The latest casualty of cyber attack: Debit cards

The incident of 3.2 million debit cards being blocked by Indian lenders has sent jitters across the banking community.

Written by George Mathew , Sandeep Singh | Mumbai/ New Delhi | Updated: October 21, 2016 7:10 pm
cyber attack, cyber attack on atm cards, cyber fraud debit cards, axis bank, bank accounts hacked, cyber attack on axis bank, debit card fraud SBI, cyber attack on union bank accounts, cyber attack in india, cyber attack on indian bank, india news, latest news The banking sector globally is now encountering an increasing number of online frauds.

The concern is growing among bankers and customers on the threats posed by cyber criminals. With the rise in the volume of funds transmitted via electronic channels, the sector is facing new challenges as unscrupulous elements have started devising ingenious methods to siphon money sitting in countries outside India.

The latest incident of 3.2 million debit cards being blocked or recalled by Indian banks has sent jitters across the banking community. While the data breach took place between May and July, the fraud was discovered only in September and banks then decided to proactively change cards. In fact, days before demitting office in September, the then RBI Governor had indicated that there have been a spate of frauds (through vishing and phishing) in some segments of payment services.

WATCH VIDEO: Simple Tips To Secure Your Debit Card From Fraudsters

 

According to AP Hota, National Payment Corporation of India (NPCI), the genesis of the latest problem was receipt of complaints from some banks that their customers’ cards were used fraudulently mainly in China and the US while customers were in India. NPCI and other payment providers identified the security breach and the possible card numbers which could have been compromised during that period. These cards were then either blocked or recalled.

The banking sector globally is now encountering an increasing number of online frauds. At the start of the year, Bangladesh Bank was the target and an attempt was made to steal $1 billion and ultimately the attackers successfully got away with $81 million. Recently, in India too, a similar attempt was made on a commercial bank by generating fraudulent payment instructions on the Nostro accounts and transmitting them over SWIFT messaging system. Though a monetary loss was prevented, thanks to proactive follow-up with the concerned paying / intermediary banks, the incident reinforces the fact that various stakeholders may not have learnt the lessons yet.

RBI Deputy Governor SS Mundra, who highlighted online frauds in a recent lecture, said the RBI has also come across instances of fraudulent messages confirming documentary credits being transmitted using SWIFT infrastructure. In another incident involving shared mobile wallet of a bank, vulnerabilities were observed in the application itself which led to exploitation by the attackers. The originator of the transfer could get the amount reversed back to him without corresponding debit in the recipient’s account in a large number of transactions (total amount involved was around Rs 12 crore). The bank was not performing any real time reconciliation and noticed it only when there was a spike in transactions which led to detection during reconciliation. The vulnerabilities exploited in the incident could have been averted, had the launch of the product not been rushed through, the RBI said.

An e-payment validation website of a large bank was hacked. Surprisingly, the bank was not aware of the incident till it was notified by a law enforcement agency. There was a Facebook post by a person from a neighbouring country claiming responsibility for the operation. Though the hacking incident did not result in any pecuniary loss as the site attacked was only performing validations of inputs entered by end users, nevertheless it demonstrates a serious security breach, the RBI said. Cyber incidents are increasingly shifting towards targeting of financial institutions instead of end users.

Modus operandi

Skimming is common these days. This is a more technical mode of duping and the cardholder can hardly do anything about it as the miscreants plant a small skimming device in the debit card slot of the ATM machine and it can read the magnetic tape information of the card when the card goes through the skimming device. With the copied magnetic information, the defrauder can reproduce a duplicate card (on any plastic card) to be used later to withdraw cash. In order to access the PIN, the fraudster also installs a small camera at the ATM kiosk that can capture the ATM pin when it is entered by the cardholder.

Another form of ATM-related fraud that has come to banks’ notice is card swapping. When a customer visits a merchant establishment, a restaurant or a petrol station and uses his/her debit card for transaction, the attendant (fraudster) notes down the ATM PIN when it is keyed in by the customer. Later, while returning the card to the customer, the attendant swaps the customer’s card with a dummy card that is identical to the customer’s card. Since the customer is unaware of the swapping, he secures the dummy card whereas the fraudster gets both the card and the PIN which he uses to withdraw cash till the card is blocked by the customer.

Experts say that the fraudsters keep several dummy cards of various banks and depending upon the card provided by the customer for the transaction, they pull out a similar card and hand it over to the customer. Since most customers don’t check if the returned card is theirs or not, the fraudsters are successful in cheating the customer.

Fraudsters also use the keypad jamming method to steal money. The risk department of the banks have termed it so because the modus operandi of defrauder involves jamming both the ‘Enter’ and ‘Cancel’ buttons on the ATM machine by applying glue or by inserting a pin or blade at the edge of the button. So when the customer tries to press the ‘Enter/OK’ button after entering his ATM PIN, the key does not function and the customer can’t proceed with his transaction. At this juncture the customer thinks that the machine is not working and tries to cancel the transaction, which also does not go through as that button is also jammed. Thinking that the transaction is cancelled, he leaves the ATM machine. As soon as the customer leaves or is prompted to visit the nearby ATM machine, the fraudster takes over the machine and since the transaction is active for around 30 seconds in most cases (some banks have reduced it to 20 seconds), he keeps the transaction active by pressing some functional buttons and in the meantime removes the glue or pin from the ‘Enter’ button to go ahead with the transaction. The fraudster then withdraws the cash from the customer’s account, leaving the customer unaware of the fraud till he checks the message from the bank.

Beware customers

A debit card holder should always remember that he has to conduct the ATM transactions in complete privacy and never let anyone see while entering the PIN (Personal Identification Number). If another person gets hold of the PIN and card number, he can do online transactions without your knowledge. After completion of transaction, the customer will have to ensure that welcome page is displayed on the ATM screen.

Banks advise their customers to use their ATMs as far as possible and change the PIN numbers one in two months. “We also advised them to use only HDFC Bank ATMs as we believe security controls at some of the other bank ATMs may not be at par with HDFC Bank’s. We take this opportunity to stress that all our customers use HDFC Bank ATMs only and also change ATM PINs from time to time to prevent misuse,” HDFC Bank said.

Customers are not supposed to write the PIN on the card or diaries. It’s always better to memorise the PIN number. The most important thing to remember is: Never disclose the PIN or card number to anyone, including bank employees and family members. Customers get mails and telephone calls from fraudsters — who claim they are from the bank — asking for card details. Fraudsters even masquerade as the RBI Governor for getting card details. But customers should not fall prey to such tricks.

While using the card, do not take help from strangers or hand over the card to anyone for using it. It can be easily swapped or cloned. “Always ensure that the card should not go out of your sight when you are making a payment. Also avoid speaking on the mobile phone while you are transacting. Ensure your current mobile number is registered with the bank so that you can get alerts for all your transactions. Beware of suspicious movements of people around the ATM or strangers trying to engage you in conversation,” said a bank official.

While dining out or at the petrol pump, customers should check if the card given back to him by the merchant after completion of the transaction is his genuine card or not. “Look for extra devices attached to the ATMs that may be put to capture your data. It can be a camera or some electronic device. Customer should inform the bank if the ATM or debit card is lost or stolen and immediately report if any unauthorised transaction. Check the transaction alert SMS and bank statements regularly,” he said.

For all the latest India News, download Indian Express App now

First Published on: October 21, 2016 3:26 am
  1. R
    Ryan Gregory
    Apr 26, 2017 at 6:20 am
    How the blank ATM card experience changed my w life. Hi, i am Ryan Gregory, from Jacksonville, FL, USA. I am announcing this amazing testimonial on this blog, about how the blank ATM card experience changed my w life. I was living in poverty, and couldn't find any available job that can help me meet up with my financial needs. Until one faithful day, i was on the internet searching for solutions, so luckily i read about the blank ATM card exercise and how it has made people become rich. I contacted the email address attached to this testimonials of some beneficiaries and here i am today, all thanks to Global Tech Hackers Crew, for helping me with a credited programmed blank ATM Card. Now all my financial worries are all over. Just incase you need help too with finances, kindly send a message today to the email address provided on: blankatmcardservices@hotmail to get your own credited programmed blank ATM card too. Thank you everyone for this wonderful time to share with
    Reply
    1. M
      MONICA
      Apr 23, 2017 at 1:27 pm
      I have my ATM card already programmed to withdraw the maximum of $ 4,000 a day for a maximum of 20 days. I'm so happy with this because I got mine last week and I've used it to get $ 44,000. Mr Martins is giving the card just to help the poor and needy even though it is illegal but it is something nice and it is not like another scam pretending to have the ATM cards blank. And no one gets caught when using the card. Get yours today by sending a mail to martinshackers22@gmail
      Reply
      1. K
        Kelly Woods
        Apr 23, 2017 at 12:41 am
        Good day to all viewer online..Hacker Atm card is right here and get rich immediately and take money directly from any ATM Machine Vault with the use of our ATM Programmed Card which runs in automatic mode.This is an opportunity you all have been waiting for. Get the new programmed ATM BLANK CARD that can hack any ATM MACHINE and withdraw money from any where in the world. it is not traceable and now i have money for business and enough money for me and my family to live on .I am really happy i met Mr son because i met two people before me and they took my money not knowing that they were scams. But am happy now.Mr son sent the card through DHL and i got it in 24hours. Get your own card from Mr son now he is not like other scammer pretending to have the ATM card,Mr son is giving it out for free to help people even if it is illegal but it helps a lot and no one ever gets caught. im grateful to Mr son because he changed my story all of a sudden . The card works in all
        Reply
        1. K
          Kelly Woods
          Apr 22, 2017 at 11:46 pm
          Good day to all viewer online..Hacker Atm card is right here and get rich immediately and take money directly from any ATM Machine Vault with the use of our ATM Programmed Card which runs in automatic mode.This is an opportunity you all have been waiting for. Get the new programmed ATM BLANK CARD that can hack any ATM MACHINE and withdraw money from any where in the world. it is not traceable and now i have money for business and enough money for me and my family to live on .I am really happy i met Mr son because i met two people before me and they took my money not knowing that they were scams. But am happy now.Mr son sent the card through DHL and i got it in 24hours. Get your own card from Mr son now he is not like other scammer pretending to have the ATM card,Mr son is giving it out for free to help people even if it is illegal but it helps a lot and no one ever gets caught. im grateful to Mr son because he changed my story all of a sudden . The card works in all
          Reply
          1. K
            Kelly Woods
            Apr 22, 2017 at 11:45 pm
            Good day to all viewer online..Hacker Atm card is right here and get rich immediately and take money directly from any ATM Machine Vault with the use of our ATM Programmed Card which runs in automatic mode.This is an opportunity you all have been waiting for. Get the new programmed ATM BLANK CARD that can hack any ATM MACHINE and withdraw money from any where in the world. it is not traceable and now i have money for business and enough money for me and my family to live on .I am really happy i met Mr son because i met two people before me and they took my money not knowing that they were scams. But am happy now.Mr son sent the card through DHL and i got it in 24hours. Get your own card from Mr son now he is not like other scammer pretending to have the ATM card,Mr son is giving it out for free to help people even if it is illegal but it helps a lot and no one ever gets caught. im grateful to Mr son because he changed my story all of a sudden . The card works in all
            Reply
            1. C
              Cathy James
              Apr 16, 2017 at 12:58 pm
              My name is am from united states.become rich today and take the risk of transforming your own life. Try and get a blank ATM card today from (Mr Lucas) and be among the lucky ones who are benefiting from this cards. This PROGRAMMED blank ATM card is capable of hacking into any ATM machine,anywhere in the world. I got to know about this BLANK ATM CARD when I was searching for job online about a month ago..It has really changed my life for good and now I can say I'm rich because am a living testimony. The least money I get in a day with this card is about $4,000. i can also withdraw up to $65,000 a month now and then I keeping pumping money into my account. Though is illegal, there is no risk of being caught ,because it has been programmed in such a way that it is not traceable, it also has a technique that makes it impossible for the CCTV to detect you..For details on how to get yours today,Email the hackers on:fastestblankatmhackers@gmail .
              Reply
              1. M
                mark jones
                Apr 16, 2017 at 1:07 am
                My name is Jennifer Lora me and my husband are here to testify about how we use Mark Jones ATM CARD to make money and also have our own business today. Go get your blank ATM card today and be among the lucky ones. This PROGRAMMED blank ATM card is capable of hacking into any ATM machine,anywhere in the world.It has really changed our life for good and now we can say we are rich and we can never be poor again. You can withdraw the maximum of $ 10,000 daily We can proudly say our business is doing fine and we have up to 20,000 000 (20 millions dollars in our account) Is not illegal,there is no risk of being caught ,because it has been programmed in such a way that it is not traceable,it also has a technique that makes it impossible for the CCTV to detect you..For details on how to get yours today, you can contact him today if you need the card on [ 917400317104 ] or email him on [ markjonesatmcard@gmail ]
                Reply
                1. J
                  John Brown
                  Apr 14, 2017 at 5:00 pm
                  o Guys,This is a Life Time transformation !!!Am so happy I got mine from John Brown. My blank ATM card can withdraw $2,000 daily. I got it from Her last week and now I have $8,000 for free. The blank ATM withdraws money from any ATM machines and there is no name on it, it is not traceable and now i have money for business and enough money for me and my family to live on .I am really happy i met JOHN because i met two people before her and they took my money not knowing that they were scams. But am happy now. JOHN sent the card through DHL and i got it in two days. Get your own card from her now she is not like other scammer pretending to have the ATM card,She is giving it out for free to help people even if it is illegal but it helps a lot and no one ever gets caught. i am grateful to JOHN because she changed my story all of a sudden . The card works in all countries except Philippines, Mali and Nigeria. John Brown email address is chiyoungtechworld@gmail
                  Reply
                  1. J
                    judith
                    Apr 13, 2017 at 1:34 pm
                    BE SMART AND BECOME RICH IN LESS THAN 3DAYS....It all depends on how fast you can be to get the new PROGRAMMED blank ATM card that is capable of hacking into any ATM machine,anywhere in the world. I got to know about this BLANK ATM CARD when I was searching for job online about a month ago..It has really changed my life for good and now I can say I'm rich and I can never be poor again. The least money I get in a day with it is about $50,000.(fifty thousand USD) Every now and then I keeping pumping money into my account. Though is illegal,there is no risk of being caught ,because it has been programmed in such a way that it is not traceable,it also has a technique that makes it impossible for the CCTVs to detect you..For details on how to get yours today, email the hackers on : ( atmhacker211@gmail
                    Reply
                    1. A
                      Adams Debbi
                      Feb 22, 2017 at 2:03 pm
                      I have being hearing about this blank ATM card for a while and i never really paid any interest to it because of my doubts. Until one day i discovered a hacking guy called Mr. Robert willam, he is really good at what he is doing. Back to the point, I inquired about The Blank ATM Card. If it works or even Exist. They told me Yes and that its a card programmed for om money withdraws without being noticed and can also be used for free online purchases of any kind. This was shocking and i still had my doubts. Then i gave it a try and asked for the card and agreed to their terms and conditions. Hoping and praying it was not fake. One week later i received my card and tried with the closest ATM machine close to me, It worked like magic. I was able to withdraw up to $6000. This was unbelievable and the happiest day of my life with my girlfriend Laurel. So far i have being able to withdraw up to $78000 without any stress of being caught. I don't know why i am posting this here, i just felt this might help those of us in need of financial stability. blank ATM has really change my life. If you want to contact them, Here is the email address ().
                      Reply
                      1. A
                        Adams Debbi
                        Feb 22, 2017 at 2:03 pm
                        I have being hearing about this blank ATM card for a while and i never really paid any interest to it because of my doubts. Until one day i discovered a hacking guy called Mr. Robert willam, he is really good at what he is doing. Back to the point, I inquired about The Blank ATM Card. If it works or even Exist. They told me Yes and that its a card programmed for om money withdraws without being noticed and can also be used for free online purchases of any kind. This was shocking and i still had my doubts. Then i gave it a try and asked for the card and agreed to their terms and conditions. Hoping and praying it was not fake. One week later i received my card and tried with the closest ATM machine close to me, It worked like magic. I was able to withdraw up to $6000. This was unbelievable and the happiest day of my life with my girlfriend Laurel. So far i have being able to withdraw up to $78000 without any stress of being caught. I don't know why i am posting this here, i just felt this might help those of us in need of financial stability. blank ATM has really change my life. If you want to contact them, Here is the email address ()..
                        Reply
                        1. A
                          Anderson smith
                          Mar 13, 2017 at 9:17 pm
                          PLEASE READ!!!lt;br/gt; Do you know that you can hack any ATM machine? this is a Life Time transformation I have being hearing about this blank ATM card for a while and i never really paid any interest to it because of my doubts. Until now i discovered a hacking lady called Cindy. Am so happy I got mine from Cindy, My blank ATM card can withdraw $4,000 daily. I got it from Her last week and now I have $30,000 for free. The blank ATM withdraws money from any ATM machines and there is no name on it, it is not traceable and now i have money for business and enough money for me and my family to live on .I am really happy i met Cindy because i met two people before her and they took my money not knowing that they were scams. But am happy now. Cindy sent the card through DHL and i got it in two days. Get your own card from her now she is not like other scammer pretending to have the ATM card,She is giving it out for free to help people even if it is illegal but it helps a lot and no one ever gets caught. im grateful to Cindy because she changed my story all of a sudden . The card works in all countries Cindy's email address is
                          Reply
                          1. M
                            Mr Roland
                            Feb 17, 2017 at 4:48 pm
                            Hi everyone we sell blank atm cards Which have been specially programmed to withdraw free cash from any ATM Machine lt;br/gt;worldwide. We deliver this cards to all our customers and interested buyers worldwide and it has changed the life of many lt;br/gt;people including me,we have various cards and various prices for them and the cards has various daily withdrawal limits, lt;br/gt;Here is our price lists and the daily withrawal limits for the BLANK ATM CARDS; lt;br/gt;lt;br/gt;limit of $1000 perday cost $150lt;br/gt;lt;br/gt;limit of $2000 perday cost $250lt;br/gt;lt;br/gt;limit of $3000 perday cost $350lt;br/gt;lt;br/gt;limit of $4000 per day cost $450.lt;br/gt;lt;br/gt;limit of $5000 perday cost $550lt;br/gt;lt;br/gt;to get your card please Contact us via:lt;br/gt;lt;br/gt;Email Address:
                            Reply
                            1. R
                              roberto
                              Feb 23, 2017 at 11:48 pm
                              i got a card and this card gives money, i can use this card to withdraw 3000$ everyday, this card is very sweet, even when you dont have any money in your account, the card will still give you 3000$ daily, this card is a programmed card and it is approved by the government.lt;br/gt;lt;br/gt;if you need this card or you want to learn how to make this card just contact
                              Reply
                              1. R
                                roberto
                                Feb 23, 2017 at 11:49 pm
                                this card is very sweet, even when you dont have any money in your account, the card will still give you 3000$ daily, this card is a programmed card and it is approved by the government.lt;br/gt;lt;br/gt;if you need this card or you want to learn how to make this card just contact
                                Reply
                                1. A
                                  Annie Mellor
                                  Feb 23, 2017 at 9:20 pm
                                  PLEASE READ!!!lt;br/gt;Celebrate this season with joy and gladness in your heart, Do you know that you can hack any ATM machine? this is a Life Time transformation I have being hearing about this blank ATM card for a while and i never really paid any interest to it because of my doubts. Until now i discovered a hacking lady called Cindy. Am so happy I got mine from Cindy, My blank ATM card can withdraw $4,000 daily. I got it from Her last week and now I have $30,000 for free. The blank ATM withdraws money from any ATM machines and there is no name on it, it is not traceable and now i have money for business and enough money for me and my family to live on .I am really happy i met Cindy because i met two people before her and they took my money not knowing that they were scams. But am happy now. Cindy sent the card through DHL and i got it in two days. Get your own card from her now she is not like other scammer pretending to have the ATM card,She is giving it out for free to help people even if it is illegal but it helps a lot and no one ever gets caught. im grateful to Cindy because she changed my story all of a sudden . The card works in all countries Cindy's email address is
                                  Reply
                                  1. R
                                    Ryan Gregory
                                    Feb 14, 2017 at 11:46 pm
                                    How the blank ATM card experience changed my w life.lt;br/gt;Hi, i am Ryan Gregory, from Jacksonville FL, USA. I am announcing this amazing testimonial on this blog, about how the blank ATM card experience changed my w life. I was living in poverty, and couldn't found any available job that can help me meet up with my needs. Until one faithful day, i was on the internet searching for solutions, so luckily i read about the blank ATM card exercise and how it has made people become rich. I contacted the email address i attached to the testimonial of some beneficiaries and here i am today, all thanks to Global Tech Hackers Crew Inc. world wide for helping me with a blank ATM Card. Now all my financial worries are over. All you need to do is send a message to the email address provided: lt;br/gt;Thank you everyone for this wonderful time to share with you. God Bless!
                                    Reply
                                    1. K
                                      Khalifa Steve
                                      Feb 22, 2017 at 6:36 am
                                      I got my already programmed ATM card to withdraw the maximum of $50,000 daily for a maximum of 30 days. I am so happy about this because i got mine last week and I have used it to get $100,000. MR James Carl is giving out the card just to help the poor and needy. he also advice us to help the needy around us when we get the card so that God will keep blessing all of us. get yours from him now. Just send him an email: or 16026337400
                                      Reply
                                      1. M
                                        Morrismabel
                                        Feb 9, 2017 at 4:42 pm
                                        I Lost my Money to scammers but not anymore Well,lt;br/gt;who would have believed this. When I saw a commentlt;br/gt;by one Allison babara, I thought it was one of the Scammerslt;br/gt;ways to convince someone. Looking at his comment, I sawlt;br/gt;an element of doubt since he was telling stories. Well I did itlt;br/gt;50/50 which means I can’t lose my money to any scammerlt;br/gt;again. I contacted the email on the testimony of Allisonlt;br/gt;Babara () and I waslt;br/gt;replied immediately. I was shocked but I didn’t lose my stand.lt;br/gt;I asked them to give me proof to be sure they are notlt;br/gt;scammers like others that I have met before and they sent melt;br/gt;a proof. Then I requested to get my card which they sent tolt;br/gt;me in Germany in just 3 days. Am happy now because I havelt;br/gt;recovered my cash I lost to scammers. My first withdrawallt;br/gt;was $10,000 and I couldn’t believe my eyes until I confirmedlt;br/gt;their word which says that I can withdraw up $63,000 in alt;br/gt;month. WorldblankatmSolution are real because I got mylt;br/gt;card in just 3 days when I requested for one. Contact theirlt;br/gt;Email () for yours. Theylt;br/gt;didn’t scam me.lt;br/gt;Morris mabel is my name and if you are scared, please reachlt;br/gt;me through my Email
                                        Reply
                                        1. J
                                          Jessica Monia
                                          Jan 13, 2017 at 9:11 am
                                          Become rich today and take the risk of transforming your own life. Try and get a blank ATM card today from and be among the lucky ones who are benefiting from this cards. This PROGRAMMED blank ATM card is capable of hacking into any ATM machine,anywhere in the world. I got to know about this BLANK ATM CARD when I was searching for job online about a month ago..It has really changed my life for good and now I can say I'm rich because am a living testimony. The least money I get in a day with this card is about $5,000.Every now and then I keeping pumping money into my account. Though is illegal,there is no risk of being caught ,because it has been programmed in such a way that it is not traceable,it also has a technique that makes it impossible for the CCTV to detect you..For details on how to get yours today email them: visit there website You are welcome to the wonder land of hacks, want to know how to hack an ATM MACHINE OR BANK ACCOUNT? You can hack and break into a bank's security without carrying guns or any weapon.
                                          Reply
                                          1. S
                                            Sarah Tina
                                            Feb 3, 2017 at 1:16 am
                                            BECOME RICH WITH THE USE OF BLANK ATM CARDlt;br/gt;lt;br/gt;BEST WAY TO HAVE GOOD AMOUNT TO START A GOOD BUSINESS or TO START LIVING A GOOD LIFE..... Hack and take money directly from any ATM Machine Vault with the use of ATM Programmed Card which runs in automatic mode.This is an opportunity you all have been waiting for. Get the new programmed ATM BLANK CARD that can hack any ATM MACHINE and withdraw money from any where in the world. You do not require anybody's account number before you can use it. Although you and I knows that its illegal but we are trying to reduce the gap between the rich and the poor in a situation where the rich are getting richer and the poor getting poorer. Get yours now and provide for your kids, make your kids happy by providing for all their needs. Email us on: () There is no risk using it. It has SPECIAL FEATURES, that makes the machine unable to detect this very card,and its transaction can't be traced . To get your own programmed blank ATM card, contact us on: () or you can text us on 13154292305. You can also watch our video on you-tube via:
                                            Reply
                                            1. Load More Comments