Open A Service Order 800-423-3343 (EDGE)

ATM Security Archives - Financial Equipment for Retail & Financial Institutions | Edge One LLC

ATM Security

NCR End-of-Life: What to Expect

by

Countless emails are going around the industry, with many professionals at financial institutions voicing concerns about rumored changes to NCR’s equipment fleet. Bank and credit union leaders are worried about NCR hardware and software end-of-life dates and what they mean for business. This article will cover what “end-of-life” means, which NCR products are affected, and why this news isn’t as threatening as it may seem. Read on for a complete run-down on what is happening, what isn’t happening, and what to do if your branch needs assistance preparing for the future!

!

What Does “End-of-Life” Mean?

When NCR says that a hardware or software product is approaching end-of-life, what they mean is that they will no longer provide updates and support for those products. End-of-life DOES NOT mean that your equipment is obsolete, dysfunctional, out-of-order, or needing immediate replacement. The term end-of-life is intended to create a sense of urgency and reveal that NCR’s plans for a product are nearing completion, BUT it doesn’t mean banks and credit unions have to spend thousands of dollars on new equipment right away. Branches will continue using the same machines in many cases, and if changes are required eventually, gradually updating will be the best way forward for most financial institutions. End-of-life is a semi-technical phrase, but in practical terms, 2023 and 2024 are probably not the end-all for your equipment as long as its condition is fine.

Outdated

Why Do Manufacturers Stop Supporting ATMs?

Sometimes hardware and software manufacturers want to emphasize and direct their resources toward new products. As time passes, new methods of production, new ways of doing business, and new possibilities necessitate hardware and software changes. Programmers and designers discover ways to use or improve technology almost daily, so software and hardware evolve constantly. There are always new technological advances that present opportunities to upgrade and modernize. Growth, change, and the evolution of technology are inevitable, and you have probably experienced this kind of change before!

Technological Evolution is a Good Thing!

If you have any experience with electronic devices, you know that tech changes rapidly, and the rate at which technology evolves has accelerated over the past decade. Manufacturers focus on releasing new equipment at a regular pace. There is a new phone model every six months or so, and the smart devices we use on all sorts of electronics, from TV sets to refrigerators, seem to get smarter every year. An ATM is a computer at its core, and ATM technology is evolving in a slower but similar fashion to the other computer devices you probably use daily. You have likely noticed technological evolution and the release of new machines while maintaining the still-sufficient devices you already own. The same could be true for your ATMs.

NCR is Ending Support for Select Hardware and Software

NCR will indeed sunset (end support) for the NCR APTRA Edge 10 ATM software after December 31, 2023, and focus its attention on new software, Activate Enterprise. NCR will also sunset the 30-Series ATMs after December 31, 2024. The company will likely not provide compliance updates or other support, but the machines and software will still be usable for some time after these dates have passed. We can help you prepare to keep your machines up.

Here is What to Do About NCR End-of-Life

It’s important to note that the upcoming end-of-life dates are not a cause for alarm if your current machines are running and in good condition. These dates will not require every financial institution to buy new equipment immediately. In most cases, banks and credit unions can continue to use NCR 30-Series ATMs for the immediate future with help from an experienced support team. Choose Edge One to maximize your use of 30-Series ATMs after these end-of-life dates, and you may save time and money on upgrades that aren’t yet necessary.

Think of an electronic device you used for years after new models arrived. You might have taken the device to an independent manufacturer for service once the manufacturer’s warranty ended. Edge One can provide the reliable support your financial institution needs to make the most of your existing ATMs.

Why Turn to Edge One for ATM Support After NCR Moves on to New Devices?

The Edge One team has led banks and credit unions through various end-of-support scenarios, including the NCR 80-Series, M Class, 5600, and others. Our experience guides us in ensuring great experiences for our clients and their customers as technology changes. We can access new and remanufactured NCR parts and parts from other manufacturers. Most wear parts for the 30-Series are still in production, so these items are not difficult to source.

With access to the necessary parts and service from a team with plenty of experience servicing models beyond manufacturer support times, your financial institution might use your current ATMs for years after these official end-of-life dates!

We also offer complete ATM service and ATM management. We can help if your branch needs professionals to handle transaction processing, cash replenishment, cash management, or other tasks related to running an ATM. Lean on us to support your NCR 30-Series ATMs.

So, Don’t Sweat Over the NCR End-of-Life News

While NCR is ending support for certain hardware and software products, how some have delivered this news may be more alarming than necessary. Let’s discuss your current ATM equipment status and customize a plan to ensure your machines will continue to meet your financial institution’s needs. Call 800-423-EDGE (3343) directly, or request a meeting to speak with an Edge One representative about the NCR end-of-life dates and how your branch will handle them.

Reach Out to Us for Assistance

Do you already have service from Edge One? Please reach out to your representative with any concerns about your current equipment. We are working with clients proactively to position them for the future but feel free to connect with us if we have not yet given you guidance specific to your branch or institution. We look forward to speaking with you!

Not a current Edge One customer? Fill out our contact form and a member of the Edge One team will reach out to you shortly, or call us directly at your convenience:  800-423-EDGE (3343). 

EMV and Pin Pad Compliance: Mandatory ATM Updates

by
Lock through a debit card - ATM security from Edge One

Technology is ever-changing, bringing new advancements in ATMs, ITMs, payment systems, and fintech seemingly every time we turn around. Technological growth often makes our lives more convenient, but it also presents us with challenges in the form of nearly constant security threats. Vulnerabilities arise as technology changes, and so technology evolves again in response. We mitigate the risk and effectiveness of security threats by staying on top of technological updates and maintaining compliance with security-related mandates. EMV compliance and pin pad compliance are two of the most critical topics around ATM security today. Keep reading to learn about these issues, what the recent compliance mandates require, and what financial institutions should do next.

What is EMV?

EMV is a world-wide smart payment card standard that resulted in the chip currently used in modern credit, debit, and pre-pay cards. EMV stands for Europay Visa MasterCard, the organizations that established the standard. These three companies, and other EMV member organizations like American Express, developed the embedded chip technology to make financial transactions more secure. Costly fraud cases necessitated a new kind of card that would be more difficult to copy or falsify than traditional magnetic stripe cards. The chip has proven successful in reducing fraud.

Image of an EMV Chip - ATM Pin Pad Compliance from Edge One

How Do EMV Chip Cards Work?

Making a transaction using the EMV chip on a card is nearly as simple as using the magnetic stripe. Users insert the chip into a reader when completing a transaction, then enter their pin code to authorize, instead of only swiping. Both methods transmit data to process the transaction, but using the chip is safer, even if it slightly slows the transaction. When the cardholder uses the EMV chip, the chip generates a unique code identifying that transaction. This unique code makes it more difficult to steal data and create fraudulent cards. There is no such security code when paying with the magnetic stripe!!

Hand holding a card with an EMV chip

Why Chips Are More Secure than Magnetic Stripes

The chip in an EMV card is not easy to duplicate, and it features layers of encryption that make the creation of a workable fake unlikely. These encryption layers and advanced tokenization and authentication measures make the EMV chip a highly secure payment method. The magnetic stripe was an excellent tool for decades, but the threats have evolved. Today, scammers can take advantage of card swipes to make duplicate cards faster and easier than ever before.

The financial industry, and businesses as a whole, benefit from fraud-deterring pay technologies, so more parties are turning to EMV to ensure transaction validity, including banking networks. The major institutions want ATMs to process transactions with the chip.

What is EMV Compliance?

Put simply, a business is EMV compliant when its ATMs and point-of-sale systems can process transactions via the EMV chip. Some cardholders still have cards without the EMV chip and continue to use the magnetic stripe, but card companies are working to transition everyone to using the newer and more secure payment technology. ATMs and payment devices that cannot process transactions using the EMV chip are quickly going out of fashion, but more important than that is the fact that EMV chip technology is becoming a requirement.

EMV Compliance is CRITICAL!

As essential players in the financial technology world begin to mandate EMV chip use, there is the real possibility that ATMs and POS systems that can’t accept EMV will lose transaction support from companies like Visa and Mastercard.

It started with the EMV Compliance “Law”. The major credit card companies pointedly requested and strongly encouraged that most businesses move to EMV chip support by October 1, 2015. Before this 2015 deadline, both merchants and card issuers were often held liable for losses due to fraudulent transactions. Today, responsibility for fraud often falls on the party that is least compliant with EMV standards. A complete withdrawal of support for ATMs that do not follow EMV standards and use the chip for transactions could be imminent. As a business owner or ATM owner, it is your responsibility to upgrade your ATM for EMV capability. Edge One can assist you with that! We can also help you comply with the latest pin pad mandates.

Payment Card Industry (PCI) Announced Security Mandates in 2019

PCI’s mandated compliance changes regarding ATMs with PCI PTS v1 pin pads, or older, were due by December 31, 2022. ATM owners were to replace the ATMs or upgrade the EPP by that deadline for security reasons. A second mandate requires all ATMs with PCI pads to have EPP hardware, firmware, and software using TR31 Phase 3 “Key Blocks” by January 2025.

Why You Shouldn’t Ignore the Pin Pad Mandates

We are in a time when fraudsters are looking for opportunities around the clock. Fintech companies will probably take any steps they believe will minimize fraud risk, including disconnecting out-of-compliance ATMs from their networks. It goes without saying that extensive ATM downtime could cause a significant loss for a financial institution.

If you have not upgraded your ATM, take care of this task as soon as possible. Reach out for help if you are unsure about the type of pin pad used in your ATM or if you need answers or guidance about the required changes. The Edge One team is here to assist you with cost-effective solutions.

Note: There have been recent delays in the supply of new pin pads. We recommend handling the pin pad issues sooner rather than later.

Dual Threats

Between EMV compliance and PCI pin pad mandates, many ATM owners have two security-related problems to address, both of which could result in a downed or essentially “bricked” machine. The good news is that we can solve these problems with relative ease as the technology is readily available, for the most part. We can prepare ATMs for the future with fairly simple changes.

Does your ATM allow transactions via the EMV chip? If so, then you are set as far as EMV compliance! Regarding pin pad compliance, you will likely need to know the type of pin pad your ATM features. That’s the first thing to check!

Connect With Us for Help with any ATM Compliance Issues

We can help whether you need an upgrade for EMV chip technology or pin pad compliance. Fill out our contact form and a member of the Edge One team will reach out to you shortly, or call us directly at your convenience:  800-423-EDGE (3343). 

ATM & ITM Hook and Chain Attacks are Not Going Away

by
Hook with Cash - Hook and Chain Attacks Cost You Money

A year ago, we featured a post that spoke to an increase in ATM hook and chain attacks. We wish we could tell you it is all behind us. However, these physical attacks on ATMs and ITMs have not stopped. We continue to see banks and credit unions suffer costly thefts and damages. Sometimes the thieves are successful at gaining access to the cash, sometimes they are not. But either way, damage is done. It is important that we continue to spread awareness of these hook and chain attacks and provide ways that financial institutions can remain diligent and protect their assets.

What happens during a hook and chain attack?

For an ATM hook and chain attack, criminals target freestanding outside lane drive-up units. This allows vehicles to pull close and hook through the depository and dispenser slots. The thieves attach a large hook through, attached with a heavy chain to the back of their vehicle. Once connected, they accelerate. The goal of these attacks is for the force of the acceleration to open the ATM and safe door. Regardless of whether the thieves gain access to the safe, the attempt rips the ATM from the island. This results in damages to the ATM or ITM beyond repair.
These attacks usually occur late at night or early morning hours. With the thieves ultimately abandoning the vehicle used in the attack, as it is either stolen or rented, and take off in another vehicle standing by. These hook and chain attacks take professional thieves less than 2 minutes to pull all the cassettes from an ATM.

Hook on Chain - ATM security to protect against hook and chain attacks

What can I do to protect my ATM or ITM?

Thieves continue to show determination to find ways to gain access to ATM cash stores. Fortunately, there are a couple of preventative measures that you can take to help deter would-be thieves from attempting an attack on your ATM or ITM. We will discuss a couple of Edge One’s product offerings that will provide your financial institution with an added layer of security.

NCR Safe Slot Reinforcement Kits - Protect your ATM from Hook and Chain Attacks

NCR Safe Slot Reinforcement Kits

Designed as a countermeasure to hook and chain attacks, these kits remove all available space around the depository and dispenser slots, while reinforcing the surrounding area. Each ATM requires two kits to ensure total protection.

Security Gate from TPI - Protect Your ATM

ATM Security Gate

There are a variety of security gates available designed to help protect your ATMs from theft. Depending on the manufacturer, the security gate can attach to the concrete island or a slimline enclosure, similar to a kiosk. These gates use strong materials that come in a variety of colors to coordinate with your institution’s existing structure.

Contact us today to secure your ATM or ITM

Don’t leave your ATMs or ITMs vulnerable to a costly physical attack. The expert team at Edge One can provide you a no-obligation risk assessment and help you establish a plan of action to ensure your machines are safe. For more information about these, as well as other security offerings, Contact the team at Edge One at 800-423-3343(EDGE).

ATM Jackpotting – What You Need to Know

by

ATM jackpotting isn’t new. Back in 2010, a security researcher named Barnaby Jack took to the stage at a Black Hat security conference to demonstrate this ATM exploitation, making two ATMs dispense fake paper currency. It would be 8 years later when the first ATM jackpotting attack would occur in the United States. Now, this form of ATM attack is on the rise. So, what exactly is jackpotting and what can you do to protect your ATM investment?

What is ATM Jackpotting?

With ATM Jackpotting, thieves typically target stand-alone or retail ATMs in locations that help them avoid a bank’s security. They will often dress as a service technician and access the ATM using force or keys that are purchased easily on the internet. Once they have gained access, the criminal can connect to the ATM and install malware that enables theft of the cash reserves. They will often have an accomplice that will visit the ATM once they have left to collect the cash.

Laptop Keyboard with Hacked Key - Protect your ATM from jackpotting with Edge One

How do I protect my ATM from jackpotting?

While cyber criminals continue to look for vulnerabilities, there are several things that an ATM owner can do to help mitigate their risk. These low-cost, simple practices can help avoid being left vulnerable to cyber jackpotting attacks.

Security camera - Secure your ATM

ATM Placement

These thieves are on the lookout for ATMs that allow them to get in and gain access without detection. Unfortunately, many retail establishments will leave their ATM in a dark area in the back of the store or restaurant. It is important to place your ATM in a well-lit area that is easily monitored by staff and security cameras. Be sure to place security cameras with angles that provide a clear view of both the back and the front of the machine.

Software Updates

ATM manufacturers release regular software updates and related modifications that ensure ATMs stay ahead of potential risks and emerging threats. Old, outdated ATM software leaves your machine open to a variety of issues, jackpotting included. It is important that you install software updates as soon as possible after release.

Know your technicians

Familiarize yourself with the company responsible for the maintenance, replenishment and updating of your ATMs. Get to know their vehicles, uniforms, and your assigned technicians. Do not be afraid to ask for identification. Your ATM management company should be forthcoming and communicative so that you can stay informed of any changes in schedule or assignments.

Contact Edge One to Protect Your ATM Assets

The Edge One team can provide you with a free risk assessment to determine any vulnerabilities that may be present. Our team of professionals will provide a plan of action to ensure your ATMs are up to date, safe, and secure. For more information, Contact the team at Edge One at 800-423-3343(EDGE).

Upcoming PCI / EPP Compliance Mandates

by

In 2019, PCI (Payment Card Industry) announced new revisions for PCI PIN security requirements. PCI’s function is to set standards that ensure secure handling of customer PINs and data. PCI planned for a phased implementation of updates to provide a more secure method of transferring encryption keys from an ATM’s host processor to the ATM. Circumstances, such as Covid-19, resulted in an update to the compliance deadline dates. The dates below reflect these changes.

PCI PIN Security Requirement Dates:

  • December 31, 2022: Replace ATMs or upgrade EPP for ATMs with PCI PTS v1 or older
    (v1 EPPs are Less secure technology)
  • January 01, 2025: EPP hardware, firmware and software uses TR31 Phase 3 “Key Blocks”

Are your ATMs compliant?

In order to ensure the integrity of your ATMs, the current hardware and software needs an update. Failure to do so leaves your ATMs vulnerable. These vulnerabilities include risk of fraud, security attacks, data compromises and loss of revenue. As an ATM owner, the ATM networks consider you liable for any fraud or data breach involving your ATM. You could assess penalties or have any non-compliant ATMs shut down.

Additional Information:

PCI Bulletin

HYOSUNG ATM Security PCI Compliance Update

VISA PIN Security Bulletin

What actions should you take to ensure your ATMs are ready?

Prior to January 1, 2025, all ATMs will require, at a minimum, a software update. In addition, you may be required to replace your electronic PIN pad (EPP) or your ATM entirely. If you own or operate an ATM, do not leave this to chance. Contact the team at Edge One at 800-423-3343(EDGE). We will help audit your ATM fleet to ensure you are updated and compliant.

,

ATM Security – What You Need to Know

by
The Word Security on Screen - ATM security

ATMs have long been a prime target for criminals.  ATMs deliver cash, credit and debit bank accounts, and as technology advances, they can serve even more functions than before.  For thieves looking for quick cash, ATM crime can be enticing. This means that financial institutions and retailers are constantly fighting attacks. Edge One wants to ensure you are informed when it comes to the different types of ATM security threats and the weapons available for their defense.

Image of a Chain - Hook and Chain Physical ATM Attacks

Physical ATM Attacks

These attacks involve thieves using brute force to gain access to the ATMs. A few of the more common types of physical attacks are:

  • Hook and Chain
  • Ram-raid / Pull-out
  • Cash Trapping
  • Explosive / Gas Attacks

Freestanding drive-up ATMs are particularly vulnerable to these attacks. We are seeing an increase in frequency in these physical ATM attacks here in the U.S. Luckily, there are options for protecting your ATMs.

Logical ATM Attacks

As ATM technology advances, so do the methods criminals use to gain access to the funds they contain. Logical attacks are instances where criminals use electronic devices or malware to gain access to the ATM.

These attacks can include:

To protect yourself from logical attacks, it is critical that all ATM operators remain proactive and vigilant.

The Word Security on Screen - ATM security

Plan Your Defensive Strategy

The most effective ATM security strategy for your fleet is a through a comprehensive, multi-layered approach. The team at Edge One can provide you with a vulnerability assessment and develop a plan to mitigate your risks. Contact Us at 800-423-3343(EDGE).

Hook and Chain ATM Attacks – Are You Protected?

by
Hook and Chain with a blue sky - Hook and Chain ATM Thefts

ATM crime is nothing new. For years thieves have used methods such as tampering, skimming, and robbery. But as ATM security evolves, so do the techniques used by these criminals. We are currently seeing a rise in the frequency of a type of assault on ATMs called “hook and chain” attacks. These physical attacks on the ATMs can be dangerous and costly. It is important that your financial institution plans your defenses accordingly. Edge One can help.

Hook and Chain with a blue sky - Hook and Chain ATM Thefts

Hook and Chain Attacks

Using a vehicle, criminals target ATMs for this brute force attack. These attacks usually happen from late at night to early morning hours. The perpetrator attaches a large chain or cable to the ATM and accelerates. The force allows them to force open ATM safe doors. These attacks take less than 10 minutes. Even if they are not successful in opening the ATM, the resulting damage can be extensive. Freestanding, drive-up island ATMs are particularly vulnerable to these attacks.

Protection For Your ATM

Edge One can offer a solution to help protect your ATM from these attacks. Through a hardware solution from NCR, ATM criminals can be deterred.

Safe Slot Reinforcement Kits

Safe Slot Reinforcement (SSR) Kits have been designed as a counter measure to “hook and chain” attacks. These kits remove all available space around the dispenser and deposit slots while reinforcing the area around them. This makes it more difficult to damage the module transports and subsequently insert a hook through gaps in the safe door.

Each Upgrade Kit has been uniquely designed to fit around each model. Each ATM requires two kits to ensure total protection. The SSR kits are discreet, as they are not visible once the fascia is closed.

Close up of ATM dispensing slot - ATM Security

Protect Your ATM

At Edge One, your ATMs security is our top priority. We are dedicated to providing you with the best security solutions. For more information about our SSR kits, as well as other security offerings, Contact Us at 800-423-3343(EDGE).