Auto Teller Machine (ATM) Fraud – Case Study of a Commercial Bank in Pakistan
Aijaz A. Shaikh, Syed Mir Muhammad Shah · International Journal of Business and Management · 2012
ATM occupies an important position in the e-Banking portfolio. It has given the consumers a quality of lifeallowing them to access cash and other financial information. Its role in promoting, developing and expandingthe concept of ‘Anytime Anywhere Anyplace” banking is undeniable. It offers a real convenience to those whoare on the run in their everyday life, but at the same time, it also carries a big element of risk.In this paper we have investigated and demonstrated a mapping flaw (bug) in the ATM Controller (commonlyknown as financial middleware), which allows the ATM card holders of various banks to fraudulently withdrawcash from the ATMs of ACB Bank Limited. The flaw remained undetected for nearly 3 months.Since the breach has been thoroughly investigated, we, therefore, concluded that the banks’ internal controlsystem had failed to detect the implantation of mapping bug which deprived the bank of more than 21 millionPakistani Rupees. In addition, lack of understanding of higher management on the systems & proceduressupporting ATM Infrastructure played a significant role in developing the bug.Considering the nature of the fraud and the degree of losses incurred, this paper has recommended stronginternal controls implementation over the payment system applications. A detailed review of fraud screeningstrategy is also recommended to ensure that the security tools are optimized for their particular product or service.Turnkey ATM solution has also been recommended for the ACB Bank Limited.