1. CNP, Malware & Physical Attacks; The Future of Fraud in an EMV World

2. How Will EMV Affect Fraud In the U.S.?

3. Fraud After EMV  Continued Skimming of Chip card for mag stripe data Chip Card will still contain Mag stripe data for foreseeable future  Non Chip Location Cash-outs & International Cash-outs of stolen Mag Stripe Data Mag stripe data will have to be used at non chip location  ATM Shimming Device Designed to Capture Chip Data and then is converted to mag stripe data  The GOOD NEWS: Eventual & Significant Decrease in card present fraud (5+yrs)

4. The EMV “Ripple Effect” on Fraud  Significant Increases in Card Not Present Fraud Online & telephonic purchases No more pictures of our suspects!!  Significant Increases in ID Theft to Conduct Account Takeover Fraud Network Intrusions to obtain PII and password information  Increase in Physical Attacks on ATMs Card Trapping / Cash Trapping / Gas Attacks & Malware Attacks  Revert to Traditional Financial Institutional Fraud  Counterfeit checks/Account Takeover/Wire Fraud/Cracking Cards/Loan Fraud/Synthetic ID Fraud

5. Card Crackin’ / Crackin’ Cards  Got it’s name from Chicago area.  Activity Started by “Gangster Disciples”  Also known as “Drops” or “Doing Drops” or “Dropping Paper”.  Organization recruits younger individuals and college aged students with good banking credit new debit accounts at financial institutions.  Accountholder turns over debit card and PIN number to member of organization.  Other individuals deposit counterfeit/stolen checks into the account via the ATM.

6. Instagram Video of Davey Hines

7. Adina Been CashinOut (CT Investigation)

9. How Much as EMV Affected Skimming (ATM Attack Statistics - EAST)  ATM Skimming makes up 36% of all ATM Fraud but accounts for 90% of all ATM fraud loss.  Card Trapping – 3.2 Million in losses  Logical (Malware) attacks – 11.7 Million in losses  Gas Attacks – 21 Million in losses  Skimming – 2.4 Billion in losses

10. State of ATM Attacks Current (U.S.)   1 st Generation Skimmers (Digital Skimming)   2 nd Generation Skimming (Analogue)   Cash Forking/Trapping   Shoulder Surfing/Chaining Attacks   POS Skimming Current (Europe)   2 nd Generation (Analogue Skimming   3 rd Generation (Stereo Skimming)   Virtual Skimming   Malware Attacks   Cash Forking/Trapping   Gas Attacks   EMV Pos Skimming   ATM Shimming

11. Current U.S. Trends in Skimming 2015 - 2016

12. Card Reader Tapping/Eavesdropping

13. Insert (Throat) Skimmers Photos provided by NCR

14. Deep Insert Skimmers Captures Mag-Stripe No Storage on Device – wireless Transmitter

15. Deployment of POS Skimming Evolving Fraud Trends In the U.S.

18. Walmart Skimmers

19. Ingenico i3070 tampered and legitimate device EMV POS Skimming (For Mag Stripe Data) | 57

20. Compromised Chip Terminal

21. Inserted Shimming Device

22. ATM Cash/Card Trapping/Forking

23. Malware Attacks on ATMs  Malware takes control of the ATM PC to:  Control communication between PC and cash dispenser.  Or captured stored card data contained on drive of ATM PC

24. Jackpotting

25. Malware Circuit Board Injection Attack Macau (Chinese Territory)  Malware Injection into ATM to capture/store card data and PIN

26. Criminals will not surrender….They will just adapt to the circumstances!

27. Detective Mark Solomon Greenwich Police Department CT Financial Crimes Task Force ATM Skimming Intelligence Network Coordinator IAFCI CT Chapter President Mark.solomon@greenwichct.org (203) 496-0154 (cell) Questions?????