Dear reader, online ads enable us to deliver the journalism you value. Please support us by taking a moment to
KARACHI: A private bank has confirmed that hundreds of its bank accounts were hacked through ATM (automated teller machine) cards as Federal Investigation Agency (FIA) officials said on Monday they were waiting for more details before launching a probe connecting this with a recent fraudulent activity in which several foreigners had been arrested for allegedly stealing data from banks with skimming devices at ATM facilities.
The Habib Bank Limited confirmed that over Rs10 million had been stolen from 559 of its accounts.
Naveed Asghar, a corporate and marketing executive of the HBL, told Dawn that there was no need to panic as the amount would be reimbursed to the affected clients.
“The amount stolen through fraud was Rs10.2m while the number of accounts holders affected is 559,” he said. “We have over 10m customers which means that the size of the amount missing is not very significant for the HBL, while the number of customers affected is also low. It is a fraud and we must check it and find the culprits...it happens in all countries that use ATMs.”
Customers advised against panic as their money will be reimbursed
He said that they were not aware of who the hackers were, but added that the transactions had been traced to Indonesia, China and other countries.
In June 2016, the FIA arrested and booked a Chinese national under sections of the Electronic Transactions Ordinance and the Pakistan Penal Code for defrauding bank users. Then in March this year, the FIA’s cybercrime wing arrested two more Chinese nationals under the same charges.
The FIA suggested that the use of “obsolete technology” by banks for ATMs and decades-old security system at booths had made them an easy target for an “organised foreign group”. The situation had prompted the FIA to approach the State Bank of Pakistan and ask banks to enhance security measures at the ATMs, and include the introduction of biometric features for the use of service.
The recent report by the HBL sent alarms bell ringing in the State Bank of Pakistan where officials spent a busy day discussing the fraud and gathering details of the alleged crime to learn about “how the security was breached and how much risk this hacking involved”.
“We have been in contact with the HBL to learn the exact situation of the problem but are searching for details,” said Abid Qamar, chief spokesperson for the State Bank. “We want to know how the security was breached and how much risk was involved in this hacking. We still don’t know how much amount was stolen. Similarly, we don’t know the whereabouts of the hackers. Currently it is all speculation.”
The FIA had a similar viewpoint, saying that they could only confirm that several bank accounts had been hacked, but the details of this were still awaited.
“I can confirm the incident but the fact is that there is no formal complaint lodged with the FIA,” said Hameed Bhutto, the FIA deputy director for cybercrime.
“We are aware of the fraud but are not aware of its volume or nature, which could give us leads and help launch the probe. Last year and then a few months ago, the FIA had arrested Chinese nationals involved in stealing data from banks, but we are not sure what kind of criminal activity has been executed while hacking the accounts of any banks recently,” he added.
Published in Dawn, December 5th, 2017
Comments (10) Closed
Incidents have been reported in peshawar too for atm scam,My own sister got a call from bank last thursday and informed her and inqured about any foreign transaction that she has made..well 84k rs were stolen from her account.
My latest visit to Islamabad was a surprise as I witnessed lots of Chinese roaming around with Pyjamas and Shorts. Lots of new Chinese products and Chinese restaurants run by them. But this news is not a surprise because this is what they are good at.
Banks are not disclosing the truth. These are hackers who have penetrated their IT Systems and stolen the customer IDs and security details. That is why they blocking the effected customers accounts and issuing them new cards
Why does HBL move from crisis to crisis? It is not about reimbursing the affected accounts. Why would other account holders want to keep money there? Their PR spokesperson should assure the account holders that there are adequate internal controls in place and they have taken remedial steps to prevent a repeat.
There appears lack of cohesiveness among SBP, banks and FIA. They should make joint efforts to address the risk. Pakistan has competent IT security experts and these institutions should make use of their services.
The personal information security system and the cyber security is so vulnerable looking in Pakistan that these kind of frauds can create some serious financial problems in Pakistan. In October I was in Pakistan. In the way ID card numbers are used in Pakistan is a very serious security threat. For eg, look at the paper cheques of Dividend Warrant by public companies. The person who is entitled to dividends receives a check with his full ID Number printed on it. If delivered to a electronic savvy wrong hand anything can happen.
its true that HBL is using very old and not up to date IT system. they always are spendthrifts and did not spent adequately on IT.
I completely agree with the bank that all those who lost money will be given the money so why to even raise eye brows forget about shouting and crying. Well done Bank and people must bank on you in any case. Iqbal Hadi Zaidi / Kuwait / zaidi.formerdiplomat@hotmail.com
As always, Pakistani mindset is a reactionary mindset. Always act on something when the water is way above ones head. We should've had thought about such scenarios in the first place.
@Lion This may surprise you but HBL spends aggressively on IT/IS infra. But all the tools are are good as rocks if the organisation does not have the skilled work force to insure that these tools are being used properly.