ATM machine query?

opinions4u

david39 wrote: »

Aren't all these machines operated by the same organistaion (LINK) on behalf af nearly all the banks, so that whatever bank name is on the casing of the one you use, it is the same operators anyway?

The ATMs are owned and operated by the individual bank.

The LINK networking just enables sharing.

The full card details are not accessible to branch staff, so the risk of fraud there is as close to NIL as you could get.

The details must be stored electronically within the organisation, but the likelihood of your account being targeted for fraud by some geek who can access the codes for these things? I'd be pretty sure that close to NIL as well.

If it was happening on any sort of scale, this forum would be getting a number of posts on the subject.

agrinnall

opinions4u wrote: »

The ATMs are owned and operated by the individual bank.

The LINK networking just enables sharing.

The full card details are not accessible to branch staff, so the risk of fraud there is as close to NIL as you could get.

The details must be stored electronically within the organisation, but the likelihood of your account being targeted for fraud by some geek who can access the codes for these things? I'd be pretty sure that close to NIL as well.

If it was happening on any sort of scale, this forum would be getting a number of posts on the subject.

Absolutely right. When I worked on the IT side of ATM transaction processing there were maybe 20 (but possibly less) people in the business team who had the necessary access and no more than 10 IT people (I wasn't ever one of them). Every access was logged so if a PAN was used fraudulently it would be pretty easy to narrow down who had looked at the information.

heloid

agrinnall wrote: »

Absolutely right. When I worked on the IT side of ATM transaction processing there were maybe 20 (but possibly less) people in the business team who had the necessary access and no more than 10 IT people (I wasn't ever one of them). Every access was logged so if a PAN was used fraudulently it would be pretty easy to narrow down who had looked at the information.

Quite true. From memory ATMs don't store anything themselves and all transactions are made directly with the banks via Link/other encrypted. Banks maintain very tight security and systems like these can't be accessed by many individuals, let alone branch or maintenance staff who have physical access to the ATMs (you'd have to get past a fairly impossible set of hurdles to compromise an ATM electronically, you may as well just bust it open).
Myself, I set up 2 ATM networks in New Zealand and work in IT security/risk.

Gromitt

heloid wrote: »

Quite true. From memory ATMs don't store anything themselves and all transactions are made directly with the banks via Link/other encrypted

Sure? Every time I insert my card into an HSBC ATM, I can hear what sounds like a dot matrix printer inside, and then every action I perform makes further sounds. Its like every action is logged internally on paper!

opinions4u

Gromitt wrote: »

Sure? Every time I insert my card into an HSBC ATM, I can hear what sounds like a dot matrix printer inside, and then every action I perform makes further sounds. Its like every action is logged internally on paper!

Audit roll.

Date, time and amount of transaction with limited account details that would be completely unusable.

Gromitt

opinions4u wrote: »

Date, time and amount of transaction with limited account details that would be completely unusable.

If it's completely unusable, why have it?

Or do you mean useless to anyone bar the person who is supposed to be looking at it?

opinions4u

Gromitt wrote: »

If it's completely unusable, why have it?

Or do you mean useless to anyone bar the person who is supposed to be looking at it?

Only useful to the organisation that issued the card.

Not something that could be use to purchase online, by phone or in store. Not something that can be used to clone a card.

heloid

Transaction references, not card details etc. We don't want to make things too easy for the ram raiders.