Crime, Safety, and the Police

[ScatManDoo]

Personally I rarely if ever use the ATM's in Tijuana since I dislike paying the transaction fees. I only carry enough money for the day. If I do have do use a ATM in Tijuana I will only go to one of major banks like HSBC. One thing nice about HSBC is that they have a ATM that puts out US dollars. The only downside is that their ATM is closed at night.

The HSBC ATM inside of Soriana (grocery) on Revolution between 2nd and 3rd street is available at night.

[ItalianBWalls]

How do you get enough pesos to bring in? Or do you just bring USD? I ask because the Cambios at the border have a 50 dollar limit for exchanging dollars into pesos, that's nothing. I had to go to three Cambios to get enough pesos to pay for my needs for one day. I ended up using the ATM in the Cascadas lobby at the next days of my trip.

No one has really answered the question of what to do if the hotel safe is not accessible. When I went to grab the safe key at the front desk, they looked in their pile and it was gone. I do not know if this is uncommon or what.

I also got pesos from the ATM located in the table game room at Hotel Pueblo. I do not remember the fee, but the ATM was much more higher tech than the Cascadas one, and located fairly deep into the hotel, so I imagine it must be safer. What do you guys think?

IB.

That is the key. Bring enough cash for your stay. Lock the cash in hotel safe. Take enough with you each day, for your daily use. Problem solved.

[Hargow20]

Personally I rarely if ever use the ATM's in Tijuana since I dislike paying the transaction fees. I only carry enough money for the day. If I do have do use a ATM in Tijuana I will only go to one of major banks like HSBC. One thing nice about HSBC is that they have a ATM that puts out US dollars. The only downside is that their ATM is closed at night.

ATM manufacturers could do more. All sorts of protrusions attached to ATMs these days. Cameras (for security), mirrors, deposit drawers etc. If they made the entire front one sheet of steel (or whatever) with cutouts just for the screen, the money slot, and the card slot (and just a slot, not a device within a larger hole) then it would be easier to spot the more obvious devices that should not be there.

This one annoys me. The protrusion over the card slot is probably genuine here. But many ATMs have a recess instead, so is this genuine or is it an add-on? Such devices covering a recess and looking like this picture used to be common for swiping your details years ago.

https://media.cuinsight.com/wp-conte...d-46112266.jpg

Indeed, though even that is not infallible. Firstly I've yet to stay at a hotel in Mexico that actually had a safe (only around 4 so far, from cheap motels to US priced 3-4* Secondly, after inadvertently locking my stuff in a safe in SE Asia somewhere, where the hotel just sent a bellboy with the master key to all the safes in the hotel, I have little faith that they're completely secure. But most definitely better than nothing, and beats the casual fingering of your stuff.

[Dcrist0527]

ATM manufacturers could do more. All sorts of protrusions attached to ATMs these days. Cameras (for security), mirrors, deposit drawers etc. If they made the entire front one sheet of steel (or whatever) with cutouts just for the screen, the money slot, and the card slot (and just a slot, not a device within a larger hole) then it would be easier to spot the more obvious devices that should not be there.

This one annoys me. The protrusion over the card slot is probably genuine here. But many ATMs have a recess instead, so is this genuine or is it an add-on? Such devices covering a recess and looking like this picture used to be common for swiping your details years ago.

You are 100% right. ATM manufacturers do need to do more. And they are. But right now, they are throwing all sorts of solutions at the problem. That's good and bad. But the real problem is the game. Your comments on protrusions and recessions are exactly the issue. But it's a game. The bad guys adapt. If you look at the actual skimmers, these things are a couple of pieces of pliable metals. I'm exaggerating but it's not much more than a couple paperclips. IMO, the protrusions are the best defense right now, in conjunction with a lighting indicator. I don't have a photo right now but a protrusion that "lights up" does have some confirmation of the absence of a skimming device. But #1, who knows to look for that! And #2, they will beat that system as well. Just a matter of time.

The PIN and Chip process is by far the best defense. Cloning a card with a chip is not cost effective for the bad guys. But the PIN and Chip process is widely misunderstood, both by the consumer and the vendor. In fact, many consumers intentionally damage the Chip to force a vendor to the "old" process, which not only circumvents the safeguards but places liability on the vendor with the new laws.

Hardly a fascinating topic on ISG, I know. LOL.

Bottom line, guys, this can and does happen everywhere. Frankly, I can't say it's more or less common in Mexico, Thailand, US or any other locale. There is a certain international bend to this. Someone mentioned charges in Haiti. Any time you use your card, even at your local gas station, just be aware. And be aware of your surroundings.

[Simmer]

Sorry, maybe I wasn't clear. There are various methods but any type requires two steps. 1. Capturing card data. That is done by Bluetooth (which, yes, is typically nearby. 10-20 ft is more than enough for an unsuspecting victim), a private "WiFi-like network" or recovering the actual device. I can assure you, retrieving the device is quite common. They don't leave the devices in very long. No more than a day or so. In the right ATM, they capture hundreds of card data. 2. They need some way to observe the PIN being entered. If it's Bluetooth or WiFi, that could be someone watching, a zoom lens, or camera. Or, if they leave it there for a day, they'll set a camera. Believe it or not, it's not uncommon for that camera to be in plain sight of the ATM. It's not terribly obvious but still noticeable.

I know we are picking on Cascadas but I promise you, this occurs a lot in the US. Gas stations are most common but they routinely use big bank driveup ATMs, and even the verifone machines you use at a POS like Target. Or even inside the bank itself. It is a significant issue. Thankfully, card companies and banks and in many cases, retail stores (I. E. Target) generally reimburse for this. However, those fraud costs are ultimately passed on.

ATM manufacturers could do more. All sorts of protrusions attached to ATMs these days. Cameras (for security), mirrors, deposit drawers etc. If they made the entire front one sheet of steel (or whatever) with cutouts just for the screen, the money slot, and the card slot (and just a slot, not a device within a larger hole) then it would be easier to spot the more obvious devices that should not be there.

This one annoys me. The protrusion over the card slot is probably genuine here. But many ATMs have a recess instead, so is this genuine or is it an add-on? Such devices covering a recess and looking like this picture used to be common for swiping your details years ago.

https://media.cuinsight.com/wp-conte...d-46112266.jpg

That is the key. Bring enough cash for your stay. Lock the cash in hotel safe. Take enough with you each day, for your daily use. Problem solved.

Indeed, though even that is not infallible. Firstly I've yet to stay at a hotel in Mexico that actually had a safe (only around 4 so far, from cheap motels to US priced 3-4* Secondly, after inadvertently locking my stuff in a safe in SE Asia somewhere, where the hotel just sent a bellboy with the master key to all the safes in the hotel, I have little faith that they're completely secure. But most definitely better than nothing, and beats the casual fingering of your stuff.

[Ctytek]

That is the key. Bring enough cash for your stay. Lock the cash in hotel safe. Take enough with you each day, for your daily use. Problem solved.

I advised bros to use reputable national big bank branches in known safe areas. Some bros responded with places that were the safest with no issues. I personally do not use the ATM machines or swipe my card anywhere. The amount of cash I bring across the border is sufficient for all of my transactions.

[Hargow20]

We all need to be mindful of just how dangerous Mexico can be. !!

Airlines cut back on flights to Cancun, other tourist spots in Mexico after reports of violence, travelers blacking out.

(https://www.dallasnews.com/life/trav...elers-blacking).

[Dcrist0527]

Perhaps so but the reason the OP provided for using Bluetooth is obviously not correct.

"Also some of the new ones use Bluetooth to transmit the data, so thieves do not have to go back to retrieve the data."

The thieves would have to go back to within a 10 meter radius of the crime scene to retrieve data. That's pretty much going back to the scene of the crime. The OP is insinuating that Bluetooth can transmit the data back to their crime lab 20 miles away, which is certainly not true.

Sorry, maybe I wasn't clear. There are various methods but any type requires two steps. 1. Capturing card data. That is done by Bluetooth (which, yes, is typically nearby. 10-20 ft is more than enough for an unsuspecting victim), a private "WiFi-like network" or recovering the actual device. I can assure you, retrieving the device is quite common. They don't leave the devices in very long. No more than a day or so. In the right ATM, they capture hundreds of card data. 2. They need some way to observe the PIN being entered. If it's Bluetooth or WiFi, that could be someone watching, a zoom lens, or camera. Or, if they leave it there for a day, they'll set a camera. Believe it or not, it's not uncommon for that camera to be in plain sight of the ATM. It's not terribly obvious but still noticeable.

I know we are picking on Cascadas but I promise you, this occurs a lot in the US. Gas stations are most common but they routinely use big bank driveup ATMs, and even the verifone machines you use at a POS like Target. Or even inside the bank itself. It is a significant issue. Thankfully, card companies and banks and in many cases, retail stores (I. E. Target) generally reimburse for this. However, those fraud costs are ultimately passed on.

[Once Sailor]

LOL you know Bluetooth can only transmit data an extremely short distance, like 10 meters.

No.

From: https://www.sans.edu/cyber-research/...icle/bluetooth.

Misconception 1: "Bluetooth is a short-range technology".

Many organizations disregard the security of Bluetooth networks as a concern because they consider Bluetooth to be a short-range technology. Bluetooth technology is not limited to short-range connections however, offering three ranges of standard range connectivity, as shown in figure 1. With class 1 Bluetooth devices transmitting at 100 mW, which have a standard range of approximately 100 meters or 328 feet, range is comparable to that of an 802.11 be WLAN device. Class 1 devices are most commonly implemented in devices where power is plentiful, such as laptop and desktop systems.

So ATM machines and gas pumps have the power to transmit further. Phones and mobile devices use the shorter range bluetooth to save on power consumption.

[ClamSlammer]

Yes, bluetooth is used. They need to be reasonably close in many cases to see your PIN. They also use a private network, (like a private wifi network).

Perhaps so but the reason the OP provided for using Bluetooth is obviously not correct.

"Also some of the new ones use Bluetooth to transmit the data, so thieves do not have to go back to retrieve the data."

The thieves would have to go back to within a 10 meter radius of the crime scene to retrieve data. That's pretty much going back to the scene of the crime. The OP is insinuating that Bluetooth can transmit the data back to their crime lab 20 miles away, which is certainly not true.

[MongerHunger]

Either its a coincidence or there a spike in such fraud.

I was there couple weeks back and I got a fraud notification from my bank today. Someone withdrew cash from ATM using my card and pin in LA.

I had used my card in Cascadas lobby and in the ATM near the rear entrance to Cascadas in the alley, so its either in the hotel itself or nearby.

Are people scared of getting robbed, is that why they don't carry enough cash to cover their expenses in Tijuana and have to use risky ATM machines that are targeted in a high traffic area?

I advised bros to use reputable national big bank branches in known safe areas. Some bros responded with places that were the safest with no issues. I personally do not use the ATM machines or swipe my card anywhere. The amount of cash I bring across the border is sufficient for all of my transactions.

[Dcrist0527]

LOL you know Bluetooth can only transmit data an extremely short distance, like 10 meters.

Yes, bluetooth is used. They need to be reasonably close in many cases to see your PIN. They also use a private network, (like a private wifi network).

[HornyIndo]

Either its a coincidence or there a spike in such fraud.

I was there couple weeks back and I got a fraud notification from my bank today. Someone withdrew cash from ATM using my card and pin in LA.

I had used my card in Cascadas lobby and in the ATM near the rear entrance to Cascadas in the alley, so its either in the hotel itself or nearby.

[Dcrist0527]

As with anything technology marches on. Most skimmers now are internal to the machine, so no way of identifying them from the outside like before. It is a really big problem in 'Merica now with gas stations, in fact the US Secret Service recommends you pay cash for filling up gas. (There was a USA Today article around the 4th of July.) Also some of the new ones use Bluetooth to transmit the data, so thieves do not have to go back to retrieve the data.

I responded to Oosik via PM but thought I would share here too. This is something I'm familiar with in my day job. LOL.

Once Sailor has some great advice. These skimmers are largely undetectable to everyday people. As mentioned, US gas stations are very common. Two other things to add:

The timeframe for the fraud to occur varies greatly. Often times, it takes a day or two for bogus charges to show up. But sometimes it takes months. Most often, they use the information to create a clone. Depending on the organized crime outfit that captures the data, they'll sell it on the black market. The Russian mob and Eastern Europe crime families are very efficient with this. (These are not typically run by street criminals.).

The other thing to keep in mind is where there is a skimmer, there is very likely something or someone watching you type your PIN. That could be someone many yards away with a zoom lens or a camera. As mentioned, the bluetooth or wireless network function is common. But the crooks that recover the device utilize cameras.

This scheme is significantly underreported and I'm not trying to alarm anyone but you do need to be aware anywhere you swipe your card.

[ClamSlammer]

Also some of the new ones use Bluetooth to transmit the data, so thieves do not have to go back to retrieve the data.

LOL you know Bluetooth can only transmit data an extremely short distance, like 10 meters.