Fraud detection in self-service terminal
A method includes monitoring patterns of commands provided by a self-service terminal controller, identifying potential fraud in the monitored patterns of commands, and suspending operation of a dispenser of the self-service terminal responsive to the identification of potential fraud.
1. A method, comprising:
tracking authentication commands and dispense commands processed on a controller comprising at least one processor and memory of a Self-Service Terminal (SST), wherein the controller is coupled to a media dispenser comprising the at least one processor of the SST;
identifying by the at least one processor, a pattern associated with one or more of authentication commands and the dispense commands indicating potential fraud associated with the media dispenser; and
suspending by the at least one processor, operation of the media dispenser based on the identifying.
2. The method of claim 1 , wherein identifying further includes identifying the pattern based on a frequency between the dispense commands.
3. The method of claim 1 , wherein identifying further includes identifying the pattern based a total number of a same one of the dispense commands being consecutively processed on the media dispenser within an identified period of time.
4. The method of claim 1 , wherein identifying further includes identifying the pattern based on a single authentication command being associated with more than one of the dispense commands.
5. The method of claim 1 , wherein identifying further includes identifying the pattern based on a deviation from expected dispense commands detected in the dispense commands.
6. The method of claim 1 , wherein identifying further includes identifying the pattern based on matching a known fraudulent pattern to one or more of the authentication commands and the dispense commands.
7. The method of claim 1 , wherein identifying further includes identifying the pattern based on a statistical analysis of the authentication commands and the dispense commands.
8. The method of claim 1 , wherein identifying further includes identifying the pattern based on a total number of dispense commands detected within a given period of time.
9. The method of claim 8 , wherein identifying the pattern further includes obtaining the given period of time based on the transaction terminal.
10. A non-transitory computer-readable storage medium comprising executable instructions that when executed by a controller comprising at least one processor and a memory of a Self-Service Terminal (SST), wherein the controller is coupled to a media dispenser that comprises the at least one processor, which causes the at least one processor to perform the operations of:
tracking authentication commands and dispense commands processed on the media dispenser;
identifying a pattern associated with one or more of authentication commands and the dispense commands indicating potential fraud associated with the media dispenser; and
suspending operation of the media dispenser based on the identifying.
11. The non-transitory computer readable medium of claim 10 , wherein tracking further includes maintaining known patterns of fraud for the dispense commands based on the transaction terminal and using the known patterns in the determining.
12. The non-transitory computer readable medium of claim 10 , wherein tracking further includes maintaining known patterns of fraud for the dispense commands based on a location of the transaction terminal and using the known patterns in the determining.
13. The non-transitory computer readable medium of claim 10 , maintaining further includes maintaining different types of patterns that are detected and used with the determining.
14. The non-transitory computer readable medium of claim 13 , wherein maintaining the different types further includes maintaining the types based on a combination of a same authentication command used with multiple ones of the dispense commands and consecutively processed by the media dispenser, a same dispense amount processed with multiple ones of the dispense commands and consecutively processed by the media dispenser, a total number of the dispense commands processed within a given period of time, a frequency between processing a same dispense command on the media dispenser, a deviation in expected patterns detected in the dispense commands, and a statistical analysis of authentication commands and the dispense commands processed by the media dispenser.
15. A system, comprising:
a Self-Service Terminal (SST) comprising:
a controller comprising at least one processor and a memory, wherein the controller is coupled to a media dispenser, wherein the media dispenser comprises the at least one processor that is configured to:
track authentication commands and dispense commands processed on the media dispenser;
determine whether a fraudulent pattern is detected in one or more of the authentication commands and the dispense commands; and
suspend operation of the media dispenser when the fraudulent pattern is detected.