New modus operandi by fraudsters to withdraw money from ATMs

  • The central government has said the MiTM attacks have been increasing under which messages sent by 'ATM Switch' to 'ATM Host' are altered by attackers to withdraw cash fraudulently

Achinta Borah (with inputs from PTI)
First Published18 Apr 2021
Bankers and ATM providers say if the issue is not addressed the point to withdraw cash will get reduced. Photo: Mint
Bankers and ATM providers say if the issue is not addressed the point to withdraw cash will get reduced. Photo: Mint

In view of increasing incidents of Man in the Middle (MiTM) attacks on ATMs, all banks have been asked to enhance their safety norms for ATMs through end-to-end encryption in the network, officials said.

In a recent communication to all banks, the central government has said the MiTM attacks have been increasing under which messages sent by 'ATM Switch' to 'ATM Host' are altered by attackers to withdraw cash fraudulently.

Investigations by security agencies have found that cyber fraud gangs have started adopting a new modus operandi to withdraw money from ATMs, a security official aware of such incidents said.

According to the investigators, the fraudsters first tamper with the network (LAN) cable of the ATM. Declined messages from 'ATM Switch' are altered to successful cash withdrawal transaction responses, and subsequently cash is withdrawn from the ATM. 

The attacker first inserts a device between the ATM machine and the router or switch in the ATM premises. 

This device has the capability to modify the responses back from authorisation host (ATM Switch) which is connected to ATM through network. The attacker then uses restricted cards (or blocked cards) to submit a withdrawal request.

When the 'ATM Switch' sends a declined message, the attacker in the middle alters the response to approve the transaction and subsequently withdraws cash, the official

In view of this modus operandi, the banks have been directed to ensure end-to-end encryption in the communication between the 'ATM Terminal' or PC and the 'ATM Switch', another official said.

Network cables, input/output port within the ATM premises should be concealed and physically secured or protected, the banks have been told.

A similar advisory has also been issued by the Reserve Bank of India.

As per the information reported to and tracked by the Indian Computer Emergency Response Team (CERT-In), altogether 1,59,761 cyber security incidents pertaining to digital banking were reported in 2018, a total of 2,46,514 incidents in 2019 and 2,90,445 incidents were reported in 2020.

These incidents include phishing attacks, network scanning and probing, viruses and website hacking.

There has been a 46 per cent rise in digital transactions in 2019-20 in comparison to 2018-19.

The Ministry of Home Affairs holds regular interactions with state governments and Union Territory administrations and advises them to expedite the disposal of cyber crime incidents, with a special emphasis on those relating to women and children, the official said.

The CERT-In is the national technology arm to combat cyber attacks and guard the Indian cyber space.

Catch all the Industry News, Banking News and Updates on Live Mint. Download The Mint News App to get Daily Market Updates.MoreLess
HomeIndustryBankingNew modus operandi by fraudsters to withdraw money from ATMs

Most Active Stocks

Bharat Electronics

258.85
07:19 AM | 18 MAY 2024
10.65 (4.29%)

Bandhan Bank

182.90
07:18 AM | 18 MAY 2024
1.7 (0.94%)

Zee Entertainment Enterprises

140.70
07:17 AM | 18 MAY 2024
5.75 (4.26%)

GAIL India

208.75
07:15 AM | 18 MAY 2024
4.9 (2.4%)
More Active Stocks

Market Snapshot

  • Top Gainers
  • Top Losers
  • 52 Week High

Zydus Lifesciences

1,104.45
07:19 AM | 18 MAY 2024
52.55 (5%)

Balkrishna Industries

2,798.95
07:16 AM | 18 MAY 2024
133.25 (5%)

Bharat Dynamics

2,437.05
06:57 AM | 18 MAY 2024
116.05 (5%)

Hindustan Zinc

618.80
06:59 AM | 18 MAY 2024
29.45 (5%)
More from Top Gainers

Recommended For You

    More Recommendations

    Gold Prices

    • 24K
    • 22K
    Bangalore
    74,557.00-514.00
    Chennai
    74,997.00146.00
    Delhi
    75,071.00-293.00
    Kolkata
    75,511.00147.00

    Fuel Price

    • Petrol
    • Diesel
    Bangalore
    99.84/L0.00
    Chennai
    100.88/L0.13
    Kolkata
    103.94/L0.00
    New Delhi
    94.72/L0.00
    HomeMarketsPremiumFor youGet App