GB2484552A

GB2484552A - Detecting rogue electronic surveillance devices associated with an ATM

Info

Publication number: GB2484552A
Application number: GB1017509.9A
Authority: GB
Inventors: Ian Ernest James Harding
Original assignee: Individual
Current assignee: Individual
Priority date: 2010-10-16
Filing date: 2010-10-16
Publication date: 2012-04-18
Also published as: GB201017509D0

Abstract

Apparatus for and method of detecting the presence of electronic data gathering equipment (bugs) 15-17 in a particular location using a static, permanently powered, detector 20 at the location, e.g. in an Automatic Telling Machine (ATM). The bug(s) 15-17 or other fraudulent device are detected via the wireless transmissions they emit as soon as they are within detectable range or activated within that range. Once a bug 15-17 is detected an alert is activated, which may be either overt, such as lights or a sound alarm, or covert, such as a message or notification, which may warn the authorities so that the criminal(s) in charge of the bug may be apprehended. Detection of a bug 15-17 may activate preventative measures such as power-down of the ATM, saving images of the location or spraying UV dye. The bug may be a card-skimming bug, a wireless camera bug 15-17 or a microphone bug all transmitting to a remote location via radio frequencies (RF). The detector 20 could also be installed in POS terminals, vending machines, entrances to secure areas or within offices or rooms in a secure environment.

Description

FRAUD PREVENTION

This specification relates to apparatus and method of using it for preventing fraud. It is particularly suitable for use with Automatic Telling Machines (ATMs), where people use bank and credit cards to obtain cash and undertake other financial transactions but has a wide range of other anti-fraud applications.

Fraud, often committed via electronic means, is a growing trend and has already reached alarming levels in connection with credit and debit cards and the like. The introduction of electronic chips in cards and the use of Personal, Identification Numbers (PINs) was supposed to reduce the level of electronic fraud but the activities of criminals has more than kept ahead of the preventative technology and the cost of fraud continues to rise.

The use of miniature cameras, some no bigger that a shirt button and often indistinguishable from such a button, is increasing both in covert espionage operations and in, so-called, sting' activities. One factor, which makes such operations viable, is that a transmitter can be incorporated in to the camera button' and transmit the images to a nearby receiver, e.g. a Personal Computer (PC) in a car in a car park near to the location where the sting is taking place. If the camera button' includes a microphone, words and images can both be transmitted. Modern lithium batteries are small enough to fit in camera buttons' and can have an operational life of 3-4 days.

It is also known to conceal miniature camera / microphones or just microphones in particular rooms of selected buildings, e.g. embassies in foreign countries, company boardrooms, etc., and thus monitor private conversations in these locations. There are many ways that have been perfected of getting such miniature bugs' undetected into these types of locations and the information so retrieved can have serious financial implications and / or even life threatening consequences.

It is known to use a bug detector' to sweep the walls in embassies, boardrooms, etc. for the presence of such bugs but those who secrete bugs can often know when such sweeps are taking place and act after they have been conducted.

There is thus an urgent need to provide a method and apparatus to detect the presence of and counter the secreting of bugs on a continuous basis in order to keep permanently ahead of those who would use them for illegal or illegitimate purposes.

I

According to the invention, there is provided apparatus to detect the presence of electronic data gathering equipment [bug(s)] in a particular location via the wireless transmissions emitted by the bug(s), characterised in that the apparatus is permanently powered and operational so that it detects the presence of the bug(s) as soon as the bug(s) come(s) S within detectable range or as soon as the bug(s) become(s) operational within the detectable range and further characterised in that it produces an alert as soon as a bug is detected and further characterised in that the apparatus is essentially static and that the bug(s) are detected as move / are moved towards the apparatus.

According to a first variation of the apparatus of the invention, the apparatus is located in an Automatic Telling Machine (ATM).

According to a second variation of the apparatus of the invention, the apparatus is located in a card reader in a retail I sales outlet.

According to a third variation of the apparatus of the invention, the apparatus is located in stand alone machine for the purchase of items or services, such as consumer items, car parking permits, or the like.

According to a fourth variation of the apparatus of the invention, the apparatus is located in a card reader controlling access to a security I restricted area.

According to a fifth variation of the apparatus of the invention, the apparatus is located in a doorway or other access route and able to monitor personnel and items passing through the doorway or along the access route and detect any bugs entering the area being monitored.

According to a sixth variation of the apparatus of the invention, the apparatus is located in room or security environment to monitor personnel and I or items entering I brought into the room or environment and detect any bugs enteTing the room or environment.

According to a seventh variation of the apparatus of the invention, the apparatus is portable and battery powered but operates continuously once switched on.

According to an eighth variation of the apparatus of the invention, is such as to be carried by a person and able to monitor and detect bugs worn or carried by other people adjacent to the person.

s According to a ninth variation of the apparatus of the invention, the electronic data gathering equipment includes means [a bug(s)] able to skim the magnetic strip on a credit-type card and record the information therein I thereon.

According to a tenth variation of the apparatus of the invention, the electronic data gathering equipment includes electronic camera imaging bug(s).

According to an eleventh variation of the apparatus of the invention, the electronic data gathering equipment includes microphone recording bugs.

According to a twelfth variation of the apparatus of the invention, the alert is an audible warning.

According to a thirteenth variation of the apparatus of the invention, the alert is a visible warning.

According to a fourteenth variation of the apparatus of the invention, the alert is a vibrational warning.

According to a fifteenth variation of the apparatus of the invention, the alert is apparent to the person(s) carrying, placing or otherwise in charge of the bug(s) so that they know that the presence of the bug(s) has been detected.

According to a sixteenth variation of the apparatus of the invention, the alert is remote from the person(s) carrying, placing or otherwise in charge of the bug(s) so that they are unaware that the presence of the bug(s) has been detected and that they might have been identified with it.

According to a seventeenth variation of the apparatus of the invention, the alert is a vibrational warning.

According to an eighteenth variation of the apparatus of the invention, in addition to the alert, the apparatus initiates a preventative measure(s).

According to a nineteenth variation of the apparatus of the invention, the preventative measure includes alerting the police and / or security services.

According to a twentieth variation of the apparatus of the invention, the preventative measure includes taking a photograph.

According to a twenty first variation of the apparatus of the invention, the preventative measure includes spraying UV dye.

According to a twenty second variation of the apparatus of the invention, the protective measure includes disabling the ATM.

According to the invention, a method of detecting the presence of electronic data gathering equipment [bug(s)] is provided comprising:-i) providing an Automatic Telling Machine (ATM) able to accept and scan credit cards and the like and to conduct financial transactions; ii) providing an electronic bug detector and locating it securely inside / adjacent to the ATM, the electronic bug detector having an electrical power supply and being able to produce an alert when an electronic bug is detected; and iii) providing means to react to the alert; characterised in that the electronic bug detector operates continuously for all the time that power is supplied and further characterised in that it is essentially static and detects bug(s) as they move I are moved within detectable range..

According to a first variation of the method of the invention, visual and I or audible and / or vibrational means of alerting are provided.

According to a second variation of the method of the invention, the alert includes passing warnings to the police and / or security services.

According to a third variation of the method of the invention, the alert includes taking a preventative measure(s).

According to a fourth variation of the method of the invention, the preventative measure(s) include taking a photograph.

According to a fifth variation of the method of the invention, the preventative measure(s) S include spraying UV dye.

According to a sixth variation of the method of the invention, the preventative measure(s) include disabling the ATM.

In a preferred application of the invention, an electronic bug detector is located inside an ATM and is able to detect any item of electronic data gathering equipment (bug) and, when it detects such a bug attached to a part of the ATM, it activates its alert, thereby warning personnel responsible for the ATM and I or the appropriate law enforcement authorities.

The alert may be apparent to the person(s) in charge of the bug to scare them away or it may not be apparent so that the person(s) can be apprehended.

The alert may also activate preventative measures. These may be passive measures, such as disabling the ATM by switching off the power supply, or active measures to assist with the arrest of the person planting the bug, such as taking their photograph.

The apparatus of the invention may be adapted to detect bugs brought into an environment or close to a person.

For a clearer understanding of the invention and to show how it may be carried into effect, reference will now be made, by way of example only, to the accompanying drawings in which:-Figure 1 is a diagrammatic frontal elevation of the face of an Automatic Telling Machine (ATM), located in the wall of a building; Figure 2 is a sectional side elevation along the line AA of the ATM in Figure 1 located in the wall of the building; Figure 3 is a sectional elevation of a false part front of the ATM of Figure 2 showing the location of miniature wireless camera bugs; and Figure 4 is a sectional side elevation along the line AA of the ATM of Figure 2, fitted with the false part front of Fig. 3.

In the following description, the same reference numeral is used for identical components in different Figs. or for different components fulfilling an identical function. In this description, bug' means any electronic data gathering device, miniature or otherwise, for reading and storing electronic data or recording an image or sound and able to transmit it I S them to a remote location.

Referring to Figs. 1 and 2, an ATM 1 consists of a frame 2, set into a wall 18 and consisting basically of four panels 3, 4, 5 and 6. Top panel 3 often features the bank's logo and I or advertisements for its services 7. Re-entrant, illuminated panel 4 includes an illuminated panel 8, with the light shining downwards onto operating panel 5 and keyboard panel 6.

Located in operating panel 5 are receipt production slot 11, card insert and return slot 12 and cash payment slot 13. Keyboard 14 is located in angled bottom panel 6. Dashed lines 19 are drawn as projections between the boundaries of the respective panels to show the alignment of the sections in Figs. 2, 3 and 4 with the front elevation in Fig. 1.

Fig. 3 shows a false panel 5A, which may have been obtained legally, e.g. via the internet, or illegally, and which has been adapted, in a criminal manner, by the addition of wireless camera bugs 15, 16 and 17. Bug 15 would read the long 16 digit card number as a card (not shown) is inserted into the slot, here numbered 12A. Bug 16 would read the three digit security number on the reverse of the card (not shown) and bug 17 would be angled so as to image keyboard 14 to show the PIN numbers as they were keyed in. (Bug 17 would be located directly above keyboard 14 and focussed directly onto it so that it would not be located on line AA. However, it is shown in Figs. 3 and 4 for explanatory purposes only.) Fig. 4 shows false panel 5A in place covering ATM panel 5. For diagrammatic purposes, panel 5A is shown spaced slightly to the right of panel 5. The design of ATM front 2 is such that panel SA can be fitted quickly and without the addition being obvious to anyone except the expert in ATM installation and maintenance. The wireless transmissions are shown ISA, I 6A and I 7A respectively; a line with a circle containing a zig-zag is used to depict wireless transmission without confusing the detail of Fig. 4 too much. Though not shown, a magnetic strip swipe card reader could be fitted to slot 12A to record and transmit that information, if the criminals required it.

Also shown on Fig. 4 is bug detector 20, powered from the mains 21 and so is permanently operational. It also transmits wirelessly 20A.

In some cases, as described, only operating panel 5 is covered by a false panel SA. In other cases, it may include adding other false panels 3A, 4A or 6A (not shown) as well as 5A, depending on the particular design of front 2 or the wishes of the criminal in trying to make his / her work less obvious.

In a real scenario, a criminal (not shown) would obtain a false front 5A and adapt it as shown in Fig. 3. Probably in the early hours of a morning, the criminal would then drive and park his / her car near the ATM. He / she would take the false panel 5A from the car to the ATM, check that nobody was watching, fit the false front 5A and depart, very likely in a second car, driven by an accomplice. Bugs 15, 16 and 17 would transmit ISA, 16A and 17A continuously to a PC (not shown) hidden in the first car (not shown), e.g. in the boot.

The PC (not shown) would be powered by the car's battery and could either store the information 15A, 16A and 17A or, more likely, transmit it via the internetto a remote location, which could be anywhere in the world.

As soon as the first information 1 5A, I 6A and I 7A was received at the remote location, replica cards to those used at the ATM I would be cloned and used to access the original credit / debit accounts and withdraw money, etc. As it is normally several days before the last transactions on a card are formally invoiced on the monthly statement to the card holder, the criminals will have this length of time to use the cloned card before the card holder is likely to be aware of the unauthorised transactions and raise the alarm. Many people use an ATM in a day, so in the four days that the bug batteries will last, hundreds of cards could be cloned and the accounts raided.

Though obtaining 15, 16 and 17 the card numbers has been described, a bug (not shown) to skim' the card and read the data on the magnetic strip could be used instead.

After about four or five days, the criminals would destroy the cloned cards, e.g. by burning, and thus eliminate part of the potential evidence against them. Similarly, after about four days, the car, parked near the ATM and with the PC in its boot, would be driven away.

False front SA would be left in position, rather than risk arrest trying to recover it.

According to the invention, a bug detector 20 (Fig. 4) would be incorporated into the Interior of the ATM, or adjacent to it. As shown (Fig. 4) bug detector 20 is inside the building 18 and thus cannot be disabled by the criminals. As it is powered from the mains 21, it is always live.

When a criminal (not shown) approaches the ATM and fits false front 5A, detector 20 will immediately register the presence of bugs 15, 16 and 17. In fact and depending in the effective detecting range of detector 20 and as the bugs 15, 16 and 17 were already likely to be operational, detector 20 might even detect bugs 15,16 andl7 before the criminal had actually reached the ATM. On detecting bugs 15, 16 and 17, detector 20 would alert 20A the local police. Depending on the speed of the police response and if they received the actual warning before false front 5A was fitted, it might be possible to apprehend the criminal before he / she had left the site. Certainly all available CCTV cameras could be deployed.

Detector 20 or the transmission 20A could produce a variety of alerts, e.g. visual or audible alerts to scare away the person with the bug, or not give any indication to the criminal that they had been detected, e.g. by alerting the local police or personnel in the bank or their security services..

Additionally, detector 20 could take other protective measures, such as cutting the power to the ATM, or spraying the criminal with UV dye, either from above on to the face and hair or from below onto the shoes and trousers I skirt. If a covert camera (not shown) was built into the ATM, e.g. concealed in logo 7 in panel 3, it could take an lR photo of the criminal in the act of fitting the false front 5A.

The important inventive novelty of the disclosure is that, unlike present detectors which are taken to sites, where bugs are suspected or might be hidden, and used to sweep the walls, furniture and ornaments, etc., detector 20 is static and waits for the bug 15, 16 or 17 to come to it. As detector 20 is continuously operational 21, it will detect the bug the instant it cones within range and this could be while still with the criminal before he / she has had time to place it. This gives the authorities an excellent chance to catch the criminal red-handed as they can be ahead of the game' rather than playing catch-up'.

Where mains power 21 is used, as opposed to the battery powered hand held versions (not shown), the greater power available could allow the detection range to be increased. Thus, the power could be increased at night, when criminal activity might be most likely and, with no other people about, detector 20 might be able to pick up the approaching criminal some distance away and give the police an even better chance of making an arrest.

The principle of the invention may be used on any card payment reader, e.g. in retail outlets, petrol filling stations, etc., or in stand-alone' equipment, such as vending machines, parking payment meters, etc. It could also be used where security cards and preset numbers are used to gain access to restricted areas, e.g. in banks, research laboratories, Government buildings or parts of particular buildings, etc. Other applications of the principle of the invention could be locating detectors 20 in the entrances to potentially vulnerable organisations, e.g. financial institutions, company headquarters, etc., so that anyone entering with an active bug would be identified. Often bugs are hidden in bunches of flowers and innocent florists asked to deliver the flowers to decorate the boardroom for the Board Meeting; a detector 20 should identify the presence of the bug. Here again, the longer detection range offered by mains power 21 could enable the security staff to monitor the movements and actions of the suspect without his I her knowledge and, perhaps gain valuable intelligence about the attempted espionage, what they wanted and who was behind it.

Small, battery-powered, pocket-sized units could be developed for use by people who feared that they might be the target of sting operations. With one such apparatus in one's pocket, the bona fides' of any stranger who wished to talk to you could be ascertained by demonstrating the absence of bugs before agreeing to talk to him / her. Such units could be carried in, say, a trouser pocket and produce a vibrational warning to alert the holder, without the stranger knowing of the detection. This would allow the holder to avoid making disclosures which would result in a so-called sting'. ln this case, detector 20 would be essentially static with respect to the holder and detect bugs approaching him / her.

The skilled person will understand the apparatus of the invention and the many and varied applications of the principles of its use, all falling within the scope of the invention.

Claims

Claims:-.1. Apparatus to detect the presence of electronic data gathering equipment [bug(s)] in a particular location via the wireless transmissions emitted by the bug(s), characterised in that the apparatus is permanently powered and operational so that it detects the presence of the bug(s) as soon as the bug(s) come(s) within detectable range or as soon as the bug(s) become(s) operational within the detectable range and further characterised in that it produces an alert as soon as a bug is detected and further characterised in that the apparatus is essentially static and that the bug(s) are detected as move / are moved towards the apparatus.
2. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 1, wherein the apparatus is located in an Automatic Telling Machine (ATM).
3. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 1, wherein the apparatus is located in a card reader in a retail I sales outlet.
4. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 1, wherein the apparatus is located in stand alone machine for the purchase of items or services, such as consumer items, car parking permits, or the like.
5. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 17 wherein the apparatus is located in a card reader controlling access to a security I restricted area.7. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 1, wherein the apparatus is located in a doorway or other access route and able to monitor personnel and items passing through the doorway or along the access route and detect any bugs entering the area being monitored.5. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 1, wherein the apparatus is located in room or security environment to monitor personnel and I or items entering I brought into the room or environment and detect any bugs entering the room or environment.9. Apparatus to detect the presence of electronic data gathering equipment [bug(s)), as claimed in ant preceding claim, wherein the apparatus is portable and battery powered but operates continuously once switched on.10. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 9, wherein it is such as to be carried by a person and able to monitor and detect bugs worn or carried by other people adjacent to the person.11. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in any preceding claim, wherein the electronic data gathering equipment includes means [a bug(s)] able to skim the magnetic strip on a credit-type card and record the information therein I thereon.12. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in any preceding claim, wherein the electronic data gathering equipment includes electronic camera imaging bug(s).13. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in any preceding claim, wherein the electronic data gathering equipment includes microphone recording bugs.14. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claims 11-13, wherein the alert is an audible warning.15. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claims 11-13, wherein the alert is a visible warning.16. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claims 11-13, wherein the alert is a vibrational warning.17. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claims 14-16, wherein the alert is apparent to the person(s) carrying, placing or otherwise in charge of the bug(s) so that they know that the presence of the bug(s) has been detected.18. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claims 14-16, wherein the alert is remote from the person(s) carrying, placing or otherwise in charge of the bug(s) so that they are unaware that the presence of the bug(s) has been detected and that they might have been identified with it.S19. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claims 17 or 18, wherein in addition to the alert, the apparatus initiates a preventative measure(s).20. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 19, wherein the preventative measure includes alerting the police and I or security services.21. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 19, wherein the preventative measure includes taking a photograph.22. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 19, wherein the preventative measure includes spraying UV dye.23. Apparatus to detect the presence of electronic data gathering equipment [bug(s)], as claimed in claim 19, wherein the protective measure includes disabling the ATM.24. A method of detecting the presence of electronic data gathering equipment [bug(s)] is provided comprising:-i) providing an Automatic Telling Machine (ATM) able to accept and scan credit cards and the like and to conduct financial transactions; ii) providing an electronic bug detector and locating it securely inside I adjacent to the ATM, the electronic bug detector having an electrical power supply and being able to produce an alert when an electronic bug is detected; and iii) providing means to react to the alert; characterised in that the electronic bug detector operates continuously for all the time that power is supplied and further characterised in that it is essentially static and detects bug(s) as they move I are moved within detectable range..25. A method of detecting the presence of electronic data gathering equipment [bug(s)], as claimed in claim 24, wherein visual and I or audible and I or vibrational means of alerting are provided.26. A method of detecting the presence of electronic data gathering equipment [bug(s)], as claimed in claim 24, wherein the alert includes passing warnings to the police and I or security services.27. A method of detecting the presence of electronic data gathering equipment [bug(s)], as claimed in claim 24, wherein the alert includes taking a preventative measure(s).28. A method of detecting the presence of electronic data gathering equipment [bug(s)], as claimed in claim 27, wherein the preventative measure(s) include taking a photograph.29. A method of detecting the presence of electronic data gathering equipment [bug(s)], as claimed in claim 27, wherein the preventative measure(s) include spraying UV dye.30. A method of detecting the presence of electronic data gathering equipment [bug(s)], as claimed in claim 27, wherein the preventative measure(s) include disabling the ATM.31. Apparatus and method of detecting the presence of electronic data gathering equipment [bug(s)] as disclosed in and by the above statement, with reference to the accompanying drawings.