State Bank wakes up to ATM skimming incidents

Published December 6, 2017
There were 12,515 ATMs across Pakistan at the end of March. The volume of ATM transactions in January-March was 89.1m, constituting 36pc of all banking transactions conducted in the quarter.
There were 12,515 ATMs across Pakistan at the end of March. The volume of ATM transactions in January-March was 89.1m, constituting 36pc of all banking transactions conducted in the quarter.

KARACHI: The State Bank of Pakistan (SBP) expressed concerns on Tuesday over the skimming of debit cards that caused a total loss of Rs10.2 million to 559 customers recently.

The SBP asked banks to go for the Europay Mastercard Visa (EMV) standards, which are safe and protected, according to a press release.

The SBP said only 296 customers have confirmed disputed transactions and Habib Bank Ltd (HBL) is trying to limit the impact of hacking activities.

The SBP statement did not say who the hackers were. It said the hackers withdrew depositors’ money from various locations within and outside the country.

“Customers’ information on debit cards of HBL was compromised by hackers thro­ugh skimming to create its clones,” said the SBP.

The SBP has been in contact with the HBL management to ascertain the losses and ensure the return of money to the affected customers and precautionary measures.

“HBL has taken several immediate actions to determine and limit the impact of such transactions on customers. Specifically, it blocked all identified debit cards that were suspected to be misused and quarantined the automated teller machines used in hacking activity,” said the SBP.

Until Tuesday, 296 customers confirmed the disputed transactions and the estimated damage assessment done to the bank concerned is Rs10.2m for their customers, said the SBP,

It noted that HBL has also managed to start returning the money to depositors to the extent of their losses. “Efforts are under way to determine losses to any other banks’ customers using HBL ATMs and take remedial measures,” said the SBP.

ATM skimming is an illegal activity in which account details are stolen from the magnetic strip contained on the back of the debit card. Such incidents have happened, sporadically, in Pakistan as well, the SBP added.

The central bank has issued specific regulations for the security of payment cards and internet banking to safeguard depositors from fraudulent transactions. Under these regulations, banks are required to develop and implement a comprehensive framework for risk assessment, implementation of controls and monitoring.

“Debit cards with a magnetic strip on their backs – that store customers’ acc­ou­nt details – are particularly vulnerable to skimming and cloning. Debit cards, complying with EMV standards, featuring a chip and offering two-factor authentication are now considered most effective countermeasure to card-cloning through skimming globally,” said the SBP.

The central bank issued regulations for payment cards security in 2016 wherein banks are required to develop infrastructure for EMV compliance and issue cards by June 30, 2018.

“The SBP reassures bank customers that complying with its responsibility of ensuring a smooth and safe payment system, it will take every measure in coordination with banks to safeguard the interest of depositors against any fraudulent activity,” it said.

Published in Dawn, December 6th, 2017

Follow Dawn Business on Twitter, LinkedIn, Instagram and Facebook for insights on business, finance and tech from Pakistan and across the world.

Opinion

Editorial

‘Source of terror’
29 Mar, 2024

‘Source of terror’

ALTHOUGH dealing with the presence of terrorist groups in Afghanistan is a major political, security and strategic...
Chipping in
29 Mar, 2024

Chipping in

FEDERAL infrastructure development schemes are located in the provinces. Most such projects — for instance,...
Toxic emitters
29 Mar, 2024

Toxic emitters

IT is concerning to note that dozens of industries have been violating environmental laws in and around Islamabad....
Judiciary’s SOS
Updated 28 Mar, 2024

Judiciary’s SOS

The ball is now in CJP Isa’s court, and he will feel pressure to take action.
Data protection
28 Mar, 2024

Data protection

WHAT do we want? Data protection laws. When do we want them? Immediately. Without delay, if we are to prevent ...
Selling humans
28 Mar, 2024

Selling humans

HUMAN traders feed off economic distress; they peddle promises of a better life to the impoverished who, mired in...