PAI Secure for ATMs
We’ve all seen the headlines these past few years regarding large retailers with recognizable names who have fallen victim to massive data security breaches. These breaches have cost those retailers millions of dollars in fines and compliance costs, as well as immeasurable loss to their business reputation.
ATMs are not immune to this threat. ATMs are subject to skimming schemes as well as many other types of possible cardholder data threats. ATMs are also subject to a completely different threat by possibly becoming the victim of an unscrupulous lawsuit commonly known as "sticker lawsuits”. These lawsuits challenge the ATMs compliance with the requirement to post a physical notice on the outside of your ATM indicating that the cardholder might be charged a fee for their transaction. Most of these cases have appeared to be nothing more than a shakedown from a plaintiff’s attorney looking for a settlement. In some cases it even appears that the surcharge notification decal may have been removed from the terminal before a transaction, thus creating a violation. These nuisance lawsuits are resulting in settlements in the tens of thousands of dollars.
Payment Alliance International (PAI) has created the comprehensive PAI Secure program to facilitate ATM compliance with these regulations, as well as to protect ATM owners from these potentially devastating economic threats. Our program will walk you through the compliance process, providing availability to our PCI Hotline, which is staffed with knowledgeable Compliance Agents. PAI Secure provides you with PCI Indemnification Coverage of up to $50,000 per incidence for your entire business – no matter how a card transaction is accepted electronically, as well as protection from these ATM "sticker lawsuits” in the amount of up to $50,000 per incident.
What is covered for Data Breaches
- Any Electronic Processing of card payments in your location where the ATM is located. This includes any credit card/debit card transactions and electronic prepaid transactions.
NOTE: These card transactions do NOT have to be processing through Payment Alliance International. - Your ATM is covered for "skimming” or any other data breach.
NOTE: This coverage does not include theft of the ATM, theft of cash in the ATM, nor vandalism.
What is covered for ATM "Sticker Lawsuits”
- Any incident of non-compliance of notification decals on ATMs processing with Payment Alliance International
NOTE: Regardless of when the lawsuit is filed, the transaction must have taken place on or after January 1, 2012 to be covered. Photos of your ATM that clearly show the affixed surcharge notification decal need to be submitted to PAI within 90 days of the coverage date.
What you can do to protect yourself at the ATM
- Always change your ATM’s password from the original default password provided at time of purchase.
- Give employees Admin Passwords only.
- Check your decals on the ATM regularly and keep dated photos on file showing decals in place.
- Never let anyone unauthorized "service” your ATM.
- Consider new auditable time released locks that allows you to track access to the ATM by each user.
- Consider more secure communications such as wireless or via the internet.
- Clearly display security cameras that monitor ATM activity.
What you can do to protect yourself with your card payment devices
- Adhere to PCI Data Security Standards
- Educate your employees
For more information about the PAI Secure program for ATMs, call us toll free at 1-800-523-2104, Option 4.