ATMs remain a cornerstone of our financial landscape, offering vital access to physical currency. Yet, as technology advances, so too do the methods employed by criminals seeking to exploit vulnerabilities within ATM networks.
The statistics are stark: in 2024, global ATM fraud made up 84.1% of all ATM-related crime, with cash trapping, card theft, and skimming leading the charge. ATM operators are grappling with a sophisticated threat environment, ranging from high-tech cyberattacks like jackpotting and network breaches to physical fraud schemes.
In response, the financial sector is turning to the IoT, harnessing its connectivity capabilities to bolster security and combat fraud at cash points.
Chris Baird, CEO of OptConnect and a former ATM repair specialist, commented: “Deployers – especially those who don’t control or own their ATM locations – need to prioritise a multi-layered security approach, one that starts with a strong, secure connection.
“Many ATM operators have witnessed firsthand that without a reliable and secure network, ATMs become easy targets, leaving both businesses and consumers vulnerable.”
The need for secure ATM networks
Cybercriminals frequently target machines connected via unprotected networks, allowing them to intercept sensitive transaction data or deploy malware to seize control.
The rise of skimming attacks, where card details are stolen, and jackpotting, where ATMs are manipulated to dispense large amounts of cash without authorisation, underscores the critical vulnerability of machines lacking robust connectivity protection.
This is where secure IoT solutions come into play.
“A managed, secure network solution helps protect ATMs by encrypting data transmissions, prevents unauthorised access, and provides real-time fraud detection,” explains Baird.
“When ATMs are connected through a dedicated, managed IoT solution, operators can identify red flags more quickly and respond to security threats more effectively.”
This secure, dedicated connection forms the first line of defence.
Importance of uptime and vigilance
An often-underestimated aspect of ATM security is uptime (i.e. the period a machine is operational and available for customer use.)
Network failures or outages render ATMs offline, making them prime targets for criminals.
“Criminals often use offline machines, taking advantage of this opportunity to install skimming devices or tamper with the system undetected,” warns Baird.
Reliable IoT connectivity isn’t just about preventing cyber intrusions; it’s crucial for ensuring machines remain operational, secure, and available for safe public use.
Continuous, real-time monitoring acts as a vital safety net. Criminals seek out weaknesses, including lapses in monitoring. Unmonitored ATMs present opportunities for hardware tampering or unnoticed malware deployment. Modern ATM security demands proactivity.
“Secure, managed connectivity keeps machines online and visible,” Baird explains. “Real-time monitoring enables the detection of suspicious behaviour early, allowing adaptive systems to respond promptly to new threats.”
However, technology alone isn’t sufficient.
“People also play a key role,” Baird stresses. “With proper training and clear protocols, staff can catch issues that technology might miss. Together, smart systems and human oversight create a stronger defense.”
Securing ATMs inside and out
As ATMs evolve into smarter, more connected devices, encryption transitions from a desirable feature to an absolute necessity.
“Every piece of data, from card details to software updates, should be encrypted to prevent interception and tampering,” Baird asserts.
Effective ATM security encompasses more than just networks and software; protecting the physical machine is equally critical. Criminals target easy opportunities, such as machines in isolated areas or those lacking basic physical security.
Operators need a holistic view, addressing both digital and physical vulnerabilities.
“Remote monitoring makes it easier to catch problems early without needing to be on site,” Baird explains.
Placing ATMs in well-lit, high-traffic areas acts as a deterrent. Incorporating reinforced enclosures, anti-skimming devices, and visible security cameras adds further layers of protection.
“When you combine these tools and tactics,” Baird concludes, “you’re not just protecting transactions, you’re making the machine harder to target in the first place. That kind of layered security doesn’t just respond to threats, it helps prevent them.”
The integration of secure IoT connectivity, combined with robust physical security measures and vigilant human oversight, presents a formidable defence against the rising tide of ATM fraud.
(Photo by Mika Baumeister)
See also: Ericsson secures IoT/OT access with clientless ZTNA
Want to learn about the IoT from industry leaders? Check out IoT Tech Expo taking place in Amsterdam, California, and London. The comprehensive event is co-located with other leading events including Cyber Security & Cloud Expo, AI & Big Data Expo, Intelligent Automation Conference, Edge Computing Expo, and Digital Transformation Week.
Explore other upcoming enterprise technology events and webinars powered by TechForge here.
