please empty your brain below

So sorry to hear that dg! You should get your money back. Change banks if you don’t!

I wonder why contactless ATMs have not taken off? That would defeat this scam. The technology exists and is cheap now.
DG, I long ago succumbed to the need for two bank accounts, initially to take advantage of fee free international transactions, but also came to realise the benefit of flexibility when the inevitable happened.

@Dan There was a report only last week saying that there had been a huge increase in contactless fraud and further increases in the limit were unlikely. The machines I use already allow contactless withdrawal. The
Sorry to hear of your misfortunes and hope all gets sorted out.

This is one reason I try to only use cash machines actually inside a bank. I know this isn't always practical / possible but it does reduce the risk of the machine being tampered with.

On the subject of fraud in my experience the banks have been very good, albeit a bit annoying once when I was trying to book a series of flights and hotels and the card got stopped whilst doing so, the bank obviously thinking I was up to no good.
So now I'll be less annoyed by people getting cash back at the supermarket checkout. But I can still fume that Lidl terminals are so slow. Not a happy birthday. So happy unbirthday today DG.
Ken,

But contactless fraud is high because you don't need a pin. If the machine were contactless but needed a pin for every transaction - regardless of value - then it should be just as safe without any risk of losing your card.
Another way the banks could help defeat this is to give you the option of a six digit pin and ask specifically for three of the digits each time. Then, even if someone does get the pin you used, it is unlikely they could take advantage of it. I realise this can be challenging for some (four digits was originally chosen as something most people could remember) so it should be optional.

Another thing I do is always take out the same amount which is not one of the main options and has to be typed in. This means that if anyone else takes out money it will stand out.

I feel very strongly that the banks have failed to introduce security measures that would easily defeat this scam and, consequently, they should always pay up.
A simple way to avoid Lebanese Loops is to avoid ATM’s with a flat card slot like the one you used...

Sorry DG!
I do wonder sometimes how secure some cash machines are by default. Until recently there was a machine with a green screen at Euston. It must have been ancient. Had it been upgraded? Who knows, but it makes you wonder if they just focus on machines most at risk. I suspect that is the case.

It is always going to be a battle with these scumbags.
Have you reported it to the police, or is that the bank’s responsibility?

I hate the idea of that CCTV going unchecked.
I've never lost a card as a result of a 'Lebanese Loop' (I believe also known at one time as a Bucharest Belt) but this has reminded me of a similar experience.

It was at a petrol station. There was quite a queue which was possibly fortunate because it gave me time to look around. Something in the ceiling tiles - looking a bit like the head of a drawing pin - directly above the till caught my eye. As I got closer it became clearer what it was, and I was pretty damn sure it was a pinhole camera. Yup, dead above the payment terminal.

Trust no-one!
So it looked like it was the scammers you spoke too - on the bright side it was a 'soft' robbery, you weren't physically harmed or directly threatened, it's possible that if you pulled the device out they might have done both to get it back.

Like everything it comes down to cost, how much to upgrade all cash machines, as against losses from not bothering, considering that banks make xxx billion per year and they always moan about the fact that retail banking doesn't make money - then the chances of any nationwide upgrade is near zero.
The first transaction (you attempting to withdraw money) was an authorised transaction so its not up to the fraud team to authorise a refund.

More pertinently, if you bank is any good, you ought to be refunded automatically at some point during the next working day when reconciliation of the cash machine identifies a discrepancy between withdrawals and the money paid out and then your account is identified. If your bank isn't so go good you might have to report this so they can investigate - but one would hope the fraud department has set this in motion.

The bank doesn't want to end up with refunding you twice!
DG, if you have a relatively recent iPhone, you might want to consider using Apple Pay with your card. Since doing this last year, I've gone virtually cashless, and haven't needed to visit an ATM.

The transaction limit is much higher than the standard £30; it's context-dependent but typically can be in the hundreds of pounds. Because of the inherent iPhone security (eg Touch or Face ID), losing the phone shouldn't put your money at any risk.

Registering the card is quick and painless, and using it may be even easier than using a contactless card, depending on how you store the latter. If there is a disadvantage to Apple Pay, I've not discovered it yet.
Sorry to hear this happened, but glad top know they are sorting most of it out.

One frustration I have about these is that they are recorded as fraud, therefore something for the bank, a private corporation, to record & sort out. Trying to get this recorded as theft, which is what is actually is, in near impossible as it reduces the police's performance results.

The same happened to a friend of mine and she got in touch with her assembly member to have it properly recorded. The local police commissioner actually 'phoned her, not to updated her but to try to have her not record it as a crime!
Sorry to hear this dg! I have also gone (almost) completely cashless of late and started using Monzo - the trendy upstart ethical bank. It comes with a beautiful app that tracks your spending and gives you some satisfying stats each month. You can also "freeze" your card temporarily from the app without having to call anyone and then unfreeze it if you find it. I've got a golden ticket that lets you sign up instantly if you want it! (also they do next day delivery on the card). Sorry this sounds like an advert but it really is very good!
I'm sure many people enjoy the convenience of paying for stuff with their phone, but I have no plans to join them.
A very useful post. I never use cashpoints, and would have absolutely no idea about 'Lebanese Loops' (which, form your pictures seem almost invisible). The scary thing here is that another commentator had had exactly the same thing happen at the same location.

If your bank refuse to refund you the original withdrawal, threaten to take it to the FOS. It's unlikely they will continue to refuse if you threaten this as they know you will win every time once the Ombudsman gets involved because you haven't been negligent.

If the bank still refuse, ask for a deadlock letter and take it to the FOS.
A quick Google throws up this:

https://www.telegraph.co.uk/personal-banking/savings/does-bank-score-dealing-fraud/
Crime drama indeed. Not at all what you need on your birthday, or indeed any other day.

Fraud is a crime too: someone other than DG using DG's card to obtain cash from his account is making a false representation. But if the bank has already refunded the transactions, isn't it the bank that has lost out?
That contactless only up to 30£ is a result of the British tradition of doing offline authentication. In many other countries you can pay any amount with contactless. Above a certain limit you have to enter the PIN or sign as you would have with dip or swipe. Hopefully this will be upgraded in the UK too.

And I don't think that using an expensive and large phone e.g. at a tube gate is very convenient. A watch maybe, but otherwise I'll stick to cards.
I had this happen to me whilst shopping at Waitrose.

I was able to identify that it happened there, at the checkout, and nowhere else. Of course I got my card back from the cashier .....even so, I subsequently discovered, within two minutes money had been withdrawn from my account directly outside the supermarket. On the basis of this I contacted Waitrose (little interest) and Metropolotan Police (even less) and clearly no attempt was made to identify someone who had to have been standing within view of Waitrose security cameras in order to have got my pin number.

Moral of this story - NO-ONE will even bother to try to catch the thief however assiduous you are, presumably because it's cheaper not to bother.
Sorry to hear about that.

I have the offical bank app on my phone for my personal account. It is pre loaded with all the numbers that are needed in case of fraud, both national/international. If you keep it regularly updated it gives tips on the lastest scams and what to look out for.

All ATM’s here are fitted with a special cover for the card slot, it has cut down on these types of scams since it was introduced 4 years ago.
Brian 9:13,
What has been stolen from DG? Nothing. The card is the property of the bank. So, really, it is down to the bank to sort it out. And what is the value of the card?

Brian 9:46,
No-one will bother to try and catch the thief because, with so much pressure on resources, this ranks very low compared to child protection, domestic violence, terrorism and other more serious issues.

Like shoplifting, the organisation involved has some ability to reduce crime levels in this field. So the police would rather spend time and effort working with the banks at a national level to make the world more secure rather than run around in a futile attempt to clear up the mess.
A couple of years ago my card was 'swallowed' by a cash machine not far from City Hall. It too struggled to return my card and after a few attempts the machine gave up and held on to it. At the time I assumed it was a faulty machine and called my bank to cancel my card.

It's only after reading today's post that I realise that it's possible I suffered the same fraud. Nobody came over to offer assistance but somebody could have been waiting around the corner for me to leave so they could retrieve my card. Thankfully I stayed next to the ATM whilst calling my bank so it was a wasted attempt.

I've since switched bank and not only does my new bank send alerts to my phone for every transaction made, I have the ability to freeze my card in the app.
Thank you for the warning and what to look out for.
I've never given ATM use much thought before - I guess you don't until it happens to you!
I don't even bother to shield my pin if there's no one else around, so I think I've been far too naive, and incredibly lucky so far!

Even more worrying about it happening INSIDE shops etc.

When the ATM I usually use failed to give me the money I tried to withdraw one time, I hot-footed it to the nearest branch of my bank. I missed them because they close at 4pm now apparently so had to return the next day to report it. Took about a week or so but noticed the £40 was quietly refunded.
A very interesting post DG and one that has set me thinking, especially after I checked the 'Lebanese Loop' link.

I am wary of contactless cards because presumably if you lose it, a criminal can use it until requested to enter the PIN which one bank told me was roughly every 1 in 5 to 1 in 10 transactions. Presumably were this to happen, then he/she would say 'oops always use contactless, I've forgotten the PIN' and use cash. The risk to the criminal is being caught on CCTV but if no CCTV what's the risk?

Non contactless cards are not my forte. If I am right in believing that either possession of the card or its cloning, although giving access to the magnetic stripe, is insufficient to yield the PIN then the crucial issue for a customer is to shield the PIN, always. I wonder if banks could devise a simple device that a customer pre programs with the PIN, holds over the keypad and then successively hits a button 4 times, triggering the keypad buttons.

Final thought: if I am right in believing that the PIN is key to non contactless fraud, is there not a simple solution to the Lebanese Loop risk? Insert card, then press 'Cancel'. If the card is retained, you have not given away the PIN. If the card is correctly returned, start again and shield the PIN.

Any bank workers who can advise, please do!
Proper public service blog-casting DG. Especially for someone like me that vaguely check the slot but wouldn't have spotted that device, and has become very blasé about covering PIN on entry.

I'm confused about the MO of this crime: How did the scumbags obtain your PIN? Were they 'shoulder surfing' you, or was there an additional device involved..? And when Scumbag 2 engaged you in conversation, was this when Scumbag 1 was removing the loop and your card, etc. do you think..?

dg writes: Don't know. Don't know. No.
I have more than one card with more than one bank, so even if this happened to me I would not be inconvenienced.

I am really surprised at the high proportion of UK residents who believe that this is somehow "not allowed" or "unusual".

I rarely use cash to pay in the UK, but I keep £30 cash in my wallet and £200 at home. If I think I will need more cash I go inside a bank to withdraw it (from a machine or a person).

Many bank ATMs in Australia are contactless (at least for cards issued by the same bank).

Card PINs in Hong Kong are 6 digits.

Actually, I have over 10 UK bank accounts, mainly because it is currently the best way to get reasonable rates of interest on savings.
Apart from the nasty experience, there is a bit of a 'resilience' warning here. I don't have multiple accounts or fancy apps, but do keep an emergency cash stash at home so that immediate life can go on if the infrastructure or 'routine' fails. This was ever since a freak occasion (on a bank holiday well before contactless and Oyster card days) when all the cash machines in my area had run out. I keep this up, as it would only take a simple power cut or cyber-webby-shenanigans to replicate the situation.
As a non-Londoner there is something I do not understand in all this.

For the past many months we have been assailed with news that TfL has abolished cash on buses, etc, because everyone just uses 'contactless' on every bus journey etc, which is then totted-up to a daily 'cap' for the transaction actually charged.

dg writes: Not everyone. About half.

Now, one of the commentators above says that a PIN is called for on contactless approx. every 1-in-5 or 1-in-10 transactions. Goodness, this must mean constant delays at the boarding point of buses, etc, as a stream of passengers attempts to board.

dg writes: PINs are not called for on buses.

How do you enter a PIN at the entry door of a bus anyway ? Our local uses do not (yet) accept contactless but I do not see how you could enter a PIN if called-for ?
DG, I hope your stolen card wasn't contactless. If so, keep checking those statements every day - your problems may only just be beginning !

Contactless payments can still be made even after the card has been cancelled, the record being eight months. Some contactless payments are verified online, but many are not, notably TfL bus and underground services.

Many banks are arrogantly forcing customers to have contactless cards against their will. The answer is to use a paper punch to make a hole immediately above the last digit of the long number. This usually defeats contactless but does not break Chip & PIN.
Maybe joining a queue and ensuring that the person in front starts and completes their whole transaction is the way to ensure that the machine is safe to use.
This would never have happened, DG, if you'd followed these steps I'm telling you afterwards.
Sorry to hear this DG - it's a bit of a minefield I think with all the random different card slots they have on them - they should mandate a single type or something!
This is a US site but may have some interesting information about skimmers.

https://krebsonsecurity.com/all-about-skimmers/
Gerry,

Whilst TfL might not always verify every card, I am pretty sure TfL has a stop list that is downloaded each day. So the miscreant might get away with it for one day.

Unfortunately I suspect numbers 'drop off the end' after a while so it probably isn't foolproof.

Anyway, it is not DG's problem now he has informed the bank though I agree a good scrutiny of future transactions would not go amiss - if the new card number is the same as the old one.
Ah, that might explain why the machines I've used here (Switzerland) pull the card in, then push it out 10mm or so before pulling it in again - I wondered.

Once the person in front of me didn't take their money, but had disappeared by the time I realised. I waited a few seconds and the machine pulled the money back in, and they should get their withdrawal reversed. I would have expected the same to happen to your original amount, as it was never dispensed.
"But contactless fraud is high because you don't need a pin."

Having worked in a bank's fraud department, this simply isn't true. To date, contactless fraud has been far lower than conventional fraud. I'm not sure of the reasons for this myself, but the statistics are out there. To give you an example, last year it only *just* passed cheque fraud in absolute numbers. Contactless was, last time I checked, responsible for about 5% of all card fraud while being used in just shy of 50% of transactions.

What wouldn't surprise me is if these stats somewhere covered up the number of fraud attempts. Its tiny contribution to overall fraud could be masked by some truly fantastical amounts attempted in other ways.

More back on track, I've seen at least eight different varieties of card reading interfaces purported to prevent fraud. Because there's so many of them, I literally have no idea what a proper one is supposed to look like. Other than the riskiest ones are like the sort pictured - very 1990s.
Worryingly for me, this is also my local cashpoint and one I've used many times over the past 6 or 7 years. I'm going to find myself looking extra carefully at those card slots in future!
The same happened to myself and my partner some years ago. Their card was retained, and no money came out. Someone standing behind them was 'trying to help' and told them what to do. They refused, and went into the Bank to report the problem, while I stayed beside the cash machine. While they were in there, the erstwhile 'helper' got fed up waiting, and told me to repeatedly press the top left button on the machine. This worked, and the card was returned, but no money.

I thought it was very suspicious that this person should know so much about the machine, but did not have a camera to photo their face.

They disappeared off, but managed to get £700 from my partner's account using another cash point. The Bank refunded the cash eventually.

Moral: if anyone offers to help in a situation like this, take a photo of them!
I see my post above has been edited to remove a salient fact, but you have left in a reference to his gender. Don't you think that gender is as relevant as the colour of his face?

dg writes: Apologies, I've edited it again to remove mention of gender as well as race.
Really interesting post. I hope you get fully refunded. This will really help me in future as I never realised these skimmers can be so small. I will be checking slots a lot more thoroughly in future.
Again thanks for this thought provoking article. As a result I've just discovered that when you ring the phone numbers listed in the 'Contact Us' section of my bank's phone app, you need to start by entering your sort code and account number. Which is not exactly helpful if you card is stuck in a machine. And hanging on til the message ended (and then repeated) didn't bring up any alternative options.
The card itself has two Lost/Stolen Card numbers to use. They're now stored in my phone for future reference.

dg writes: I'd forgotten, that happened to me too. I've added an extra paragraph to the post, thanks.
Update: All the money I lost has now been refunded to my account. My replacement card is due to arrive tomorrow. It's almost as if nothing happened :)
Update: My replacement card has arrived, and everything is back to how it was before...
...except I have a new PIN and 16 digit card number to memorise (which could take years).
PIN is the easier part, but I never force myself to memorise my card number(s)...










TridentScan | Privacy Policy