Protection for ATMs
Data breach, EMV and
frivolous lawsuit protection
We’ve all seen the headlines these past few years regarding large retailers with recognizable names who have fallen victim to massive data security breaches. These breaches have cost those retailers millions of dollars in fines and compliance costs, as well as immeasurable loss to their business reputation.
EMV Increases Threat to ATMs
An EMV card is essentially a small computer that is easily recognizable in the form of a "chip” you can see/feel on a credit/debit card’s exterior. Effective April 19, 2013 MasterCard shifted the liability for counterfeit cross-border Maestro EMV ATM transactions from the Issuer to the Acquirer, therefore making some of our ATM locations vulnerable to this new type of chargeback. PAI has expanded the PAI Secure ATM indemnification program to include protection for the new EMV chargeback reason code.
ATMs are subject to skimming schemes as well as many other types of possible cardholder data threats. ATMs are also subject to a completely different threat by possibly becoming the victim of an unscrupulous lawsuit commonly known as "sticker lawsuits”. These lawsuits challenge the ATMs compliance with the requirement to post a physical notice on the outside of your ATM indicating that the cardholder might be charged a fee for their transaction. These nuisance lawsuits are resulting in settlements in the tens of thousands of dollars.
Payment Alliance International (PAI) has created the comprehensive PAI Secure ATM program to facilitate compliance with regulations, as well as to protect ATM owners from these potentially devastating economic threats. Our program will walk you through the compliance process, providing availability to our PCI Hotline, which is staffed with knowledgeable Compliance Agents.
PAI Secure ATM Offers
- EMV Chargebacks ($25,000) - includes coverage for the ATM owner for any Reason 70 Chargebacks relating to the the EMV liability shift
- Sticker Suit Coverage ($50,000 + $17,000) - coverage for up to $50,000 for any Sticker Suits for Surcharge, ADA or any other ATM sticker requirement and $17,000 legal defense fund for sticker suit litigation,which could be pursued through the end of 2013 when the ATM has been enrolled in the PAI Secure ATM program
- Breach Coverage ($50,000) - additional $50,000 breach coverage for ATM devices, The breach coverage has been expanded to include any POS device at the physical location of an ATM participating in the PAI Secure ATM program
What you can do to protect yourself at the ATM
- Always change your ATM’s password from the original default password provided at time of purchase.
- Give employees Admin Passwords only.
- Check your decals on the ATM regularly and keep dated photos on file showing decals in place.
- Never let anyone unauthorized "service” your ATM.
- Consider new auditable time released locks that allows you to track access to the ATM by each user.
- Consider more secure communications such as wireless or via the internet.
- Clearly display security cameras that monitor ATM activity.
What you can do to protect yourself with your card payment devices
- Adhere to PCI Data Security Standards
- Educate your employees