an ATM?

View Postmonica40, on 10 March 2010 - 05:40 PM, said:

Went to use my debit card today (US card) at the Bancomer branch in San Antonio and told I was over my limit.

Came home and checked my bank account and someone had used my card today to withdraw $6,000.00 pesos (my daily limit of approx. $500 US). I had just checked my account balance last night and did not see any activity.

There are only three machines that I have used in the past three weeks - Bancomer branch in San Antonio - Bancomer machine at Walmart lakeside - Bancomer machine at Costco on Lopez Mateos on Monday, March 1st. Mostly we try to use the Bancomer branch location as we feel it is safer...................?!

My card was used at an ATM machine in Ajijic today (never went there today) it says [Pri ATM #155COMMM5814].

I ALWAYS cover my hand when entering my PIN, I always check the machine to make sure there are no "fake" parts. Did they get inside, I mean physically, the ATM to install their hardware?

So there is Nothing one can do to stop this theft!! I do everything right and still get defrauded!!

#^%&^(*&(*^^&$#$@#$$%(*

0

#4 User is offline   Chippy 

  • Member
  • PipPip
  • Group: Members
  • Posts: 219
  • Joined: 12-May 06
  • Gender:Male

Posted 10 March 2010 - 07:19 PM

View Postmonica40, on 10 March 2010 - 05:40 PM, said:

Went to use my debit card today (US card) at the Bancomer branch in San Antonio and told I was over my limit.

Came home and checked my bank account and someone had used my card today to withdraw $6,000.00 pesos (my daily limit of approx. $500 US). I had just checked my account balance last night and did not see any activity.

There are only three machines that I have used in the past three weeks - Bancomer branch in San Antonio - Bancomer machine at Walmart lakeside - Bancomer machine at Costco on Lopez Mateos on Monday, March 1st. Mostly we try to use the Bancomer branch location as we feel it is safer...................?!

My card was used at an ATM machine in Ajijic today (never went there today) it says [Pri ATM #155COMMM5814].

I ALWAYS cover my hand when entering my PIN, I always check the machine to make sure there are no "fake" parts. Did they get inside, I mean physically, the ATM to install their hardware?

So there is Nothing one can do to stop this theft!! I do everything right and still get defrauded!!

#^%&^(*&(*^^&$#$@#$$%(*




The criminals are getting very sophisticated. Here is a list from another forum with a lot of excellent information on what is going on re: ATM and credit card theft. In some cases, software is involved (hacked bank databases), so the skimming devices and small cameras hidden in brochure holders seem primitive by comparison. Some scamming ATM devices use a false keypad that covers the actual keypad, but records your PIN as you enter it.

http://www.utexas.ed...lerts/atm_scam/

Some ways ATMs are attacked
#1. Skimming -- The upswing in skimming at institutions has caught fraud experts' attention. "A higher percentage of criminals are going straight to a bank and installing a PIN pad overlay and card reader," Urban says. "This is where the transaction goes through, and the customer doesn't realize that their ATM card or debit card has been compromised. I've seen a steady increase over the last couple years on this type of fraud."

#2. Ghost ATMs -- There are also the "Ghost ATMs," where the entire ATM card reader is blocked off and customers can't perform a transaction. "The customer swipes their card, enters their PIN, and then the fake ATM says it can't complete the transaction," Urban explains. There were several of these types of ghost ATMs that popped up on the east coast back four years ago. One arrest was made in those cases, he notes.

#3. Ram Raids -- Criminals continue to target ATMs in various ways, with "ram" raids happening more often in the US. Ram raids are perpetrated when criminals physically break out ATMs from the wall at the institution. In Texas, the number of ram raids has spurred institutions to partner with law enforcement, and a task force has been formed to fight the raiders. "The opportunity that some non-hardened criminals see is an exterior ATM that can be pulled out, loaded with thousands of dollars," Urban says. "So in terms of crimes of opportunity, people feeling desperate will attempt this crime."

#4. PIN ID's -- One of the other trends Urban sees happening is where criminals are testing systems to identify PINs. One particular technique is where the criminal captures the magnetic stripe data from a retailer. They then go to an online bank site with a script written on several well known PINs, and run it against the site until they get a match.

#5. Automated PIN Changes -- Another trend Urban sees is criminals go through the financial institution's telephone banking service to change PIN numbers. "They will use the ANI to change the information on the phone they're calling out from to appear like they are calling from the consumer's phone," Urban notes. If they can find the basic information on the card holder, name, card account number, last four digits of the social security number, then they're trying to take that info and go to the call center and change the PIN number over the phone.

"Thus, while more time-consuming, the overhead cost is cut to near nothing other than their own work to deceive the bank call center," Urban says. Then with the changed PIN, the criminals drain the account. "The easier it is for the consumer to change their account, those are the financial institutions that will be targeted," Urban says.

#6. SMS attacks -- "Smishing" is the attack that comes through the Short Message Service (SMS) or text venue, onto a smart phone or a cell phone. Urban has personally seen three examples come through in the last month from institutions that he has no affiliation with, asking him for his account number and pin. Where the criminals are able to get the information from the customer, they then turn and clone the ATM or debit card and use it to withdraw cash.
The bank or credit union, if it is not checking for the CVV value, or the full name or expiration date, and just accepts the card transaction, will be hit with counterfeit cards made from data taken in this type of attack. These "smishing" attacks hit several midwest institutions in 2008.

#7. Malware -- Security researchers say they have found malware code that lets a criminal take control over ATMs. SpiderLabs, the forensics and research arm of TrustWave, found a Trojan family of malware that infected 20 ATMs in Eastern Europe. The researchers warn that the malware may be headed toward US banks and credit unions, as well as other parts of the world. The malware lets criminals take over the ATM to steal data, PINs and cash.

That report from SpiderLabs isn't the only malware found. Sophos researchers in March say they found a Trojan specifically designed to steal information from Diebold ATM users that had infected several ATMs in Russia. SpiderLabs researchers explain the Trojan collects magnetic stripe data and PINs from the Windows XP-based ATM's transaction application's private memory space. Researchers found it came with its own management function that allows the attacker take over the ATM with a custom interface that may controlled by the attacker when they insert a controller card into the ATM card reader.

Both research arms say that they expect the Trojans they discover to evolve and spread, infecting more ATMs. Trustwave recommends that all financial institutions with ATMs perform analysis to identify if this malware or similar malware is present.
__________________
0

#5 User is offline   monica40 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 74
  • Joined: 14-May 06

Posted 10 March 2010 - 10:36 PM

View Postconejorapido, on 10 March 2010 - 06:15 PM, said:

For clarification, is the San Antonio machine to which you are referring the one at the Preferred Customer Unit on the Libramiento or is it a machine in the village? Thanks.



The machine I used was at the Preferred Customer Unit in the Plaza on the Libramiento ....it is "secure", so we thought. I have never used my debit card for any other purpose than to withdraw money from the ATM - so beware.

Of course, since the thieves took the money from an ATM, not a point of purchase, our bank will probably not reimburse us for the funds. and of course, the icing on the cake, it happened in Mexico, ah well, they say, you are in Mexico, the land of fraud and theft..........
0

#6 User is offline   DC5 

  • Member
  • PipPip
  • Group: Members
  • Posts: 220
  • Joined: 22-December 08
  • Location:Buena Vista

Posted 10 March 2010 - 10:56 PM

View Postmonica40, on 10 March 2010 - 09:36 PM, said:

Of course, since the thieves took the money from an ATM, not a point of purchase, our bank will probably not reimburse us for the funds. and of course, the icing on the cake, it happened in Mexico, ah well, they say, you are in Mexico, the land of fraud and theft..........


Shouldn't make any difference because it happened in Mexico. We had our cards hacked twice, once in the U.S. and just recently here in Mexico. Both times withdrawals were made from ATM's. Both times our bank covered the charges.
0

#7 User is offline   doberwoman 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 133
  • Joined: 22-September 08

Posted 11 March 2010 - 12:04 AM

View Postmonica40, on 10 March 2010 - 10:36 PM, said:

The machine I used was at the Preferred Customer Unit in the Plaza on the Libramiento ....it is "secure", so we thought. I have never used my debit card for any other purpose than to withdraw money from the ATM - so beware.

Of course, since the thieves took the money from an ATM, not a point of purchase, our bank will probably not reimburse us for the funds. and of course, the icing on the cake, it happened in Mexico, ah well, they say, you are in Mexico, the land of fraud and theft..........



THat is the price people have to pay to live in the BEST CLIMATE OF THE WORLD!
0

#8 User is offline   Chippy 

  • Member
  • PipPip
  • Group: Members
  • Posts: 219
  • Joined: 12-May 06
  • Gender:Male

Posted 11 March 2010 - 07:22 AM

View PostDC5, on 10 March 2010 - 10:56 PM, said:

Shouldn't make any difference because it happened in Mexico. We had our cards hacked twice, once in the U.S. and just recently here in Mexico. Both times withdrawals were made from ATM's. Both times our bank covered the charges.

Which bank covered your fraudulent ATM withdrawals? Chase tells me they won't cover any fraud using a PIN since they have no way of knowing it was a fraudulent transaction if a PIN is used. What is your bank?
0

#9 User is offline   cedros 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 788
  • Joined: 28-February 09
  • Gender:Male
  • Location:San Juan Cosala
  • Interests:Genealogy, plants, birds

Posted 11 March 2010 - 08:20 AM

Is "the preferred customer unit" a bank or just an ATM? If it is just an ATM how do you know it is secure?

View Postmonica40, on 10 March 2010 - 10:36 PM, said:

The machine I used was at the Preferred Customer Unit in the Plaza on the Libramiento ....it is "secure", so we thought. I have never used my debit card for any other purpose than to withdraw money from the ATM - so beware.

Of course, since the thieves took the money from an ATM, not a point of purchase, our bank will probably not reimburse us for the funds. and of course, the icing on the cake, it happened in Mexico, ah well, they say, you are in Mexico, the land of fraud and theft..........

0

#10 User is offline   Intercasa 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 5,009
  • Joined: 12-April 06
  • Gender:Male
  • Location:California and Mexico (Santa Barbara and Chapala).
  • Interests:Student of law, interning with various attorneys to learn styles and info and also Mexican mortgage broker. If you'd like to call me 33 11 20 66 62 cell.

Posted 11 March 2010 - 09:27 AM

You can make a complaint at the government office that protects users of banking services in Guadalajara (CONDUSEF) to try and get your money back. Banks will almost always deny your request and hope you go away. I've seen people get their money back but it does take some diligence.
I make good things happen. 765 7553, US 805 683 4848.
El respeto al derecho ajeno es la paz.
0

#11 User is offline   DC5 

  • Member
  • PipPip
  • Group: Members
  • Posts: 220
  • Joined: 22-December 08
  • Location:Buena Vista

Posted 11 March 2010 - 09:35 AM

View PostChippy, on 11 March 2010 - 06:22 AM, said:

Which bank covered your fraudulent ATM withdrawals? Chase tells me they won't cover any fraud using a PIN since they have no way of knowing it was a fraudulent transaction if a PIN is used. What is your bank?


We have our account with the San Diego County Credit Union. Not a bank exactly. But we have never had a problem getting our money back the 3 times that money was taken from our account,once was when my wife's purse was stolen in the U.S..
0

#12 User is offline   Jeannie 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 1,770
  • Joined: 11-April 06

Posted 11 March 2010 - 09:38 AM

After hearing of these incidences a few months back we now get our money at Lloyds. May take a bit longer than a machine and not as convenient, but much safer and I don't have to worry about getting my card cloned or have to worry about fake 500 pesos notes.

Now also, I will never use my credit card here.
0

#13 User is offline   Alpha1 

  • Member
  • PipPip
  • Group: Members
  • Posts: 335
  • Joined: 27-July 07

Posted 11 March 2010 - 09:40 AM

View Postdoberwoman, on 11 March 2010 - 12:04 AM, said:

THat is the price people have to pay to live in the BEST CLIMATE OF THE WORLD!

It may be that the price is TOO HIGH!
0

#14 User is offline   maw7815 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 446
  • Joined: 13-April 06
  • Gender:Female
  • Location:Ajijic

Posted 11 March 2010 - 09:42 AM

View PostChippy, on 11 March 2010 - 06:22 AM, said:

Which bank covered your fraudulent ATM withdrawals? Chase tells me they won't cover any fraud using a PIN since they have no way of knowing it was a fraudulent transaction if a PIN is used. What is your bank?

Not true- Chase reimbursed my account with $2000 USD funds that were withdrawn from an ATM in Cabo over a 4 day week-end. The last time I used my card was at the free standing machine at the entrance to Plaza Bugambillias. The Chase rep told me they probably used a device that copies your account and pin number. I had to fill out affidavits saying that I nor any family member used the card to make a fraudulent withdrawal during their investigation. All charges were credited back.
0

#15 User is offline   cedros 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 788
  • Joined: 28-February 09
  • Gender:Male
  • Location:San Juan Cosala
  • Interests:Genealogy, plants, birds

Posted 11 March 2010 - 10:02 AM

You could get fake 500 pesos bills from Lloyd.

View PostJeannie, on 11 March 2010 - 09:38 AM, said:

After hearing of these incidences a few months back we now get our money at Lloyds. May take a bit longer than a machine and not as convenient, but much safer and I don't have to worry about getting my card cloned or have to worry about fake 500 pesos notes.

Now also, I will never use my credit card here.

0

#16 User is offline   privado 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 980
  • Joined: 14-May 07

Posted 11 March 2010 - 01:39 PM

View Postdoberwoman, on 11 March 2010 - 12:04 AM, said:

THat is the price people have to pay to live in the BEST CLIMATE OF THE WORLD!



Best Climate??? What has that to do with ATM"S
I googled Best Climate in the World-

Lake Chapala is never mentioned-
checked the first 10 items on google
info in site below was most often mentioned -
Best weather in the world is the Canary Islands- off the coast of Spain and Redwood City Calif. has had the title for over 50 years.


http://www.post-gaze...0/703926-37.stm
0

#17 User is offline   Lilli 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 52
  • Joined: 21-January 10

Posted 11 March 2010 - 01:55 PM

I think what was referred to was the National Geographic claim that Lakeside was the 2nd best climate in the world.
0

#18 User is offline   joco69 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 122
  • Joined: 25-February 07
  • Gender:Male
  • Location:Chula Vista & Canada
  • Interests:Anything related to life at Lakeshore

Posted 15 March 2010 - 01:33 AM

View PostDC5, on 11 March 2010 - 09:35 AM, said:

We have our account with the San Diego County Credit Union. Not a bank exactly. But we have never had a problem getting our money back the 3 times that money was taken from our account,once was when my wife's purse was stolen in the U.S..

If US Credit Unions work like the Canadian, you should have no problem getting your money back, just report it fast. :014:
0

#19 User is offline   Mainecoons 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 3,795
  • Joined: 26-January 07
  • Location:Ajijic, Mexico

Posted 15 March 2010 - 09:48 AM

What's the status of this ATM? Is it secure now? Anyone used it lately?

FYI, I read on a San Miguel blog that the problem got so bad there that a number of ATMs were shut down. Someone has clearly targeted expats where they live, not just here. This is no local petty theft ring operating, these people are pros.
0

#20 User is offline   More Liana 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 828
  • Joined: 20-May 08
  • Gender:Female
  • Location:Morelia, Michoacán, Mexico
  • Interests:Mexico
    Cultures
    Gastronomy
    Language

Posted 15 March 2010 - 10:52 AM

View PostMainecoons, on 15 March 2010 - 08:48 AM, said:

What's the status of this ATM? Is it secure now? Anyone used it lately?

FYI, I read on a San Miguel blog that the problem got so bad there that a number of ATMs were shut down. Someone has clearly targeted expats where they live, not just here. This is no local petty theft ring operating, these people are pros.

Mainecoons, surely you jest. It's extremely unlikely that expats are the targets of this crime. It's some kind of bizarre inverted racism to believe that this bank card scam is related to expats. Foreigners are not the only people in SMA, at Lake Chapala, or anywhere in Mexico with ATM cards.

The target is the ATM and any debit/credit card that's used to withdraw money from any ATM. The identical ATM theft happened to a Mexican friend of mine in Mexico City; his card was cloned at an ATM in the DF and used within a day to withdraw money from an ATM in Bogotá, Colombia, where most of the actual theft has recently taken place.
0

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users