Personal Security- ATM Frauds

From an article titled "ATM Fraud Gets Even More Brazen"
by Karen Blumenthal, November 27, 2010

Fraud involving debit cards and personal-identification numbers is on the rise as criminals go where the cash is—even targeting banks' own automated teller machines.

Techniques such as "skimming," in which criminals capture card information and personal-identification numbers, have existed for years, often on a small scale. Though the dollar losses still are relatively modest, organized gangs now are pulling off more-sophisticated attacks.

They also are targeting bigger players: Whereas most of the fraud in previous years took place at independent ATMs or at retail points of sale, fraud at bank-owned ATMs made up more than 80% of the breaches in the first six months of this year, says Fair Isaac, which provides fraud-detection software.

Europe, which has faced a bigger problem than the U.S., saw card-skimming ATM attacks jump 24% in the first six months of this year, to 5,743, the largest six-month number since data-gathering began in 2004, according to the European ATM Security Team, a nonprofit group. (Losses from skimming fell 8%, to €144 million, or $197 million.)

Attacks on retailers continue to climb as well. Last month, supermarket chain Aldi said it had discovered that payment terminals in major U.S. cities in 11 states had been altered to allow the skimming of card numbers, cardholder names and PINs between June 1 and Aug. 31 this year.

Avivah Litan, fraud analyst at Gartner, a research firm, estimates that fraud involving debit cards, PINs and point-of-sale equipment has surged 400% over the past five years. One tactic, she says, has been "flash attacks": Using the stolen information, gangs create thousands of counterfeit debit cards and then dispatch cronies to at least 100 ATM machines in several cities at once. Each withdraws a small dollar amount from several accounts to avoid fraud-detection software, adding up to tens of thousands of dollars in losses.

Until recently, skimming equipment was relatively crude and clunky, attached to card-readers with double-stick foam tape and relying on small cameras to record hands punching in PINs. Newer devices include equipment that fits inside card readers, pinhead-sized cameras and well-crafted attachments that sit snugly on top of ATM card readers and PIN pads, looking just like the real equipment. Bluetooth technology allows the fake card reader and PIN pad to talk to each other, and data drives or wireless technology can make downloading of stolen information quick and easy.

Given such clever engineering, consumers may not be able to tell that a machine has been compromised. Banks may not know either: Fair Isaac says that perpetrators of such fraud often place skimmers on outdoor ATMs on Saturday mornings and remove them before the bank opens Monday. The data is typically passed to crooks in another country within hours.

Better technologies are available: Canada and several European countries, among others, have adopted so-called chip-and-PIN debit cards, with chips built into the card, adding a layer of protection. But American banks and retailers have resisted adopting the technology because it is expensive to replace cards, ATMs and point-of-sale machines.

The chip-and-PIN technology isn't foolproof, and experts say U.S. banks and retailers may instead leapfrog that technology, possibly by using the capabilities of smartphones to verify transactions or to actually make the transactions instead of using a card.

Given scammers' growing sophistication, consumers are at a disadvantage. But there are some steps you can take—beyond becoming an expert in equipment design and appearance—to avoid the traps or lessen the impact if your information is stolen:

• The simplest protection, says the American Bankers Association, is to get in the habit of covering up your hand when you enter your PIN so that a camera can't record what you are typing.

• Use an indoor ATM. Because they are less isolated, indoor ATMs are less likely to be tampered with than outdoor machines.

• Use your PIN sparingly at retailers, and choose the signature option—or a credit card—instead, Ms. Litan says.

• If you don't have time to check your bank account regularly, set up email or text alerts to send you balances weekly or, if you are particularly paranoid, daily, so that you will know sooner if something is amiss. Most banks will refund your losses promptly, but you need to report the violation quickly, preferably within two days and no later than 60 days after receiving a statement showing the fraud.

• You should add your bank's and credit card's customer-service numbers to your contacts so you can access them from both your email and cellphone. Having the numbers at hand will eliminate the frustration of trying to find them when you are traveling or at a public computer.

• If your bank suspects fraud, it needs to be able to reach you quickly. Make sure it has your cellphone number as well as your email address and that your other information is up to date. Taking my own advice, I discovered that my bank had home and work phone numbers that were more than a decade out of date.

Internet Security - The 12 Cyber Scams of Christmas

Christmas Season is upon us,...let's not let down our guard. Be safe by being informed.

By Suzanne Choney from msnbc.com November 16, 2010

http://www.msnbc.msn.com/id/40218820/ns/technology_and_science-tech_and_gadgets/

Shoppers looking for holiday bargains are already scouring the Web as well as incoming e-mails and text messages for deals — and cyber criminals are quite busy, too, hoping to lure you in with a deal that seems too good to be true.

"We’re all looking for a great deal online, but some sites offer electronics or luxury goods at prices that are too good to be true," said Alison Southwick of the Better Business Bureau.

"Every holiday season BBB hears from holiday shoppers who paid for a supposedly great deal online, but received nothing in return." (For more tips on shopping safely online, see the BBB's list here.)

Security software company McAfee recently released its "12 Scams of Christmas" list, and offers of "free" iPads — among this year's most coveted tech gadgets — comes in at No. 1.

"With Apple products topping most shopping lists this holiday season, scammers are busy distributing bogus offers for free iPads" via e-mail spam, McAfee said.

In the e-mail, "consumers are asked to purchase other products and provide their credit card number to get the free iPad. Of course, victims never receive the iPad or the other items, just the headache of reporting a stolen credit card number."

Meanwhile, in the Facebook, Twitter or other social media version of the rouse, users are asked to "take a quiz to win a free iPad and must supply their cell phone number to receive the results. In actuality they are signed up for a cell phone scam that costs $10 a week," McAfee said.

Here's the rest of the company's "12 Scams of Christmas" list:

2. "Help! I’ve Been Robbed" — "This travel scam sends phony distress messages to family and friends requesting that money be wired or transferred so that they can get home."

We and other news organizations have written about this before, especially as an issue on Facebook, where people feel like they trust information that's posted. With so many people traveling during the holiday season, though, it's easy to fall prey to this one.

3. Fake gift cards — Social media (Facebook, Twitter, MySpace as examples) are used by no-goodniks to "promote fake gift card offers with the goal of stealing consumers’ information and money, which is then sold to marketers or used for ID theft," says McAfee.

"One recent Facebook scam offered a 'free $1,000 Best Buy gift card" to the first 20,000 people who signed up for a Best Buy fan page, which was a lookalike. To apply for the gift card they had to provide personal information and take a series of quizzes."

4. Holiday job offers — Maybe for some, the recession is over, but not for many of us still. Which is why "as people seek extra cash for gifts this holiday season, Twitter scams offer dangerous links to high-paying, work-at-home jobs that ask for your personal information, such as your e-mail address, home address and Social Security number to apply for the fake job."

5. "Smishing" — You've heard of phishing? "Smishing" is when a phishing SMS, or text messages, arrives on your cell phone, wanting you to bite.

"These texts appear to come from your bank or an online retailer saying that there is something wrong with an account and you have to call a number to verify your account information. In reality, these efforts are merely a ruse to extract valuable personal information from the targets," McAfee says.

"Cyber crooks know that people are more vulnerable to this scam during the holiday season when consumers are doing more online shopping and checking bank balances frequently."

6. Suspicious holiday rentals — Many of us are looking to save on that Christmas-y cabin in the mountains or chic vacation apartment in the city of our dreams. "During peak travel times when consumers often look online for affordable holiday rentals, cyber crooks post fake holiday rental sites that ask for down payments on properties by credit card or wire transfer."

7. Recession scams continue — "Scammers target vulnerable consumers with recession related scams such as pay-in-advance credit schemes. McAfee Labs has seen a significant number of spam e-mails advertising pre-qualified, low-interest loans and credit cards if" — that emphasis is mine —"the recipient pays a processing fee, which goes directly into the scammer’s pocket."

8. Grinch-like greetings, involving e-cards — Electronic cards can save paper and postage, but "cyber criminals load fake versions with links to computer viruses and other malware instead of cheer ... Computers may start displaying obscene images, pop-up ads, or even start sending cards to contacts that appear to come from you."

9. Low price traps — Discussed above, as the "too good to be true" deals, which are promoted on some auction sites and fake websites, McAfee says, "with the goal of stealing your money and information."

10. Charity scams — "Common ploys include phone calls and spam e-mails asking you to donate to veterans’ charities, children's causes and relief funds for the latest catastrophe."

11. Dangerous holiday downloads — "Holiday-themed screensavers, jingles and animations are an easy way for scammers to spread viruses and other computer threats especially when links come from an e-mail or IM that appears to be from a friend."

12. Hotel and airport Wi-Fi vulnerabilities — This is an anytime risk with thieves who are savvy enough to hack into public networks being used by hurried travelers. Hacker-thieves can steal credit card numbers, bank accounts and other forms of personal identity; try not to access bank accounts, for example, or give your credit card number online while using public Wi-Fi. It's a good anytime rule — not just for the holidays.

Internet Security - FEDEX, UPS or USPS E-Mail Virus

It has came to our attention that there is a new e-mal virus making the rounds,...

United Parcel Service, U.S> Postal Service and/or Federal Express E-Mail Virus

With Christmas coming up, I can see where this could be a real problem.
The newest virus circulating is the UPS/Fed Ex Delivery Failure. You will receive an e-mail from UPS/Fed Ex Service along with a packet number. It will say that they were unable to deliver a package sent to you on such-and-such a date. It then asks you to print out the invoice copy attached. DON'T TRY TO PRINT THIS. IT LAUNCHES THE VIRUS!

*Pass this warning on to all your PC operators at work and home.*
This virus has caused Millions of dollars in damage in the past few days.

Personal Security - Jury Duty Scam

Pass this on to all you know. This has been verified by the FBI, link provided at the bottom of this post).

This cam is spreading so fast, you need to be prepared should you get this call. Most of us take those summonses for jury duty seriously, but enough people skip out on their civic duty that a new and ominous kind of fraud has surfaced.

The caller claims to be a jury coordinator. If you protest that you never received a summons for jury duty, the scammer asks you for your Social Security number and date of birth so he or she can verify the information and cancel the arrest warrant. Give out any of this
information and bingo, your identity was just stolen.

The fraud has been reported so far in 11 states, including Oklahoma, Illinois, and Colorado.

This (swindle) is particularly insidious because they use intimidation over the phone to try to bully people into giving information by pretending they are with the court system.

The FBI and the federal court system have issued nationwide alerts on their web sites , warning consumers about the fraud.

Check it out here at the FBI site.

Protecting yourself is the key: Never give out personal information when you receive an unsolicited phone call.

Personal Safety - The New Cardio Pulmonary Resuscitation

Do CPR the right way: 5 things everyone needs to know about the new CPR Method.

Everyone needs to know basic first aid: From stopping the bleeding, to CPR to treating for shock, etc. This article was from Yahoo! Shine magazine on-line and clarifys the new CPR method. Not much of a change if you have been certified in the pat,...if not, get certified. Your local YWCA/YMCA always has certification class. Well worth the modest fee for peace of mind if not fore prepardeness.

by Jessica Ashley, Shine staff, Oct 14th, 2010
http://shine.yahoo.com/channel/health/do-cpr-the-right-way-5-things-everyone-needs-to-know-2399731/

The American Heart Association announced today new recommendations for the way CPR is performed. The small change could make a big difference in the lives of people suffering from cardiac arrest, the organization says.

For nearly 40 years, CPR guidelines have trained people to follow these simple A-B-C instructions—tilt the victim's head back to open the airway, then pinch their nose and do a succession of breaths into their mouth, and finally perform chest compressions.

But now, the AHA says starting with the C of chest compressions will help oxygen-rich blood circulate throughout the body sooner, which is critical for people who have had a heart attack. With this shift, rescuers and responding emergency personnel should now follow a C-A-B process—begin with chest compression, then move on to address the airway and breaths. This change applies to adults, children, and babies, but does not apply to newborns.

The revision is a part of the 2010 emergency cardiovascular care report published by the AHA., an organization that reviews its guidelines every five years, taking into account new science and literature. Although the changed procedure will take some time to reach what Monica Kleinman, the vice chair of the AHA's Emergency Cardiovascular Care Committee, calls "front-line people", there is a plan in place to implement the recommendations as soon as possible to their training network, medical staffs, and first-responders.

"The sooner chest compressions are started, the more likely there will be a better outcome," Kleinman announced. "Studies performed in labs as well as large-population studies have shown that people do better if they get chest compressions within four minutes."

That four minutes is the amount of time it could take for emergency crews to rapidly respond, Chicago firefighter and CPR instructor Kelly Burns notes. Until then, he stresses that any CPR bystanders perform can make a difference.

"Early activation is critical," Burns says, especially in cities where traffic and walk-up buildings can slow even the fastest respondents during a trauma where every minute counts.

When someone needs CPR, the very best reaction is a quick one, he says.

"In a perfect world, someone else calls 911 while you start chest compressions on the person in need," he advises. According to Kleinman, however, only about one-third of victims of cardiac arrest get assistance from bystanders.

Despite changing guidelines, outdated training, or any confusion in the moment, Burns says that no one who tries CPR is faltering.

"People are reluctant to jump in and help, especially if the person is not a family member or friend," Burns observes on a weekly basis. "The only mistake a civilian can make in these situations is waiting and not doing anything at all."

To that end, the new AHA guidelines are meant to help anyone who encounters this kind of emergency—the idea being, if they know better, they will do better.

5 potentially life-saving notes to remember about the new C-A-B method of CPR:

1. There are no mistakes when you perform CPR.
"One thing most people don't know, " Kleinman says, "is that there is almost nothing you can do [during CPR] to harm a person in cardiac arrest except delay responding."

Starting with chest compressions is now viewed by the AHA as the most effective procedure, and all immediate assistance will increase the chances the victim will survive with a good quality of life.

If one person calls 911 while another administers CPR, as Burns recommends, emergency operators will give informed instructions over the phone as well as dispatch aid to the scene.

2. All victims in cardiac arrest need chest compressions.
The AHA asserts that people having a heart attack still have oxygen remaining in their lungs and bloodstream in the first few minutes of cardiac arrest. Starting chest compressions first thing pumps blood to the victim's brain and heart sooner, delivering needed oxygen. This new method saves the 30 seconds that people performing CPR used to take to open the airway and begin breathing under the old guidelines.

3. It's a myth that only older, overweight men are at risk for a heart attack.
"Equal numbers of women and men have heart attacks," Kleinman reports. Sufferers are primarily adults.

Although infants and children are far more likely to require CPR due to accidents than cardiac arrest, it is important to know how administer care to them. (You can learn how to perform CPR on infants and children with this kit produced by the AHA or by signing up for one of their training sessions.)

4. Nearly all cardiac emergencies occur at home.
"Ninety percent of events take place at home. If you perform CPR in your lifetime, it's probably going to be for someone you love," Kleinman reveals.

5. Training is simpler and more accessible than you think.
Learning CPR has never been hard, Kleinman says, but guideline changes in the last ten years have reduced the number of steps and simplified the process even more.

Traditional CPR classes (listed here on the AHA website) are accessible for many people at local schools and hospitals.

Kits are also available to complete in the privacy of your own home or workplace. Kits available through the AHA include inflatable, disposable mannequins and a training DVD.

"Anybody can learn to do CPR. It's clearly important for saving lives, and now it is easier than ever," Kleinman asserts.

Personal Security - Replace Your Important Documents

Imagine that your house burns down or gets completely destroyed by fire, flood or other disaster. Would you know how to go about replacing your essential paperwork? Here's a helpful list of links that can help you replace your essential personal paperwork as well as change your address. Print several copies of this and put a copy at work and with a friend. Make copies of your official and important documents and store also at separate locations:

* Passport: For information on replacing a lost or stolen passport, visit the State Department website at http://travel.state.gov/passport/lost/lost_848.html

* Social Security Card: Go to http://ssa-custhelp.ssa.gov/app/answers/detail/a_id/251 for information and an application for a new card.

* Driver's License: If you need a get a new driver ' s license or renew the one you have, go to http://www.usa.gov/Topics/Motor_Vehicles.shtml to find the nearest DMV office.

* Birth and death certificates, marriage and divorce decrees: Information on getting replacement certificates of birth, death, marriage and divorce decrees can be found on the Centers for Disease Control and Prevention Website at http://www.cdc.gov/nchs/w2w.htm
You ' ll find helpful details in plain English, along with links and even prices.

* Bank records: You can get information about accessing accounts, lost records, ATM cards and direct deposits by calling the FDIC at 877-275-3342. For information regarding credit unions, call 703-518-6300.

* School records: If you need records from your former primary, secondary, or post-secondary school (whether public or private) the first place you should contact would be your former school. Administrators at the school should be able to tell you where school records are kept and what you need to do to obtain them. If the school you attended is closed, you should contact the appropriate school district. The Institute of Education Sciences (IES), a part of the Department of Education (ED), has a website which provides locators for public schools http://nces.ed.gov/ccd/schoolsearch , private schools http://nces.ed.gov/surveys/pss/privateschoolsearch or school districts http://nces.ed.gov/ccd/districtsearch . Contact information for your State Department of Education is available at http://www2.ed.gov/about/contacts/state/index.html . If you are trying to locate records from a postsecondary school that has closed, you will need to contact your State Higher Education Agency. A list by state is available at
http://wdcrobcolp01.ed.gov/Programs/EROD/org_list.cfm?category_ID=SHE Your State Higher Education Agency can explain how to find records from closed schools in your state.

The Institute of Education Sciences (IES), a part of the Department of Education (ED), has a website which provides locators for public schools http://nces.ed.gov/ccd/schoolsearch private schools http://nces.ed.gov/surveys/pss/privateschoolsearch or school districts http://nces.ed.gov/ccd/districtsearch

Contact information for your State Department of Education is available at http://www2.ed.gov/about/contacts/state/index.html If you are trying to locate records from a postsecondary school that has closed, you will need to contact your State Higher Education Agency. A list by state is available at http://wdcrobcolp01.ed.gov/Programs/EROD/org_list.cfm?category_ID=SHE Your State Higher Education Agency can explain how to find records from closed schools in your state.

* Savings Bonds: If you have old Savings Bonds stashed away somewhere, be careful. Lose them and you can lose the money. At http://www.treasurydirect.gov/indiv/research/indepth/ebonds/res_e_bonds_eereplace.htm The Treasury Department tells you exactly what to do with those bonds while you can still find them...and what to do if you can't.

* Contact government agencies: A list of links to federal, state and local government agencies, is available at http://www.usa.gov/Agencies.shtml

* Address Change: To change your address online with the post office go to http://www.usps.com/realmove If you receive Social Security benefits, you can also make an address change online at http://ssa-custhelp.ssa.gov/app/answers/detail/a_id/219 For the IRS you can download a form at http://www.irs.gov/pub/irs-pdf/f8822.pdf and mail it in.