Craigslist ATM I Bought Causes Industry Stir

By   |  December 29, 2009

Pretty much anyone can buy an ATM machine.

Apparently I raised a hackle or two. Seems my little stunt got the attention of industry insiders, and not all of them believe that I bought a used ATM on Craigslist, which turned out to contain thousands of credit card numbers. Well, it did actually happen, and despite what many say, that the ATM couldn’t have contained 16-digit credit and debit card numbers on it, it did.

The most intense resistance to my experiment came from one Boston cop who watched me plant this thing in Downtown Crossing. He crossed his arms, glared at me, and when I walked away from the ATM, asked what I was doing. When I told him, he yelled for the women who were already using my ATM to stop, then took down my information while screaming at me. He later told me that his main concern was the possibility that the ATM might have contained a bomb!

According to ATMmarketplace.com, the ATM industry is braced for a backlash in the face of security concerns. There should be a backlash. We definitely need some regulation as to who can or can’t buy an ATM. And according to Mike Lee, the chief executive of the ATM Industry Association, “while ATMIA does not condone the auctioning of ATMs, online or otherwise, the association has little control over how they are sold.”

Personally, I think that the association needs to start establishing some control, and throwing your hands up in the air is lame. Both eBay and Craigslist have prohibited certain items. Why can’t I buy an old credit card off eBay, but I can buy an ATM with thousands of credit and debit card numbers on it? I can’t buy a “traffic signal control device” off eBay either. Because someone recognized in the wrong hands, the device can wreak havoc.

James Phillips, director of North American sales for ATMGurus, a Triton company, says that “an ATM that has old software or one that retains card numbers does not provide enough information for the owner to compromise consumer accounts,” but that my experiment still “has the potential to be so damaging to the industry’s reputation.” First of all, a 16-digit number is enough to turn data into cash. Even without a PIN, the 16-digit number can be used to buy goods online, or encoded on a blank card to buy goods in a store. This is why Visa and MasterCard require new software to block out the numbers. Second, Jim, you’re right, this is damaging. So please, fix it, and don’t allow lame excuses. And my machine is a Triton 9100. She’s a beauty by the way. Works nice off a 12-volt car battery, too.

Wendy Amaral, an account manager at Nationwide Money Services, says that while it’s possible that some companies could provide processing without collecting the required background information about the ATM owner, Visa, MasterCard, and other financial institutions are firm about the rules, and that audits are unlikely but possible. I think “possible audits” sounds like another cop out. For those of us who use ATMs, the idea that we are protected by “possible audits” is a slap in the face.

George McQuain, chief executive of ATM ISO Global Axcess Corp., which provides ATM processing, says he’s skeptical that I was able to set up my ATM for processing without a background check or even any questions. I haven’t revealed the processors who agreed to set up my ATM because they seemed to be small shops, and I don’t intend to destroy their livelihoods in my attempt to point out the inadequacy of the industry’s regulations. But the first processor set me up over the phone, and all I had to do was fill out a PDF and fax it back. The second showed up to my house in a pickup truck to service the ATM in my garage.

McQuain also says that it is rare for an ATM to have such outdated software that it would allow the owner to print so much customer information. But it was easy for me to find one. And even when they are replaced with newer models, where do they go? Where does the data go? I’ll tell you. On Craigslist, and then to the criminals.

You can protect yourself from these types of scams by paying attention to your statements. and refuting unauthorized transactions within 60 days. Consider never using a debit card again, since credit cards are safer. When using an ATM, pay close attention to details, and look for anything that seems out of place. If your card gets stuck in the machine or you notice anything odd about the machine’s appearance, such as wires, double sided tape, error messages, a missing security camera, or if the machine seems unusually old and run down, don’t use it. Don’t use just any ATM. Instead, look for ATMs in more secure locations. Cover your pin!

And invest in identity theft protection. Not all forms of identity theft can be prevented, but an identity theft protection service can dramatically reduce your risk.

By Robert Siciliano http://IDTheftSecurity.com

Comments? Leave your intelligent feedback down below or consider following CollegeTimes on Facebook or Twitter to stay updated or to get in touch!

Share This Story:

Page ID #2910  -  Last updated on
Tags:  

Please scroll down to leave a comment.

2 Comments on “Craigslist ATM I Bought Causes Industry Stir”  (RSS)

  1. This is the first thing that has held my attention all the way through. Funny you set the ATM up. However, i understand why there should be regulations on such sites as ebay and craigslist, but regulating what we buy feels like a freedom is getting ripped away. I too believe that the problem should be fixed with the ATm companies. They should have to require a complete memory swipe from the machine monthly or yearly. No need to hold that much data once payment is made or received.
    .-= cat6seraph´s last blog ..Assassins Creed =-.

  2. It’s even worse than you might realise, you can quite easily set up a temporary company and with those basic details you could buy or lease as many machines as you like, then install them into unsuspecting retail outlets and then quite literally start raking in the account details, etc and sell the information on to criminal gangs who pay good money for this type of info, don’t forget that people will deposit checks into certain types of atm, once you’ve scammed an area you can just simply pick up your machines, leave the company in place or close it down and start all over again somewhere new, certain atm manufacturing companies will sell you the parts you require without any background checks whatsoever, this means you can literally build the type of atm you want including adding in hard drives, etc to save all the data you need, if anyone doubts this just try typing in on the internet for new/used atm’s, parts for sale.

Leave a Reply

Your email address will not be published.*



You may use these HTML tags and attributes:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

*

2019 MBA Admissions Consulting

These days, college is expensive and not the best choice for everyone. But do you know which degree is still highly valuable? That's right, an MBA degree. If you study at a high quality MBA program in the United States, you can use that degree to improve your reputation and career ANYWHERE in the world, unlike law or medical degrees (or worthless degrees from diploma mills). Contact our experts to see if you're a good candidate for our top MBA programs... all our programs are accredited by AACSB! Official MBA partner of The Economist.

[contact-form-7 id='66877' title='Aringo Form']