An NCR Personas 75-Series interior, multi-function ATM in the USA

Smaller indoor ATMs dispense money inside convenience stores and other busy areas, such as this off-premise Wincor Nixdorf mono-function ATM in Sweden. NCR Corporation ( is a technology company specializing in products for the retail and financial sectors The United States of America —commonly referred to as the A convenience store is a small store or shop. They are often located alongside busy roads or at gas/petrol stations. Wincor Nixdorf ( is a German Corporation that provides retail and retail banking hardware software and services "Sverige" redirects here For other uses see Sweden (disambiguation and Sverige (disambiguation.

Automated teller machine (ATM) is a computerized telecommunications device that provides the customers of a financial institution with access to financial transactions in a public space without the need for a human clerk or bank teller. A customer is someone who makes use of the paid products of an individual or Organization. In Financial economics, a financial institution acts as an agent that provides Financial services for its clients or members A financial transaction involves a change in the Status of the finances of two or more businesses or individuals Clerk, the vocational title commonly refers to a White-collar worker who conducts general office or in some instances sales tasks A bank teller is an employee of a Bank who deals directly with most customers On most modern ATMs, the customer is identified by inserting a plastic ATM card with a magnetic stripe or a plastic smartcard with a chip, that contains a unique card number and some security information, such as an expiration date or CVC (CVV). An ATM card (also known as a bank card, client card, key card or cash card) is an ISO 7810 card issued by a Bank, A magnetic stripe card is a type of card capable of storing Data by modifying the Magnetism of tiny iron-based magnetic particles on a band of magnetic material A smart card, chip card, or Integrated circuit card ( ICC) is any pocket-sized card with embedded integrated The Card Security Code ( CSC) sometimes called Card Verification Value (CVV, Card Verification Value Code (CVVC, Card Verification Code (CVC Security is provided by the customer entering a personal identification number (PIN). Security is the condition of being protected against danger loss and criminals A personal identification number (PIN is a secret numeric Password shared between a user and a system that can be used to authenticate the user to the system

Using an ATM, customers can access their bank accounts in order to make cash withdrawals (or credit card cash advances) and check their account balances. In Accountancy, an account is a label used for recording and reporting a Quantity of almost anything Cash usually refers to Money in the form of Currency, such as Banknotes and Coins In Bookkeeping and Finance, A credit card is part of a system of Payments named after the small Plastic card issued to users of the system ATMs are known by various casual terms including automated banking machine, money machine, bank machine, cash machine, hole-in-the-wall, cashpoint or Bancomat (in Europe and Russia).

History

An old Nixdorf ATM

British actor Reg Varney using the world's first ATM in 1967, located at a branch of Barclays Bank, Enfield. Nixdorf Computer AG was a Computer company founded by Heinz Nixdorf in 1952 British people, or Britons, are the native inhabitants of Great Britain and their descendants or citizens of the United Kingdom, of the An actor, actress, player or thespian (see terminology) is a person who Acts in a Dramatic production and who works Reginald Alfred Varney (born 11 July 1916, Canning Town, East London) (now London E Barclays PLC is a major global financial services provider operating in Europe, North America, the Middle East, Latin America, Australia The system was developed by De La Rue

A mechanical cash dispenser was developed and built by Luther George Simjian and installed in 1939 in New York City by the City Bank of New York, but removed after 6 months due to the lack of customer acceptance. Luther George Simjian ( January 28, 1905 in Turkey &ndash October 23, 1997) was an American Inventor of numerous The City of New York Citibank is a major international Bank, founded in 1812 as the City Bank of New York, later First National City Bank of New York. ^[1]

The ATM got smaller, faster and easier over the years. Thereafter, the history of ATMs paused for over 25 years, until De La Rue developed the first electronic ATM, which was installed first in Enfield Town in North London, United Kingdom^[2] on 27 June 1967 by Barclays Bank. De La Rue plc ( is a British security printing papermaking and cash handling systems company headquartered in Basingstoke, Hampshire. Enfield Town is a location in the London Borough of Enfield. It is north north-east of Charing Cross. London ( ˈlʌndən is the capital and largest urban area in the United Kingdom. The United Kingdom of Great Britain and Northern Ireland, commonly known as the United Kingdom, the UK or Britain,is a Sovereign state located Events 1358 - Republic of Dubrovnik is founded 1709 - Peter the Great defeats Charles XII of Sweden Year 1967 ( MCMLXVII) was a Common year starting on Sunday (link will display full calendar of the 1967 Gregorian calendar. Barclays PLC is a major global financial services provider operating in Europe, North America, the Middle East, Latin America, Australia ^[3] This instance of the invention is credited to John Shepherd-Barron, although various other engineers were awarded patents for related technologies at the time. An invention is a new form composition of matter device or Process. John Adrian Shepherd-Barron (born 23 June 1925 Shillong, Assam, India) is a Scottish ^[4] Shepherd-Barron was awarded an OBE in the 2005 New Year's Honours List. The Most Excellent Order of the British Empire is a British Order of chivalry established on 4 June 1917 by King George V. The British honours system is a means of rewarding individuals' personal bravery achievement or service to the United Kingdom. ^[5] The first person to use the machine was the British variety artist and actor Reg Varney. The United Kingdom of Great Britain and Northern Ireland, commonly known as the United Kingdom, the UK or Britain,is a Sovereign state located Reginald Alfred Varney (born 11 July 1916, Canning Town, East London) (now London E ^[6] The first ATMs accepted only a single-use token or voucher, which was retained by the machine. These worked on various principles including radiation and low-coercivity magnetism that was wiped by the card reader to make fraud more difficult. Radiation, as in Physics, is Energy in the form of waves or moving Subatomic particles emitted by an atom or other body as it changes from a higher energy In Physics, magnetism is one of the Phenomena by which Materials exert attractive or repulsive Forces on other Materials. ^[4] The machine dispensed pre-packaged envelopes containing ten pounds sterling. The Pound Sterling ( symbol £; ISO code: GBP) subdivided into 100 pence (singular penny) is the Currency The idea of a PIN stored on the card was developed by the British engineer James Goodfellow in 1965. James Goodfellow (born 1937 in Paisley, Renfrewshire) is a Scottish Inventor. ^[4]

However, the modern, networked ATM was invented in Dallas, Texas, by Don Wetzel in 1968. Wetzel was a department head at an automated baggage-handling company called Docutel. In 1995 the Smithsonian's National Museum of American History recognized Docutel and Wetzel as the inventors of the ATM.

ATMs first came into wide UK use in 1973; the IBM 2984 was designed at the request of Lloyds Bank. Lloyds Bank Plc was a British Commercial bank which operated in England and Wales (and to a much lesser extent Scotland) from 1833 until its The 2984 CIT (Cash Issuing Terminal) was the first true Cashpoint, similar in function to today's machines; Cashpoint is still a registered trademark of Lloyds TSB in the U. A trademark or trade mark, represented by the symbols ™ and ®, or mark is a distinctive sign or indicator used by an individual K. All were online and issued a variable amount which was immediately deducted from the account. A small number of 2984s were supplied to a USA bank. Notable historical models of ATMs include the IBM 3624 and 473x series, Diebold 10xx and TABS 9000 series, and NCR 5xxx series. A successor to the IBM 3614, the IBM 3624 was a late 1970s second-generation Automatic teller machine The Diebold 10xx (or Modular Delivery System MDS series is a third and fourth generation family of Automated teller machines manufactured by Diebold NCR Corporation ( is a technology company specializing in products for the retail and financial sectors

Location

An ATM Encrypting PIN Pad (EPP) with German markings

ATMs are placed not only near or inside the premises of banks, but also in locations such as shopping centers/malls, airports, grocery stores, petrol/gas stations, restaurants, or any place large numbers of people may gather. These represent two types of ATM installations: on and off premise. On premise ATMs are typically more advanced, multi-function machines that complement an actual bank branch's capabilities and thus more expensive. Off premise machines are deployed by financial institutions and also ISOs (or Independent Sales Organizations) where there is usually just a straight need for cash, so they typically are the cheaper mono-function devices. In Canada, when an ATM is not operated by a financial institution it is known as a "White Label ATM". White Label ABMs in Canada provide alternative source of cash dispensing vis-à-vis traditional Automatic banking machines (ABMs from banks

In North America, banks often have drive-through lanes providing access to ATMs. A drive-through, or drive-thru, is a type of service provided by a business that allows customers to purchase products without leaving their cars

Many ATMs have a sign above them indicating the name of the bank or organization owning the ATM, and possibly including the list of ATM networks to which that machine is connected. This type of sign is called a topper.

Financial networks

An ATM in the Netherlands. The Netherlands ( Dutch:, ˈnedərlɑnt is the European part of the Kingdom of the Netherlands, which consists of the Netherlands the Netherlands The logos of a number of interbank networks this ATM is connected to are shown. A logo ( Greek el λογότυπος = el-Latn logotypos is a graphical element ( Ideogram, Symbol, Emblem, Icon, Sign) An interbank network, also known as an ATM consortium or ATM network, is a computer network that connects the ATMs of different Banks

Most ATMs are connected to interbank networks, enabling people to withdraw and deposit money from machines not belonging to the bank where they have their account or in the country where their accounts are held (enabling cash withdrawals in local currency). An interbank network, also known as an ATM consortium or ATM network, is a computer network that connects the ATMs of different Banks Some examples of interbank networks include PLUS, Cirrus, Interac and LINK. Cirrus is a worldwide Interbank network operated by MasterCard Worldwide. Interac Association is a Canadian organization linking enterprises that have proprietary networks so that they may communicate with each other for the purpose LINK is a shared Interbank ATM network operating in the United Kingdom.

ATMs rely on authorization of a financial transaction by the card issuer or other authorizing institution via the communications network. A financial transaction involves a change in the Status of the finances of two or more businesses or individuals This is often performed through an ISO 8583 messaging system. ISO 8583 Standard for Financial Transaction Card Originated Messages - Interchange message specifications is the International Organization for Standardization standard for systems

Many banks charge ATM usage fees. ATM usage fees are the fees many banks and Interbank networks charge for the use of their Automated Teller Machines (ATMs In some cases, these fees are charged solely to users who are not customers of the bank where the ATM is installed; in other cases, they apply to all users. Many people oppose these fees because ATMs are actually less costly for banks than withdrawals from human tellers.

In order to allow a more diverse range of devices to attach to their networks, some interbank networks have passed rules expanding the definition of an ATM to be a terminal that either has the vault within its footprint or utilizes the vault or cash drawer within the merchant establishment, which allows for the use of a scrip cash dispenser. A scrip cash dispenser is a computerized telecommunications device that allows a Financial institution 's Customers a Secure method of receiving cash in a

A Diebold 1063ix with a dial-up modem visible at the base

ATMs typically connect directly to their ATM Controller via either a dial-up modem over a telephone line or directly via a leased line. An ATMC ( ATM Controller is a system used in financial institutions to route financial transactions between ATMs core banking systems and other banks Modem (from mo dulator- dem odulator is a device that modulates an analog carrier signal to encode Digital information Basic principle A traditional landline telephone system also known as "plain old telephone service" (POTS, commonly handles both signaling and audio information Leased lines are preferable to POTS lines because they require less time to establish a connection. Leased lines may be comparatively expensive to operate versus a POTS line, meaning less-trafficked machines will usually rely on a dial-up modem. That dilemma may be solved as high-speed Internet VPN connections become more ubiquitous. Common lower-level layer communication protocols used by ATMs to communicate back to the Bank include SNA over SDLC, TC500 over Async, X.25, and TCP/IP over Ethernet. Systems Network Architecture ( SNA) is IBM 's proprietary networking architecture created in 1974 Synchronous Data Link Control (SDLC is a Computer Communications protocol. In Telecommunications, Asynchronous communication is transmission of data without the use of an external clock signal X25 is an ITU-T standard Network layer protocol for packet switched Wide area network (WAN communication The Internet Protocol Suite (commonly TCP/IP) is the set of Communications protocols used for the Internet and other similar networks Ethernet is a family of frame -based Computer networking technologies for Local area networks (LANs

In addition to methods employed for transaction security and secrecy, all communications traffic between the ATM and the Transaction Processor may also be encrypted via methods such as SSL. Transport Layer Security ( TLS) and its predecessor Secure Sockets Layer ( SSL) are Cryptographic protocols that provide secure ^[7]

Global use

An ATM in the Tokyo subway

There are no hard international or government-compiled numbers totaling the complete number of ATMs in use worldwide. officially, is one of the 47 prefectures of Japan and located on the eastern side of the main island Honshū. A rapid transit, underground, subway, elevated railway or metro(politan system is an electric passenger railway Estimates developed by ATMIA place the number of ATMs in use at over 1. 5 million as of August 2006. ^[8]

For the purpose of analyzing ATM usage around the world, financial institutions generally divide the world into seven regions, due to the penetration rates, usage statistics, and features deployed. Four regions (USA, Canada, Europe, and Japan) have high numbers of ATMs per million people^[9] and generally slowing growth rates. ^[10] Despite the large number of ATMs,^[11] there is additional demand for machines in the Asia/Pacific area as well as in Latin America. ^[12] ATMs have yet to reach high numbers in the Near East/Africa. ^[13]

The world's most northerly installed ATM is located at Longyearbyen, Svalbard, Norway. This is a list of various different northernmost things on earth Longyearbyen is the Administrative centre of Svalbard and is located on Spitsbergen, the largest island of the Svalbard Archipelago. Svalbard is an Archipelago in the Arctic Ocean north of mainland Europe, about midway between Norway and the North Pole. Norway ( Norwegian: Norge ( Bokmål) or Noreg ( Nynorsk) officially the Kingdom of Norway, is a Constitutional ^[14]

The world's most southerly installed ATM is located at McMurdo Station, Antarctica. Cities and settlements Shops and service facilities Brand names Geography Land (ice covered the Geographic South McMurdo Station is an American Antarctic research center located on the southern tip of Ross Island on the shore of McMurdo Sound, 2200 ^[15]

While ATMs are ubiquitous on modern cruise ships, ATMs can also be found on some US Navy ships. A cruise ship or cruise liner is a Passenger ship used for pleasure voyages where the voyage itself and the ship's amenities are part of the experience ^[16]

In the United Kingdom, an ATM may be colloqually referred to as a "Cashpoint", named after the Lloyds Bank ATM brand, or hole-in-the-wall. The United Kingdom of Great Britain and Northern Ireland, commonly known as the United Kingdom, the UK or Britain,is a Sovereign state located ^[17]

Hardware

A block diagram of an ATM.

An ATM is typically made up of the following devices:

• CPU (to control the user interface and transaction devices)
• Magnetic and/or Chip card reader (to identify the customer)
• PIN Pad (similar in layout to a Touch tone or Calculator keypad), often manufactured as part of a secure enclosure. A magnetic stripe card is a type of card capable of storing Data by modifying the Magnetism of tiny iron-based magnetic particles on a band of magnetic material A smart card, chip card, or Integrated circuit card ( ICC) is any pocket-sized card with embedded integrated A personal identification number (PIN is a secret numeric Password shared between a user and a system that can be used to authenticate the user to the system Dual-tone multi-frequency ( DTMF) signaling is used for Telephone signaling over the line in the voice-frequency band to the call switching center A calculator is device for performing mathematical calculations distinguished from a Computer by having a limited problem solving ability and an interface optimized for interactive
• Secure cryptoprocessor, generally within a secure enclosure. A secure cryptoprocessor is a dedicated Computer or Microprocessor for carrying out Cryptographic operations embedded in a packaging with multiple
• Display (used by the customer for performing the transaction)
• Function key buttons (usually close to the display) or a Touchscreen (used to select the various aspects of the transaction)
• Record Printer (to provide the customer with a record of their transaction)
• Vault (to store the parts of the machinery requiring restricted access)
• Housing (for aesthetics and to attach signage to)

Recently, due to heavier computing demands and the falling price of computer-like architectures, ATMs have moved away from custom hardware architectures using microcontrollers and/or application-specific integrated circuits to adopting a hardware architecture that is very similar to a personal computer. A function key is a key on a Computer or terminal keyboard which can be programmed so as to cause an operating system command interpreter or application A Touch Screen is a display which can detect the presence and location of a touch within the display area A bank vault is a secure space where Money, valuables records and documents can be stored A microcontroller (also MCU or µC is a functional Computer system-on-a- chip. A personal computer ( PC) is any Computer whose original sales price size and capabilities make it useful for individuals and which is intended to be operated Many ATMs are now able to use operating systems such as Microsoft Windows and Linux. Linux (commonly pronounced ˈlɪnəks Although it is undoubtedly cheaper to use commercial off-the-shelf hardware, it does make ATMs vulnerable to the same sort of problems exhibited by conventional computers. Commercial off-the-shelf ( COTS) is a term for Software or Hardware, generally technology or computer products that are ready-made and available for sale

Vaults

Interior of an NCR Personas 70 freestanding ATM, during servicing

The vault of an ATM is within the footprint of the device itself and is where items of value are kept. Scrip cash dispensers do not incorporate a vault. A scrip cash dispenser is a computerized telecommunications device that allows a Financial institution 's Customers a Secure method of receiving cash in a

Mechanisms found inside the vault may include:

• Dispensing mechanism (to provide cash or other items of value)
• Deposit mechanism, including a Cheque Processing Module and Batch Note Acceptor (to allow the customer to make deposits)
• Security sensors (Magnetic, Thermal, Seismic)
• Locks: (to ensure controlled access to the contents of the vault)

ATM vaults are supplied by manufacturers in several grades. Cash usually refers to Money in the form of Currency, such as Banknotes and Coins In Bookkeeping and Finance, Factors influencing vault grade selection include cost, weight, regulatory requirements, ATM type, operator risk avoidance practices, and internal volume requirements. ^[18]

Industry standard vault configurations include Underwriters Laboratories UL-291 "Business Hours" and Level 1 Safes,^[19] RAL TL-30 derivatives,^[20] and CEN EN 1143-1:2005 - CEN III/VdS and CEN IV/LGAI/VdS. Underwriters Laboratories Inc (UL is a US non-profit privately owned and operated Product safety testing and certification organization ^[21][22]

ATM manufacturers recommend that vaults be attached to the floor to prevent theft. ^[23]

Software

A Wincor Nixdorf ATM running Windows 2000

With the migration to commodity PC hardware, standard commercial "off-the-shelf" operating systems and programming environments can be used inside of ATMs. Wincor Nixdorf ( is a German Corporation that provides retail and retail banking hardware software and services Windows 2000 (also referred to as Win2K) is a preemptive, interruptible graphical and business-oriented Operating system designed to work with Typical platforms used in ATM development include RMX, OS/2, and Microsoft operating systems (such as MS-DOS, PC-DOS, Windows NT, Windows 2000, Windows XP Professional, or Windows XP Embedded). This article is about the iRMX Operating System for the mail protocol see Reverse MX. OS/2 is a computer Operating system, initially created by Microsoft and IBM, then later developed by IBM exclusively Microsoft Corporation is an American multinational Computer technology Corporation, which rose to dominate the Home computer MS-DOS (short for M icro' s' oft D isk O perating S ystem is an Operating system commercialized by Microsoft. IBM PC-DOS is a DOS operating system for the IBM Personal Computer, sold throughout the 1980s and 1990s Windows NT is a family of Operating systems produced by Microsoft, the first version of which was released in July 1993 Windows 2000 (also referred to as Win2K) is a preemptive, interruptible graphical and business-oriented Operating system designed to work with Windows XP is a family of 32-bit and 64-bit Operating systems produced by Microsoft for use on Personal computers including home and Windows XP has been released in several editions since its original release in 2001 Java, Linux and Unix may also be used in these environments. Java refers to a number of Computer software products and specifications from Sun Microsystems that together provide a system for developing Application software Linux (commonly pronounced ˈlɪnəks Unix (officially trademarked as UNIX, sometimes also written as Unix with Small caps) is a computer

Linux is also finding some reception in the ATM marketplace. Linux (commonly pronounced ˈlɪnəks An example of this is Banrisul, the largest bank in the south of Brazil, which has replaced the MS-DOS operating systems in its ATMs with Linux. Banrisul is the largest Bank in Southern Brazil and operates primarily in the state of Rio Grande do Sul (RS over a network that serves 364 cities (73% |utc_offset = -2 to -4 |time_zone_DST = BRST |utc_offset_DST = -2 to -5 |cctld MS-DOS (short for M icro' s' oft D isk O perating S ystem is an Operating system commercialized by Microsoft. Banco do Brasil is also migrating ATMs to Linux. Banco do Brasil SA ( English: Bank of Brazil; BOV: BBAS3SA is a major Brazilian bank headquartered in Brasília.

Common application layer transaction protocols, such as Diebold 911 or 912, IBM PBM, and NCR NDC or NDC+ provide emulation of older generations of hardware on newer platforms with incremental extensions made over time to address new capabilities. Diebold Inc ( (ˈdiːboʊld is a United States -based security systems Corporation that is engaged primarily in the sale manufacture installation and service International Business Machines Corporation abbreviated IBM and nicknamed "Big Blue", is a multinational Computer Technology An emulator duplicates (provides an emulation of the functions of one System using a different system so that the second system behaves like (and appears to Most major ATM manufacturers provide software packages that implement these protocols. Newer protocols such as IFX have yet to find wide acceptance by transaction processors. Interactive Financial Exchange (IFX is an XML specification for financial transactions such as Bill presentment and payment business to business and consumer to ^[24]

With the move to a more standardized software base, financial institutions have been increasingly interested in the ability to pick and choose the application programs that drive their equipment. WOSA/XFS, now known as CEN XFS (or simply XFS), provides a common API for accessing and manipulating the various devices of an ATM. CEN/XFS or XFS provides a client-server architecture for financial applications on the Microsoft Windows platform especially peripheral devices such as EFTPOS CEN/XFS or XFS provides a client-server architecture for financial applications on the Microsoft Windows platform especially peripheral devices such as EFTPOS

J/XFS is a Java implementation of the CEN XFS API. ^[25]

While the perceived benefit of XFS is similar to the Java's "Write once, run anywhere" mantra, often different ATM hardware vendors have different interpretations of the XFS standard. " Write once run anywhere " ( WORA) or sometimes Write once run everywhere (WORE is a slogan created by Sun Microsystems to illustrate the The result of these differences in interpretation means that ATM applications typically use a middleware to even out the differences between various platforms. Middleware is computer Software that connects Software components or applications

Notable XFS middleware platforms include Triton PRISM, Diebold Agilis, CR2 BankWorld, KAL Kalignite, NCR Corporation Aptra Edge, Phoenix Interactive VISTAatm, and Wincor Nixdorf Protopas. Diebold Inc ( (ˈdiːboʊld is a United States -based security systems Corporation that is engaged primarily in the sale manufacture installation and service NCR Corporation ( is a technology company specializing in products for the retail and financial sectors Wincor Nixdorf ( is a German Corporation that provides retail and retail banking hardware software and services

With the move of ATMs to industry-standard computing environments, concern has risen about the integrity of the ATM's software stack. ^[26]

Security

An ATM with card reader and PIN keypad.

Security, as it relates to ATMs, has several dimensions. Security is the condition of being protected against danger loss and criminals ATMs also provide a practical demonstration of a number of security systems and concepts operating together and how various security concerns are dealt with.

Physical

This is a Wincor Nixdorf Procash 2100xe Frontload that was opened with an angle grinder. Wincor Nixdorf ( is a German Corporation that provides retail and retail banking hardware software and services An angle grinder is a handheld Power tool used for cutting grinding and Polishing.

Early ATM security focused on making the ATMs invulnerable to physical attack; they were effectively safes with dispenser mechanisms. A number of attacks on ATMs resulted, with thieves attempting to steal entire ATMs by ram-raiding. Ram-raiding is a variation on Burglary in which a Van, SUV, car or other heavy vehicle is driven through the windows or doors of a closed shop usually ^[27] Since late 1990s, criminal groups operating in Japan improved ram-raiding by stealing and using a truck loaded with a heavy construction machinery to effectively demolish or uproot an entire ATM and any housing to steal its cash. ^[28]

Another attack method is to seal all openings of the ATM with silicone and fill the vault with a combustible gas or to place an explosive inside, attached, or near the ATM. Silicones are largely inert compounds with a wide variety of forms and uses This gas or explosive is ignited and the vault is opened or distorted by the force of the resulting explosion and the criminals can break in.

Modern ATM physical security, per other modern money-handling security, concentrates on denying the use of the money inside the machine to a thief, by means of techniques such as dye markers and smoke canisters. ^[29]

Transactional secrecy and integrity

The security of ATM transactions relies mostly on the integrity of the secure cryptoprocessor: the ATM often uses commodity components that are not considered to be "trusted systems". In the Security engineering subspecialty of Computer science, a trusted system is a system that is relied upon to a specified extent to enforce a specified security

Encryption of personal information, required by law in many jurisdictions, is used to prevent fraud. Sensitive data in ATM transactions are usually encrypted with DES, but transaction processors now usually require the use of Triple DES. The Data Encryption Standard ( DES) is a Cipher (a method for Encrypting information selected by NBS as an official Federal Information In Cryptography, Triple DES is a Block cipher formed from the Data Encryption Standard (DES Cipher by using it three times ^[30] Remote Key Loading techniques may be used to ensure the secrecy of the initialization of the encryption keys in the ATM. Message Authentication Code (MAC) or Partial MAC may also be used to ensure messages have not been tampered with while in transit between the ATM and the financial network. A cryptographic message authentication code (MAC is a short piece of information used to Authenticate a message A cryptographic message authentication code (MAC is a short piece of information used to Authenticate a message

Customer identity integrity

A BTMU ATM with a palm scanner (to the right of the screen)

There have also been a number of incidents of fraud where criminals have attached fake keypads or card readers to existing machines. or BTMU, is a Japanese Bank that was established on January 1, 2006, with the merger of The Bank of Tokyo-Mitsubishi Ltd These have then been used to record customers' PINs and bank card information in order to gain unauthorized access to their accounts. Various ATM manufacturers have put in place countermeasures to protect the equipment they manufacture from these threats. ^[31][32]

Alternate methods to verify cardholder identities have been tested and deployed in some countries, such as finger and palm vein patterns,^[33] iris, and facial recognition technologies. Cost of integrating and implementing these technologies along with concerns about consumer acceptance have limited their deployment so far. ^[34]

Device operation integrity

ATMs that are exposed to the outside must be vandal and weather resistant.

Openings on the customer-side of ATMs are often covered by mechanical shutters to prevent tampering with the mechanisms when they are not in use. Alarm sensors are placed inside the ATM and in ATM servicing areas to alert their operators when doors have been opened by unauthorized personnel.

Rules are usually set by the government or ATM operating body that dictate what happens when integrity systems fail. Depending on the jurisdiction, a bank may or may not be liable when an attempt is made to dispense a customer's money from an ATM and the money either gets outside of the ATM's vault, or was exposed in a non-secure fashion, or they are unable to determine the state of the money after a failed transaction. ^[35] Bank customers often complain that banks have made it difficult to recover money lost in this way, but this is often complicated by the Bank's own internal policies regarding suspicious activities typical of the criminal element. ^[36]

Customer security

Security guards watching over ATMs that have been installed in a van. A van is a kind of vehicle used for Transporting goods or groups of people

In some areas, multiple security cameras and security guards are a common feature. Closed-circuit television ( CCTV) is the use of Video cameras to transmit a signal to a specific place limited set of monitors A security guard or security officer is usually a privately and formally employed person who is paid to protect Property, assets or people ^[37] The NY State Comptroller's Office has criticized the NY State Department of Banking for not following through on safety inspections of ATMs in high crime areas. ^[38]

Critics of ATM operators assert that the issue of customer security appears to have been abandoned by the banking industry;^[39] it has been suggested that efforts are now more concentrated on deterrent legislation than on solving the problem of forced withdrawals. ^[40]

At least as far back as July 30, 1986, critics of the industry have called for the adoption of an emergency PIN system for ATMs, where the user is able to send a silent alarm in response to a threat. Events 1419 - First Defenestration of Prague. 1502 - Christopher Columbus lands at Guanaja in the Bay Islands off Year 1986 ( MCMLXXXVI) was a Common year starting on Wednesday (link displays 1986 Gregorian calendar) For the Bloc Party album see Silent Alarm (album. A silent alarm is a Burglar alarm that makes no noise that is audible to the ^[41] Legislative efforts to require an emergency PIN system have appeared in Illinois,^[42] Kansas^[43] and Georgia,^[44] but none have succeeded as of yet. The State of Illinois ( roughly ill-i-NOY is a state of the United States of America, the 21st to be admitted to the Union. Kansas ( is a Midwestern state in the central region of the United States of America, an area often referred to as the American " The State of Georgia ( is a state in the United States and was one of the original Thirteen Colonies that revolted against British rule

Alternative uses

Two NCR Personas 84 ATMs at a bank in Jersey dispensing two types of pound sterling banknotes: Bank of England notes, and States of Jersey notes. A banker or bank is a Financial institution whose primary activity is to act as a payment agent for customers and to borrow and lend money The Bailiwick of Jersey ( Jèrriais: Jèrri) is a British Crown dependency off the coast of Normandy, France. The Pound Sterling ( symbol £; ISO code: GBP) subdivided into 100 pence (singular penny) is the Currency The Bank of England is the Central Bank of the United Kingdom and one of eight banks legally authorised to issue banknotes in the UK The pound is the currency of Jersey. Jersey is in Currency union with the United Kingdom and the Jersey pound is not a separate currency but is an issue of banknotes

Although ATMs were originally developed as just cash dispensers, they have evolved to include many other bank-related functions. In some countries, especially those which benefit from a fully integrated cross-bank ATM network (e. g. : Multibanco in Portugal), ATMs include many functions which are not directly related to the management of one's own bank account, such as:

• Deposit currency recognition, acceptance, and recycling^[45][46]
• Paying routine bills, fees, and taxes (utilities, phone bills, social security, legal fees, taxes, etc. Multibanco is an Interbank network in Portugal owned and operated by Sociedade Interbancaria de Serviços S )
• Printing bank statements
• Updating passbooks
• Loading monetary value into stored value cards
• Purchasing
  • Postage stamps. An account statement or a bank statement is a summary of all Financial transactions occurring over a given period of time on a Deposit account, a Credit A passbook or bankbook is a paper book used to record bank transactions on a Deposit account. A stored-value card represents Money on deposit with the Issuer, and is similar to a Debit card. A postage stamp is an adhesive paper evidence of pre-paying a fee for postal services
  • Lottery tickets
  • train tickets
  • Concert ticket
  • Shopping mall gift certificates. A lottery is a form of Gambling which involves the drawing of lots for a prize A shopping mall or shopping centre is a building or set of buildings that contain Retail units with interconnecting Walkways enabling visitors Scrip is any Substitute for Currency which is not Legal tender and is often a form of credit.
• Games and promotional features^[47]
• Donating to charities^[48]
• Cheque Processing Module
• In Argentina, Austria, Australia, Belgium, Brazil, Cook Islands, Croatia, Finland, Germany, Hungary, Ireland, India, Indonesia, Israel, Italy, Poland, Philippines, Mexico, New Zealand, Nigeria, Norway, Portugal, Russia, South Africa, Spain, Sweden, Turkey, Ukraine and the United Kingdom, pre-paid cell phones can be recharged through some ATMs. For a topic outline on this subject see List of basic Argentina topics. Austria (Österreich ( officially the Republic of Austria (Republik Österreich For a topic outline on this subject see List of basic Australia topics. The Kingdom of Belgium is a Country in northwest Europe. It is a founding member of the European Union and hosts its headquarters as well as those |utc_offset = -2 to -4 |time_zone_DST = BRST |utc_offset_DST = -2 to -5 |cctld The Cook Islands ( Cook Islands Māori: Kūki 'Āirani) are a self-governing parliamentary democracy in free association with New Zealand. Croatia (Hrvatska ˈxȓvatska officially the Republic of Croatia ( Republika Hrvatska) is a southern Central European country at the crossroads between Finland, officially the Republic of Finland ( is a Nordic country situated in the Fennoscandian region of northern Europe. Germany, officially the Federal Republic of Germany ( ˈbʊndəsʁepuˌbliːk ˈdɔʏtʃlant is a Country in Central Europe. Hungary (Magyarország 'mɔɟɔrorsaːg) officially in English the Republic of Hungary ( Magyar Köztársaság, literally Magyar (Hungarian Republic Ireland (pronounced /ˈaɾlənd/ Éire) is the third largest island in Europe, and the twentieth-largest island in the world India, officially the Republic of India (भारत गणराज्य inc-Latn Bhārat Gaṇarājya; see also other Indian languages) is a country The Republic of Indonesia ( (Republik Indonesia is a Country in Southeast Asia. For a topic outline on this subject see List of basic Israel topics. Italy (Italia officially the Italian Republic, (Repubblica Italiana is located on the Italian Peninsula in Southern Europe, and on the two largest Poland (Polska officially the Republic of Poland The Philippines ( Filipino: Pilipinas, officially known as the Republic of the Philippines (fil ''Republika ng Pilipinas'' RP The United Mexican States ( or commonly Mexico (ˈmɛksɪkoʊ () is a federal constitutional Republic in North America. New Zealand is an Island country in the south-western Pacific Ocean comprising two main landmasses (the North Island and the South Island Nigeria, officially named the Federal Republic of Nigeria, is a federal Constitutional republic comprising thirty-six states and one Federal Norway ( Norwegian: Norge ( Bokmål) or Noreg ( Nynorsk) officially the Kingdom of Norway, is a Constitutional Portugal, officially the Portuguese Republic (República Portuguesa is a country on the Iberian Peninsula. Russia (Россия Rossiya) or the Russian Federation ( Rossiyskaya Federatsiya) is a transcontinental Country extending The Republic of South Africa (also known by other official names) is a country located at the southern tip of the continent of Africa Spain () or the Kingdom of Spain (Reino de España is a country located mostly in southwestern Europe on the Iberian Peninsula. "Sverige" redirects here For other uses see Sweden (disambiguation and Sverige (disambiguation. Turkey (Türkiye known officially as the Republic of Turkey ( is a Eurasian Country that stretches Ukraine (Україна Ukrayina, /ukrɑˈjinɑ/ is a country in Eastern Europe. The United Kingdom of Great Britain and Northern Ireland, commonly known as the United Kingdom, the UK or Britain,is a Sovereign state located

Increasingly Banks are seeking to use the ATM as a sales device to deliver pre approved loans and targeted advertising using products such as ITM (the Intelligent Teller Machine) from CR2 or Aptra Relate from NCR.

In Canada, ATMs are called guichets automatiques in French and sometimes "Bank Machines" in English. French ( français,) is a Romance language spoken around the world by 118 million people as a native language and by about 180 to 260 million people The Interac shared cash network does not allow for the selling of goods from ATMs due to specific security requirements for PIN entry when buying goods. Interac Association is a Canadian organization linking enterprises that have proprietary networks so that they may communicate with each other for the purpose ^[49]

ATMs can also act as an advertising channel for companies to advertise their own products or third-party products and services. ^[50]

A South Korean ATM with mobile bank port and bar code reader.

Manufactures have demonstrated and have deployed several different technologies on ATMs that have not yet reached worldwide acceptance, such as:

• Biometrics, where authorization of transactions is based on the scanning of a customer's fingerprint, iris, face, etc. Biometrics on ATMs can be found in Asia. ^[51][52][53]
• Cheque/Cash Acceptance, where the ATM accepts and recognise cheques and/or currency without using envelopes^[54] Expected to grow in importance in the US through Check 21 legislation. The Check Clearing for the 21st Century Act (or Check 21 Act) is a United States federal law,, enacted into law October 28, 2003 by the
• Bar code scanning^[55]
• On-demand printing of "items of value" (such as movie tickets, Travellers Cheques, etc. )
• Dispensing additional media (such as phone cards)
• Co-ordination of ATMs with mobile phones^[56]
• Customer-specific advertising^[57]
• Integration with non-banking equipment^[58][59]

Reliability

An ATM running Microsoft Windows that has crashed.

Before an ATM is placed in a public place, it typically has undergone extensive testing with both test money and the backend computer systems that allow it to perform transactions. Test Money (or Test Notes Test Bills Funny Money Monopoly Money are a part of the test apparatus that are often used with currency handling equipment such as Automatic Front-end and back-end are generalized terms that refer to the initial and the end stages of a process Banking customers also have come to expect high reliability in their ATMs,^[60] which provides incentives to ATM providers to minimize machine and network failures. Financial consequences of incorrect machine operation also provide high degrees of incentive to minimize malfunctions. ^[61]

ATMs and the supporting electronic financial networks are generally very reliable, with industry benchmarks typically producing 98. 25% customer availability for ATMs^[62] and up to 99. 999% availability for host systems. If ATMs do go out of service, customers could be left without the ability to make transactions until the beginning of their bank's next time of opening hours.

Of course, not all errors are to the detriment of customers; there have been cases of machines giving out money without debiting the account, or giving out higher value notes as a result of incorrect denomination of banknote being loaded in the money cassettes. Denomination is a proper description of a Currency amount usually for Coins or Banknotes Denominations may also be used with other means of payment like A banknote (often known as a bill, paper money or simply a note) is a kind of Negotiable instrument, a Promissory note made by a Errors that can occur may be mechanical (such as card transport mechanisms; keypads; hard disk failures); software (such as operating system; device driver; application); communications; or purely down to operator error. A machine is any device that uses Energy to perform some activity An operating system (commonly abbreviated OS and O/S) is the software component of a Computer system that is responsible for the management and coordination In computing a device driver or software driver is a Computer program allowing higher-level computer programs to interact with a Hardware device Application software is a subclass of Computer software that employs the capabilities of a computer directly and thoroughly to a task that the user wishes to perform In Telecommunications, information transfer is the process of moving messages containing User information from a source to a sink

An ATM running OS/2 that has crashed.

To aid in reliability, some ATMs print each transaction to a roll paper journal that is stored inside the ATM, which allows both the users of the ATMs and the related financial institutions to settle things based on the records in the journal in case there is a dispute. In some cases, transactions are posted to an electronic journal to remove the cost of supplying journal paper to the ATM and for more convenient searching of data.

Improper money checking can cause the possibility of a customer receiving counterfeit banknotes from an ATM. A counterfeit is an imitation that is made usually with the intent to deceptively represent its content or origins While Bank personnel are generally trained better at spotting and removing counterfeit cash,^[63][64] the resulting ATM money supplies used by banks provide no absolute guarantee for proper banknotes, as the Federal Criminal Police Office of Germany has confirmed that there are regularly incidents of false banknotes having been provided through bank ATMs. The Federal Criminal Police Office of Germany (in German: Bundeskriminalamt or BKA is the national investigative Police agency of ^[65] Some ATMs may be stocked and wholly owned by outside companies, which can further complicate this problem when it happens. Bill validation technology can be used by ATM providers to help ensure the authenticity of the cash before it is stocked in an ATM; ATMs that have cash recycling capabilities include this capability. A currency detector is a device that determines if a piece of currency is or is not counterfeit ^[66]

Fraud

As with any device containing objects of value, ATMs and the systems they depend on to function are the targets of fraud. Fraud against ATMs and people's attempts to use them takes several forms.

The first known instance of a fake ATM was installed at a shopping mall in Manchester, Connecticut in 1993. Manchester is a town in Hartford County, Connecticut, United States. By modifying the inner workings of a Fujitsu model 7020 ATM, a criminal gang known as The Bucklands Boys were able to steal information from cards inserted into the machine by customers. is a Japanese company specializing in Semiconductors Computers ( Supercomputers Personal computers, servers, Telecommunications ^[67]

In some cases, bank fraud could occur at ATMs whereby the bank accidentally stocks the ATM with bills in the wrong denomination, therefore giving the customer more money than should be dispensed. ^[68] The result of receiving too much money may be influenced on the Card Holder Agreement in place between the customer and the Bank. ^[69][70]

In a variation of this, WAVY-TV reported an incident in Virginia Beach of September 2006 where a hacker who had probably obtained a factory-default admin password for a gas station's white label ATM caused the unit to assume it was loaded with $5 USD bills instead of $20s, enabling himself--and many subsequent customers--to walk away with four times the money they said they wanted to withdraw. WAVY-TV is the NBC affiliate serving the Norfolk / Portsmouth / Newport News Virginia television market ( DMA) ^[71][72]

ATM behavior can change during what is called "stand-in" time, where the Bank's cash dispensing network is unable to access databases that contain account information (possibly for database maintenance). In order to give customers access to cash, customers may be allowed to withdraw cash up to a certain amount that may be less than their usual daily withdrawal limit, but may still exceed the amount of available money in their account, which could result in fraud. ^[73]

Card fraud

In an attempt to prevent criminals from shoulder surfing the customer's PINs, some banks draw privacy areas on the floor. In Computer security, shoulder surfing refers to using direct observation techniques such as looking over someone's shoulder to get information

For a low-tech form of fraud, the easiest is to simply steal a customer's card. A later variant of this approach is to trap the card inside of the ATM's card reader with a device often referred to as a Lebanese loop. A Lebanese loop is a device used to commit Fraud and Identity theft by exploiting Automated teller machines (ATMs When the customer gets frustrated by not getting the card back and walks away from the machine, the criminal is able to remove the card and withdraw cash from the customer's account.

Another simple form of fraud involves attempting to get the customer's bank to issue a new card and stealing it from their mail. ^[74]

Some ATMs may put up warning messages to customers to not use them when it detects possible tampering.

The concept and various methods of copying the contents of an ATM card's magnetic stripe on to a duplicate card to access other people's financial information was well known in the hacking communities by late 1990. ^[75]

In 1996 Andrew Stone, a computer security consultant from Hampshire in the UK was convicted of stealing in excess of £1 million Sterling (at the time equivalent to US$1. 6 million) by pointing high definition video cameras at ATMs from a considerable distance, and by recording the card numbers, expiry dates, etc. from the embossed detail on the ATM cards along with video footage of the PINs being entered. After getting all the information from the videotapes, he was able to produce clone cards which not only allowed him to withdraw the full daily limit for each account, but also allowed him to sidestep withdrawal limits by using multiple copied cards. In court, it was shown that he could withdraw as much as £10,000 per hour by using this method. Stone was sentenced to five years and six months in prison. ^[76]

By contrast, a newer high-tech modus operandi involves the installation of a magnetic card reader over the real ATM's card slot and the use of a wireless surveillance camera or a modified digital camera to observe the user's PIN. Modus operandi (often used in the abbreviated forms MO or simply Method) is a Latin phrase approximately translated as " mode of operation Card data is then cloned onto a second card and the criminal attempts a standard cash withdrawal. The availability of low-cost commodity wireless cameras and card readers has made it a relatively simple form of fraud, with comparatively low risk to the fraudsters. ^[77]

In an attempt to stop these practices, countermeasures against card cloning have been developed by the banking industry, in particular by the use of smart cards which cannot easily be copied or spoofed by un-authenticated devices, and by attempting to make the outside of their ATMs tamper evident. A smart card, chip card, or Integrated circuit card ( ICC) is any pocket-sized card with embedded integrated Tamper-evident describes a device or process that makes unauthorised access to the protected object easily detected Older chip-card security systems include the French Carte Bleue, Visa Cash, Mondex, Blue from American Express^[78] and EMV '96 or EMV 3.11. Carte Bleue ("Blue Card" is a major Debit card payment scheme operating in France. Visa Cash is a Smart card Electronic cash system owned by VISA. Mondex is a Smart card Electronic cash system which was originally developed by National Westminster Bank in the United Kingdom and subsequently American Express ( sometimes known as " AmEx " or " Amex " is a diversified global Financial services company headquartered in EMV is a standard for interoperation of IC cards ("Chip cards" and IC capable POS terminals and ATM 's for authenticating credit The most actively developed form of smart card security in the industry today is known as EMV 2000 or EMV 4.x. EMV is a standard for interoperation of IC cards ("Chip cards" and IC capable POS terminals and ATM 's for authenticating credit

EMV is widely used in the UK (Chip and PIN) and parts of Europe, but when it is not available in a specific area, ATMs must fallback to using the easy to copy magnetic stripe to perform transactions. EMV is a standard for interoperation of IC cards ("Chip cards" and IC capable POS terminals and ATM 's for authenticating credit Chip and PIN is the name of a government-backed initiative in the United Kingdom to implement the EMV standard for secure payments This fallback behaviour can be exploited. ^[79] However the fallback option has been removed by several UK banks, meaning if the chip is not read, the transaction will be declined.

Related devices

A Talking ATM is a type of ATM that provides audible instructions so that persons who cannot read an ATM screen can independently use the machine. A Talking ATM is a type of Automated teller machine (ATM that provides audible instructions so that persons who cannot read an ATM screen can independently use the machine All audible information is delivered privately through a standard headphone jack on the face of the machine. In Electronics, a jack is generally a Socket (female connector but because the related term Jack plug is often abbreviated to just jack confusion can Alternatively, some banks such as the Nordea and Swedbank use a built-in external speaker which may be invoked by pressing the talk button on the keypad. Nordea Bank AB is a Nordic financial services group operating in Northern Europe, based in Stockholm. Swedbank AB (formerly called FöreningsSparbanken) is a leading Nordic - Baltic Banking group with 8 Information is delivered to the customer either through pre-recorded sound files or via text-to-speech speech synthesis. Sound' is Vibration transmitted through a Solid, Liquid, or Gas; particularly sound means those vibrations composed of Frequencies Speech synthesis is the artificial production of human speech.

A postal interactive kiosk may also share many of the same components as an ATM (including a vault), but only dispenses items relating to postage. An Interactive kiosk is a Computer terminal that provides information access via electronic methods ^[80][81]

A scrip cash dispenser may share many of the same components as an ATM, but lacks the ability to dispense physical cash and consequently requires no vault. A scrip cash dispenser is a computerized telecommunications device that allows a Financial institution 's Customers a Secure method of receiving cash in a Instead, the customer requests a withdrawal transaction from the machine, which prints a receipt. The customer then takes this receipt to a nearby sales clerk, who then exchanges it for cash from the till. ^[82]

A Teller Assist Unit may also share many of the same components as an ATM (including a vault), but they are distinct in that they are designed to be operated solely by trained personnel and not the general public, they do not integrate directly into interbank networks, and are usually controlled by a computer that is not directly integrated into the overall construction of the unit. Teller assist units (TAU also known as automatic teller safes (ATS or teller cash dispensers (TCD are devices used in Retail banking for the disbursement

See also

• EFTPOS
• Banknote counter
• Automated cash handling
• Financial cryptography
• James Goodfellow
• List of companies involved with ATMs
• Payroll Card
• Electronic funds transfer
• Phantom withdrawal
• Plofkraak
• Automated Teller Machine Communication Security
• Cash register
• Sarbanes Oxley compliance
• Verification and Validation

References

Books

External links

• HowStuffWorks.com - Video: Inside an ATM
• The Money Machines – An account of U. S. ATM history; By Ellen Florian, Fortune. Fortune is a Global Business Magazine published by Time Inc's Fortune|Money Group com
• Britain celebrates 40 years of the ATM
• gmanews.tv/video, Beware of ATM scam, police tell public - 01/23/2008 (in Filipino)
• atm's with backward card sign's