ATM Fraud And Me
On Saturday night I was doing the usual accounts and bill paying activity when I called up my checking account online. Sitting at the top was an ATM withdrawal for $502 from a Bank Of America ATM in Auburn.
Chills start to creep down my spine.
I continue looking.
There’s another from Renton; another from Bothell; another from Seattle; etc… In total there were seven withdrawals, all from Bank Of America and all for $502.
WTF!
I called the card issuer and had the card cancelled. Then I started my research.
Since forever I’ve preferred using debit cards over credit cards as I don’t have a bill to forget to pay and incur credit charges. I also thought that it’s more secure. Anyone can capture my credit card data and fake my signature. A PIN based transaction has to be more secure, right? It’s worked fine for me up until now.
The key piece I’ve missed is that, of course, VISA will protect you against fraudulent use (OK, so you pay the first $50). Well, in the case of fraudulent debit/ATM activity the bank is under no obligation to refund the charges. I’m assuming that most would though, as otherwise you’d have a bunch of very pissed off customers. Handily, my bank is one of the good ones.
So, how did they get my PIN?
I’m guessing that one of the few places that I actually perform PIN based transactions has screwed me.
I use it at maybe three places. I local convenience store and local supermarkets. One of them had to have a fake PIN pad that was capturing data.
Maybe some idiotic system at some company was capturing my PIN in violation of network agreements and then had a security screwup.
I may never know.
And why Bank Of America? I’m not with that bank - hence the $502. They obviously requested $500 and incurred a $2 transaction fee. Is Bank Of America an easy mark for ATM fraud?
And why didn’t the super annoying AI speak up? You know, the AI that runs on all transactions to spot inconsistent activity and stops you from purchasing that last minute gift for your wife’s birthday?
I have never taken anywhere close to $500 out of an ATM, let alone once a day for almost a week!
Anyhow, what I do want is for the assholes that nicked my hard earned moolah to be caught. In my shiny rose-tinted world, as soon as I reported the fraudulent activity, the ATM network would spring into action and when the aforementioned perps tried to use it again (probably yesterday as they’d be using it once a day since last week), the ATM would fire it’s camera; ask them questions slowly; call plod and have the perps arrested by the time the card got spat back out.
Somehow I doubt it though.
On Sunday morning I visited the local plod to report the crime and get a case number for my bank, who I visited this morning. The nice policeman said that the ATM fraud rate has recently skyrocketed in this area.
Handily, the bank took the details and printed me a new ATM card with a new number there on the spot and said that the charges would be refunded within two or three days. When I asked them why the super annoying AI didn’t catch this obviously bogus activity I was informed that it doesn’t run for PIN based transactions! It only runs for signature based transactions!
Wow.
So, the key takeaway is to avoid using your PIN at all costs - go the VISA route and sign for your transaction, that way the super annoying AI will run and maybe save your ass.
Update: Props to my bank First Technology. They credited my account with the full amount of the fraud the day after I reported it.
0 TrackBacks
Listed below are links to blogs that reference this entry: ATM Fraud And Me.
TrackBack URL for this entry: http://www.steve-lacey.com/cgi-bin/mt/mt-bar.cgi/965



Beware on the signature debit side of the house . . . your charge back rights and fraud recovery times are much different on signature debit transactions than what you may have experienced with a debit with pin or credit card transaction.
As for ATM transactions not being tracked . . . you may want to look for a new bank . . . many institutions outsource their card processing (small community banks are likely culprits) and often don't run their own fraud detection software, so are are held hostage to what their vendors provide (or in this case, don't provide); It sounds like your bank may fall into this scenario. Most larger institutions actually track all card transactions, regardless of the origin or type.
Well...that *&^%$#@ blows. Bastards. For that reason, among others, I have completely quit using my PIN ATM card for some time now and only use my Visa. Even though, some of the larger banks still carry coverage on their ATM cards. See: http://www.bankofamerica.com/deposits/checksave/index.cfm?template=checkcards_tsp .
Anyway....hope they catch the MFs.
Man, you just never know...
Just found your site in a Google search (ha). I hope my bank ends up being as good as yours, because I just found a fraudulent $482 withdrawal, also from a Bank of America ATM, in Los Angeles (20-30 miles from where I live, I'd guess). I'm lucky, at least, to have caught it on the first transaction, I think, but the bank rep on the phone seemed reticent to shut my card down, and I had to ask twice for it to happen. He even asked me whether I wanted to change my PIN or not. Duh! These guys are practically inviting fraud.
Ugggghhhh
I bank at a WAMU in Las Vegas, Nevada. Went to the local convenience store to purchase a cup of coffee and they told me that my card was declined...YHARRRR! After getting to work, without my coffee, I logged into my account and noticed two atm withdrawals totaling 1004.50...all while I slept. One in the evening and another just after midnight. I went to the police after calling my bank and they all but told me that I did it myself. They said, "This is just ridiculous! You MUST have given somebody your card and PIN". Oh sure, I'm ALWAYS giving out my card and PIN...EVERYDAY!!!! WAMU is the BOMB! They will be crediting my account in 5 business days. I hope these scam artists burn in HELL! Merchants can store your PIN numbers when you make a simple purchase and crafty hackers can recreate a white blank card with all of your nifty information!
I Bank with wamu here in Las Vegas and I just discovered today that my account was charged for 302.00 than 202.00 the other evening while I was at home on the couch.
I sure hope Wamu does the right thing for me as well.
I made the above post and just would like to say WAMU came through and reimbursed me for the charges.
I have been doing quite a bit of reading and I will no longer be using my pin number at any merchant.
Well - I read up on these debit card ATM transactions after I found 3 max withdrawals on my bank statement. In my case there is a lot of mystery.
I never use my debit card except for ATM transactions at my own bank, WAMU, and only if the ATMs are on the inside of the bank.
I have never used my debit card at a retailer or online.
So - the question is - how did they get my information, including my PIN?
The only answer that comes to my mind is a 'dirty' employee.
I am very compelled by your story. I am in a very similar situation except the police came back and want to point the finger at me since there is no CCTV on the ATM that was used. What did the police and the bank say or do in your situation? Do you think that you were a victom of "phantom withdrawls"? I am look forward to hearing from you! Please feel free to contact me at the listed e-mail as well as latocha.duckworth@elmendorf.af.mil
Latocha
I am glad to hear you all got help from your bank. My husband and I run a business here in Indiana and was a victim of the same ATM fraud. However my bank is not as nice and is why they are no longer our bank. Over a period of two months someone took out almost 2000.00 in ATM transactions at foreign atms in my Neighborhood! I rarely used an atm and we only use our pin at one or two places. If I was ever in need of an atm I would find one of my banks ATM's and use it. All of these fraud charges were at atms that were within blocks of my bank. Not to mention they would happen in multiples on the same day. When I finally had someone on the phone at the bank and explained to them what was going on they didn't really seem to concerned with the theft but was more concerned on trying to get me to trip up and say that I gave out my card or pin number. Of course I went to the bank and turned over my card (watched them shred it) and ordered a new one and filled out he afidavits for the charges. Even though I had relenqueshed my card they never captured it and it was still usable unknown to me. After two weeks with no new card, I called to ask why and was told it was never cancelled or reissued. I immediately had customer service cancel and reissue me another. But what I thought was odd was even though the card was still active the charges stopped as soon as the card was turned over to the bank. My husbands card was not used in the fraud and had no threats so it was still active so we had access to our account, until they froze it for deposits only. But not until after racking up over 3200.00 in fees from them for overdraft and returned items fees due to the withdraws from the ATMs. So now we have no way to get any money even if we deposited money it the account, when our credit cards were process for our customers then the money would go into that account only to be eaten by fees. My account stayed this way for three and half weeks. We in the mean time got a new bank and started the process to transfer any necessary transactions to the new bank. During this time our landlord was getting upset since his rent checks were returned for two months and now it was going into the third month with no rent and no real proof of any thing being done to rectify this. I was told by my bank to do "A...B....C" and my money would be refuned to me for the fraudulent charges by the ATM's, never once was there ever discussion of returning the 3200.00 in fees.
After feeling like a circus clown, and jumping through hoops, they denied me because they claim that my pin was used and noone can use an atm with out having my pin or my card so I had to give it to someone. They neglected to hear or see in thier own banking records that the card in question was being used at the same time at two ends of the state that were 30-45 minutes apart from each other. All they could say was that I kept using my card in between transactions at the ATM. OF COURSE I DID, I didn't know that they were using the atm with my card in another city in the same state. When I explained that I could not physically be in two places at once and be using my card at a point of sale store and signing my name at the same time using it at an atm 25 miles away they just said they understood my frustration but had made their decision and would not change it, but offered to look into it again??? For what, if the answer is no then what was the purpose. I got the police report, I got documentation from the branch and the local vendors that proved my wareabouts, what else do I have to do? I just think it is odd that that right after I relinquish my card it stops and they make me do all sorts of things to prove my innocense like I was a criminal and then still deny me my protection they claim to offer. It makes no sense to do this to myself because it almost cost me my home, business and everything else I own. Why would I do this to myself? I am letting everyone in the Indiana, Ohio, Illinois, and Kentucky are not to use CHARTER ONE banks. I did find out that their parent financial institute is the Royal Bank of Sweden. They are the ones who funds Citizens banks and mortgage companies. I think this company is going under and is trying to save their %#@ buy stealing their customers money and then refusing to refund it. Why else would they know not to use their own bank ATM's and why else would they refuse to help their customers out when there is a fraud issue? They are the real frauds. They are selling our information to people for profit and in the process they are giving them access to our accounts.
Beware!!! Don't use ATMS unless it is at your own bank where they can pull video futage and don't use your pin anywhere. Run it as a credit card and sign for it!
Broke in Indiana!
I feel for you Christy. I can't believe your bank responded to you that way. I too was a victim of Atm Fraud. Last October an atm withdrawl was made using my card for $502. Since I never make cash withdrawls for that much I knew it was fraudulent. It was a real hassle calling and following up with the claim with Wamu but they did provision my account with the $502 after over a week went by and finally sent me a letter stating that it was fraudulent and I could keep money they put in the account. So I could finally sleep again.
Then, I checked my account today (late January) and three fraudulent Atm withdrawls for $500, $300, and $500 appeared. Apparently, this time the perp used my wife's card! I should have had them both cancelled when it happened the first time. But now I'm really nervous. If there's some high-tech skimming mechanism set up at some of the local businesses we use, how will we know it isn't still there?
I guess we will resolve to only use our debit card as a credit card so we don't have to enter our pin. Also, Wamu now has email alerts so we set up alerts for any debits of $300 or over.
I spoke with a woman at Wamu's claims dept and asked if they try to get the pics from the atm camera's and aprehend the criminals. She made it sound like they do look at the photos but don't take any action. Frusterating! Does Wamu just eat that money? I guess it's small change for them.
I too got the ATM robbery. Card numbers were taked from a gas station in Woodinville WA. Hint it is a station that does not take credit cards and charges you $ .45 to make a transaction and near some railroad tracks. And the card was swiped inside. US bank paid me all the funds back, $2,125.
I'm researching ATM scam artist and came across this blog. Thanks for sharing your stories everyone. I recently had someone steal $400 cash out of my acct. But here's the thing, I rarely take cash out but I just got a little check and thought I'd get $100. I took it out if a BofA ATM (where I bank) and the next day I check my act online and see that $400 was taken out right after the $100 I took out at the same place. It was at Penn Plaza in NYC and the ATM area had quite a few people around. I took my cash and my card and apparently my ATM session wasn't completed... this is what I'm concluding. Fortunately I didn't have a lot in the acct to begin with but so far BofA have temporarily credited me the $400 and have asked me to sign an affidavit. They shut down both bank cards I had and I received new ones Fed Ex'ed 2 days later. Once they receive and review my affidavit I maybe given the $400 for good. I'm assuming they could pull up the video tape from that day and find the person who did it. It had to have been someone standing close to me. But this is a first for me and it blows. After reading everyone else situations I guess I got off lucky but I have learned a valuable lesson in this as well as from everyone elses stories. Thanks for sharing.
I had same story of being robbed by someone, I have bank of america acnt and yesterday noticed 3 transactions of 203, 503.50 and 503 again.
Never in my dreams I could withdraw this much in 10 hours span, all at same branch around 21 miles away from my home. for the entire month I did not withdraw any money, except used my atm card at bank of america atm for depositing money/checks.
I have reported this matter to police and bank and really hope I get my money back.
I was scammed of well over $ 4,300 in 8 different transactions just a few seconds apart. I bank with Citibank and came to find out on the morning of January 2 when I went to withdraw some money from an ATM in Jersey. The last place I used my debit card was at Penn Station New Jersey Transit. I see GothamGirl mentioned Penn Plaza is there some sort of a criminal ring compromising the machines there?
The transactions were from SEA.TOURS-SOUTHTRAVEL. SHARJAH which is in Dubai. I requested cancellation of the card, issuance of a new one and filed a dispute immediately with Citibank and they are investigating, apparently it could take two weeks for a full refund to be given, meanwhile I am frustrated and I hope they will come through.
Apparently there are some security compromises that happenned at Citigroup last year that compromised debit cards and PIN's. I was not even notified to change my PIN. Suprisingly enough, my card has a daily limit of $ 500 and I wonder how did the scammers manage to take over 4,300 in a matter of minutes!
I really hope Citibank will come through as I am a self sponsoring student who work during the day and go to school at night and I saved this money diligently in order to pay my tuition, now I cannot even register for enough classes as I wanted due to lack of funds.
I too was a recent victim of pin-based ATM fraud. I bank at Wells Fargo and found out I was a victim when I went to purchase a $100 printer and (surprise) my card would not process. I immediately called WF, who informed me that there was a fraud alert on my account (interesting that its MY money and MY account, and they alerted who??? Not me - I had to call them!). I found out someone used my card at a Wal-Mart for $998.86 in Carson City, NV (I live in Vegas and have never been to CC or Reno). I filed a claim with WF and in about a week, they refunded my money. But the crook also was able to check my balance from an ATM, attempted to W/D $300 cash, but the ATM wouldn't give it to the crook, and so they then went on a shopping spree at Wal-Mart. I went to the police station to file a report on 1/22(another 2 hours out of my day I will never get back)and have called Investigator Kaimi with LV Metro twice this week, but can't get this investigator to take my call or return my call. The kicker is when I was in the police station reporting this, a woman who was also filing a report for the same type of crime overheard my conversation and approached me. We compared notes. She was victimized the same day, in Carson City, NV. We probably live close to each other because we were at the same police station. I've told the bank and the police this. COMMON SENSE would lead a REASONABLE PERSON to conclude that it is more likely than not that we were victimized at the same ATM/store (wherever we used our ATM card). It is also COMMON SENSE to think if you got a hold of each of our bank statements, you might find one or two common stores or ATM machines we both used which would be a good place to start their investigation. However, NO ONE SEEMS TO CARE! And as long as the police don't do much and the banks don't seem to care, what is to stop the crooks from continuing to do this seemingly easy crime.
did anyone get the chance to see the photos taken at the atm during their investigation? or did the banks just say that and never did anything? i'd appreciate any help!
I do my banking with Charter One in Chicago; just last night when I was sleeping at 11:37pm there were (2) ATM withdrawl transactions of $802 mysteriously withdrawn from my account from an ATM machine in Indianapolis, IN at a M&I Bank. I am totally disturbed; the only pin transactions I do is at the ATM machine. just went to my bank; they told me I have to come back tomorrow just because the electronic withdrawls have not completely gone through, to fill out an affidavit of fraud. The rep did reassure me that I will be refunded this money from 7-10 business days.wtf!!I need my money now, it's mine!I do believe this is a banking scam!
broke in chicago
SEA.TOURS-SOUTH TRAVEL. SHARJA Strikes again!!!
I live in dubai and have been scammed for $340. Its my now cancelled UK credit card that it was taken from and I have no idea how Citybank are involved, although I have heard rumours that they are dodgey, and unsurprisingly do not take credit fraud very seriously.