credit card scam

[Pete E]

I guess I have enough of this story together to reveal it.
Saturday I used an ATM machine and noticed my remaining balence was less than I thoght it should be,alot less.
I came home,got on line and checked my account.
There were 16 unauthorized ATM withdrawals.8 per day for 2 days.Each day was 8 -300,000 pesos withdrawals.My card has a $1000 a day limit.At the first withdrawal the exchange rate was such that they could make 8 withdrwals.It actually got a little better after that so they could make 9 withdrawals,but they didn't try.
I called visa Saturday night.They froze the card but told me that would not freeze ATM withdrawals if someone had a PIN no.They said I needed to call my bank Monday,nothing could be done before that.
Sunday they took 8 x 300,000 pesos more,like $888.I was able to get 300,000 myself,because the rate was such now that 9 withdrawals was $998 something.
Monday morning I went down to the ATM and took out 9 withdrawals,basically beat them to my money for the day.Then I called the bank and froze the card.
The bank will credit me back my lost money,$2670 minus $50.I needed to send them a letter what happened ,plus file a Cali police report.Easier said than done.We went to the Cali police,got sent to 3 places,finally the right one but they were about to take their 3 hour lunch from 11-2.So we came back at 2,waited 1.5 hours and filed the report.I doubt they will do much,but I needed the report to get my money from the bank.
How did it happen?We went back to the offending ATM booth,on avenida sexta at the Olympica market.We were looking for a camera in the booth.What we did find was some sticky substance over the slot where you put in your card.Looks like someone mounted a device over the slot to read my  card as it was inserted.The PIN I don't know.They might have had a camera to watch that being entered.The camera and the other device were gone.
My future solution?Do not use a little booth.I will hit the ATM at the Bancocolombia in chipichapi.No booth,too much visability to install the other device.
I also discovered Saturday I lost another card.I used it at Ley at chipi chapi thursday but didn't have it saturday.We called Ley,they said they didn't have it,I froze the card,no money lost.
Lesson?Be carefull where you use you card,avoid booths,and check you balence alot to check for fraud.

Pete

[cancunhound]

... in response to credit card scam, posted by Pete E on Jun 16, 2004

Here's a link to a police website which illustrates what a rigged ATM could look like, and what one of the current scams involves using high tech equimpent:

http://www.utexas.edu/admin/utpd/atm.html

As you can see in those photos - you'd really have to know what to look for. Good news is you can always "shield" your input of the pin by blocking with your free hand, newspaper, whatever.  

Also, remember there is still the 'plastic' scam that does not need high tech equipment - just a plastic envelope inserted into the card slot - when you insert your card the machine can't read it and continually asks you to type your pin - while someone is watching you as you do it.  Always run your fingers over the card slot before inserting your card - there will be small tabs that the thief uses to retrieve your card in the plastic bag.  

Here's a great police tip:
"Get into the habit of using the same ATM for almost all of your transactions so as to better recognize when something is different with the machine. Be wary of any changes you see on its outside. If it's affixed to a bank, walk in and ask why the changes were made."

Now the bad news is that it's possible that someone has cracked the encryption code and is able to uncover your pin without viewing you input it by camera or just looking over your shoulder.   I haven't heard of that yet but it's bound to happen someday - and you can bet Colombia would be a likely spot for such a high tech method.  

If you think about it, the ATM card is no different than a satellite dish receiver card - and hackers have cracked the encryption on those a long time ago, and the equipment developed to do that is the same equipment thieves use as part of the ATM scam to read your card image.  The difference is that for the ATM they would need highly specialized equipment to get at the PIN with just a swipe.  

But the pin's not hard coded on the card right?  Wrong - The PIN is on your card, likely encrypted, this based on the fact that most ATMs will reject your card at the initial PIN prompt before you try to execute any transaction, as is likely your balance and daily withdrawal limit.  You can verify this on machines where you can hear the modem dial out.  When they crack the pin without seeing it - I guess it's time to go back to waiting in bank lines

[kented]

... in response to credit card scam, posted by Pete E on Jun 16, 2004

A few months ago my wife made a large withdrawal inside a bank (to pay the rent which is the only time she withdraws a lot of cash).  When she was leaving the bank outside a man ran by and stole her purse.  This happened at Banco Naciolal in Heredia.

My friend from Medellin was going to wire $500 to her family.  She withdrew $500 from Banco Nacional in downtown San Jose and in the street was robbed at gunpoint.  

The distressing thing about these robberies (bedies the trauma of being robbed and losing the money) is that they clearly were not random events where the robber selected someone in the streets.  The thieves obviously were somewhere in the bank where they could observe people making large withdrawals.  Perhaps they used a cell phone to notify their friends outside who they needed should target.  

Like Colombia banks (and many small stores) have armed guards who are so bored with their jobs that they can miss people who are loitering in the banks selecting customers to rob.  One of the risks of daily life which locals must put up with.  Clearly women are more vulnerable than men.

[Ken2]

... in response to robberies in Costa Rica, posted by kented on Jun 17, 2004

I know it is prohibited to use a cellular in a bank in COLOMBIA to avoid situations like the one you mentioned.

[kented]

... in response to Re: robberies in Costa Rica, posted by Ken2 on Jun 17, 2004

Great law.  CR needs to do this.

[jim c]

... in response to robberies in Costa Rica, posted by kented on Jun 17, 2004

In Cartagena you are not allowed to us a cell phone in the bank. jimc

[Red Clay]

... in response to credit card scam, posted by Pete E on Jun 16, 2004

Is the problem ATM enclosed in a glass booth? If people can see you from the outside, they could watch you enter your PIN number from across the street by using binoculars.

[Pete E]

... in response to Re: credit card scam, posted by Red Clay on Jun 17, 2004

No,glass door on one side,partly obscured.

Pete

[Jamie]

... in response to credit card scam, posted by Pete E on Jun 16, 2004

That is helpful information Pete. I use an indoor ATM with a security guard posted in the room. But on 3 different occasions over a 5 month period I have attempted to withdraw money and was told funds were not available from my bank which I knew was not the case. Yet the money was withdrawn 600.000 from my account for each situation. The money was eventually credited back to my account after reporting this two times and I am working on trying to get back the money for the 3rd time. This seems like a very high error rate for ATM machines. So one needs to watch out for situations like this where the ATM does not give you the money but the money actually leaves your account. You can never take anything for granted or at face value in Colombia.
I’ve been told by many of the locals not to trust anyone. This advise should read don’t trust anyone or anything.

Jamie
Engage the Exotic

[Philadelphia]

... in response to ATM errors, posted by Jamie on Jun 16, 2004

Jamie,

I may be over analyzing this, but maybe the security guard was not a security guard.  If I wanted to gain someones trust and be able to see them input their pin, a faux security guard sounds like a good idea.

Just a thought

Philadelphia

[dolphin]

... in response to credit card scam, posted by Pete E on Jun 16, 2004

Pete,

What a bummer.  It's a good thing you were able to recoup all your money.  How's everything else going in Cali?  I'll be sure to watch my card while I'm down there.

Dolphin