Rising prevalence of ATM fraud­

THE recent ATM card skimming incident is a wake-up call for banks in Pakistan to ensure their customer’s data security against all possible threats.

The central bank, on its part, has reminded banks of their responsibility to implement all regulations of Payments Card Security (PCS) that it introduced back in June 2016.

Habib Bank Ltd, the bank whose depositors’ ATM cards were skimmed, has started compensating the affected customers. And the Federal Investigation Agency (FIA) is now investigating the matter.

Customers’ data security is one of the biggest challenges that banks the world over face. All central banks continue to strengthen regulations aimed at preventing a security breach

Customer data security is one of the biggest challenges that banks the world over face. And all central banks continue to strengthen regulations aimed at preventing a security breach.

But Pakistani banks have now become even more vulnerable. “We not only face threats from hackers who skim ATMs or manipulate online accounts just for swindling money, but also from organised hacking groups whose objectives are wider,” says the head of a local bank.

“Pakistan’s entire security establishment is walking a tight rope after entering into the CPEC [China-Pakistan Economic Corridor]. Foreign powers are making every effort to embarrass the country. We need to thoroughly investigate the real motives behind the recent skimming in the light of previous bank data stealing incidents in which some Chinese nationals were involved,” a well-placed source in the FIA told this writer.

“Last year, and then a few months ago, the FIA arrested Chinese nationals involved in stealing data from banks,” according to the remarks attributed to FIA deputy director Hameed Bhutto in a recent Dawn story.

In the current spate of ATM skimming, 296 customers of HBL have so far confirmed being defrauded, an aggregate loss of Rs10.2m, implied a press release issued by the State Bank of Pakistan (SBP) on Dec 5. The number of bank accounts affected, though, is around 600, according to newspaper reports.

Although HBL has started reimbursing depositors who lost their money, the reimbursement is being made after thoroughly verifying the claims of the victims, a senior bank official told this writer.

At this stage, it’s difficult to ascertain the exact amount that the skimmers might have stolen from depositors’ account. Nor can it be claimed with certainty that no more ATM skimming complaints would pour in, FIA officials reckon.

These officials also say, and bankers confirm, that HBL is not the only bank whose depositors have fallen victim to ATM fraud. It is just that in the recent case, a large number of skimming complaints have surfaced in one go.

Back in June 2016, the SBP required all banks to develop infrastructure for adopting Europay Master Card Visa (EMV) standards by June 30, 2018 as part of enhanced PCS regulations, according to a Dec 5 press release.

The use of ATMs has been growing rapidly in Pakistan. About 110m ATM transactions valuing Rs960bn took place in the nine months through March, according to SBP

Debit cards of EMV standards, featuring a chip and two-factor authentication “are now considered the most effective countermeasure for card cloning through skimming globally”, the SBP has reminded banks.

Even if all debit cards comply with EMV standards, as they are supposed to, by June next year, it does not mean that chances for ATM skimming and debit card cloning by tech-savvy criminals would end automatically.

“Banks will also have to maximise their internal network security and sensitise their customers on taking some precautionary measures while using their cards,” says Muhammad Kashif, a software developer who also works for a leading local bank.

At the beginning of this month, the US Department of Homeland Security unearthed a skimming racket in Sacramento, California, and exposed how skimmers had managed to steal money from hundreds of local account holders of Golden 1 Credit Union ATMs between April and August this year. “This happened despite the fact that the account holders used EMV-compliant cards.”

One possible solution, as has been recommended by the SBP, is to promote the use of two-factor authentication process. BankIslami’s One Card, for example, allows its users to also use finger or thumb impression in addition to a PIN code for verification at ATMs.

SBP Deputy Governor Jameel Ahmad advised banks on Dec 7 to expedite the use of PayPak, a payment card developed under a domestic payment system 1Link, and urged them to ensure security of payment instruments to safeguard consumers’ money.

Over the years, the use of ATMs has been growing rapidly in Pakistan. According to SBP statistics, about 110m ATM transactions took place in just the nine months from July 2016 to March 2017, with the total value of these transactions exceeding Rs960 billion.

As banks continue to encourage their clients to use ATMs and as people experience the benefits doing so, these numbers are destined to grow. “We’ll do everything possible to prevent all sorts of tech frauds in the banking industry including ATM skimming, and keep a strict vigil on banks for any lapses on their part,” said a well-placed source in SBP.

More details of 7th JCC meeting on CPEC trickle out

KARACHI: In a series of tweets, Chinese diplomat Lijian Zhao has shared a full list of the various projects and agreements finalised and discussed during the 7th Joint Cooperation Council (JCC) meeting held in Islamabad between November 21 and 22.

The tweets appear to be on behalf of the National Develo­pment Reform Commission (NDRC) of China, which is the counterpart of the Planning Commission in Pakistan, jointly responsible for giving shape to the China-Pakistan Economic Corridor (CPEC) over the long run.

A total of six documents were signed, including the Long Term Plan for CPEC which is to run from 2017 till 2030. In addition, minutes of the 7th JCC were also approved by both sides, as well as those from the meeting of the Joint Working Groups on Gwadar, Energy and Industrial Parks. Implementation minutes on New Gwadar International Airport were also finalised.

The subsequent JCC will work on commercial contract and financing arrangement for the Main Line 1 (ML1) project which envisions a high speed rail link between Karachi and Peshawar. This is the single largest project in CPEC. In addition to ML1, “3 new infrastructure projects will accelerate talks on signing commercial contracts and financing agreements” Zhao says.

Feasibility reports for nine Special Economic Zones (SEZs) “were handed over to Chinese side” he says, adding that three of them, “Rashakai, Dhabeji and M-3 in Faisalabad seemed most feasible.” The language is non-committal on whether any decision was made to begin construction on these yet, or whether further work is needed before work begins.

For Gwadar, the NDRC notes the beginning of the construction of East Bay Expressway, whose ground breaking was held after the JCC meeting, and “Gwadar power plant and Gwadar Expo will be inaugurated very soon. Major projects will be completed in Gwadar Free Zone by early 2018”.

Regarding the Diamer-Bhasha Dam, the NDRC is quoted by the diplomat as saying that “China and Pakistan discussing Bhasha dam project under CPEC energy expert group. However it has not been included in list of energy projects. Recent media report on Bhasha dam was not accurate, or reflected on personal view of an individual official.”

The reference is to news reports from a parliamentary committee during which a former Chairman Wapda claimed that the Diamer-Bhasha project is being cancelled due to the stringent conditions attached by the Chinese side for its financing. The report was never formally clarified by any government body.

Mr Zhao made no mention of the reported demand from the Chinese side to allow the Yuan to be used as legal tender in Gwadar. Regarding news reports that Pakistan will receive 9 per cent of Gwadar Port’s earnings, he shared a published clarification issued by the Gwadar Port Authority (GPA) chairman. In the clarification, the chairman confirms that the GPA will get “9pc of the gross revenue from port and marine service businesses and 15pc of the free zone businesses.”