Fraud detection in self-service terminal
A method includes monitoring patterns of commands provided by a self-service terminal controller, identifying potential fraud in the monitored patterns of commands, and suspending operation of a dispenser of the self-service terminal responsive to the identification of potential fraud.
1. A non-transitory computer-readable storage medium comprising executable instructions that when executed by a processor of a dispenser of a self-service terminal causes the processor to:
identify a transaction being processed on the self-service terminal;
monitor authentication commands provided on the self-service terminal during the transaction;
monitor dispense commands provided on the self-service terminal during the transaction;
generate patterns of commands from the authentication commands and the dispense commands;
identify potential fraud from the patterns of commands by comparing the patterns of commands against known patterns that correspond to fraud; and
suspend operation of the dispenser of the self-service terminal responsive to identification of the potential fraud;
wherein the executable instructions are firmware of the dispenser integrated into the self-service terminal.
2. The non-transitory computer-readable storage medium of claim 1 wherein one pattern of potential fraud comprises a number of dispense commands within an identified time period.
3. The non-transitory computer-readable storage medium of claim 1 wherein one pattern of potential fraud comprises a number of consecutive dispense commands associated with a same account number.
4. The non-transitory computer-readable storage medium of claim 1 , wherein one pattern of potential fraud comprises a pattern of continual dispense commands without corresponding cardholder authentication commands.
5. The non-transitory computer-readable storage medium of claim 1 , wherein the executable instructions to suspend operation of the dispenser further includes placing the dispenser in a suspended mode of operation.
6. The non-transitory computer-readable storage medium of claim 1 , wherein the self-service terminal is an automated teller machine (ATM), and the dispenser is integrated into the ATM to dispense currency from the ATM.
7. A method comprising:
identifying, by a processor of a dispenser of a self-service terminal, a transaction being processed on the self-service terminal;
monitoring, by the processor, authentication commands provided on the self-service terminal during the transaction;
monitoring, by the processor, dispense commands on the self-service terminal;
generating, by the processor, a pattern of the authentication commands and dispense commands;
comparing, by the processor, the pattern to known patterns corresponding to potential fraud; and
placing, by the processor, the dispenser in a suspended mode of operation responsive to the pattern matching a known pattern corresponding to potential fraud;
wherein the processor comprises firmware of the dispenser, and the dispenser is integrated into the self-service terminal.
8. The method of claim 7 wherein one pattern of potential fraud comprises a number of dispense commands within an identified time period.
9. The method of claim 8 wherein the number of dispense commands comprises N, and the identified time period is N times an average transaction time, wherein N is greater than or equal to 4.
10. The method of claim 7 wherein one pattern of potential fraud comprises a number of consecutive dispense commands associated with a same account number.
11. The method of claim 7 wherein one pattern of potential fraud comprises a pattern of multiple dispense commands without corresponding cardholder authentication commands.
12. The method of claim 7 wherein one pattern of potential a d is location dependent.
13. The method of claim 7 wherein one pattern of potential fraud is based on a pattern of commands corresponding to a specific customer's commonly performed transactions.