Source: CCTV news client
Mr. Zhang of Guizhou experienced a strange thing, one of his bank cards was inexplicably transferred nearly 6,000 yuan, the police initially thought it was a telecommunications fraud case, but after investigation, it was found that the problem appeared on a self-service cash machine, and the modus operandi made the police who had been in the industry for 16 years unheard of.
Hou Tianfu, captain of the economic investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: He said that during that time period, there were indeed several unfamiliar numbers that called him, and then after we verified these numbers with him, there were indeed domestic numbers and overseas numbers.
Mr. Zhang provided some recent phone numbers and chat records on the Internet, but unexpectedly, the results of the investigation did not seem to match the police's speculation.
Hou Tianfu, captain of the investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: After our investigation and verification, this number in China belongs to general advertising and sales, does not involve talking to the victim about the transfer of funds, does not ask the victim to click on some strange website links, and does not have business and funds.
Eliminate fraud! Change your mind and continue to look for clues
After verification, the domestic and foreign numbers that mr. Zhang had contacted were not directly related to the funds he had been swiped away. Since Mr. Zhang's bank card has not been lost, who can access this bank card and can they provide some clues?
Hou Tianfu, captain of the investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: His own bank card theft, according to the reason, the bank card has always been carried by him, belongs to his own control, we suspect that his family or the children in the family took advantage of his lack of attention, took out this bank card, went to the bank to withdraw this money, and then secretly returned the bank card to the owner, and then did not tell him.
However, the police visited Mr. Zhang's relatives and friends, this possibility was also ruled out, the case-handling personnel had some doubts, did not find that anyone had committed fraud on Mr. Zhang, and the people around him did not come into contact with this bank card.
Hou Tianfu, captain of the economic investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: Because from our experience in handling cases, the victim's bank card was inexplicably stolen and swiped, and the bank card should have been used in a record. At that time, our investigators contacted the corresponding bank, and then through retrieving the victim's bank insertion card information, withdrawal information and bank card use records, we found that in the stolen brushing time point, he did not use the bank card record.
Combing through the experiences before and after the crime, recalling inconspicuous little details
The police judge that there must be something missing in a certain link, and the clues are hidden in it. They found Mr. Zhang to re-sort out the experience before and after the crime, and Mr. Zhang recalled a detail that attracted the attention of the case-handling personnel.
Hou Tianfu, captain of the investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: After the victim thought about it carefully, he gave us a clue that he had never used it recently, but half a month ago, he had a record of using his bank card in a bank ATM in our jurisdiction, but he did not withdraw money at that time. In a regular bank, we inquired about the use record of this bank card, and there is really no such record. So at that time, we suspected that the problem was in the ATM machine where the victim used the bank card at that time.
The reporter recalled the withdrawal of money Through the self-service CASH machine appeared to be a hint
Mr. Zhang recalled the withdrawal process, when he and his friends needed to withdraw some cash on the way to play, but due to some reasons of the ATM itself, the money was not withdrawn at that time. According to Mr. Zhang's description, the police detected a hint of abnormality.
Victim Mr. Zhang: I was playing over there, I saw that there was a self-service cash machine, at that time I did not know how much money was paid on the card given to me by others, I went to check it out.
Mr. Zhang said the self-service bank had a small façade, flanked by shops on either side, and that there was only one CASH machine inside.
Victim Mr. Zhang: The outside is the kind of door of the bank ATM, which is exactly the same as the usual ATM, and there is no special place from the appearance, it is the usual ATM.
Whether it was the decoration or the ATM style, Mr. Zhang did not find anything wrong, so he walked over and inserted the bank card into the card slot.
Victim Mr. Zhang: There is the kind of logo of the bank ATM, so I didn't think much about it, and went in to swipe the card to inquire. It prompts you to enter the password, after entering the password, after a few seconds it pops up a dialog saying that the local suspension of service.
Seeing that the machine could not be used, Mr. Zhang did not care and returned the bank card and continued to play with friends. However, after a few days, Mr. Zhang found that the card was missing nearly six thousand yuan.
Hou Tianfu, captain of the investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: At that time, we thought it was very strange, if it was a system failure, the general ATM had already shown that it was a system failure before inserting the card, rather than saying that the bank card was inserted and the password was entered before the interface was displayed.
Knowing the incident, the case-handling personnel had more questions, and these questions pointed to the self-service cash machine used by Mr. Zhang, will this be a breakthrough in the case?
Hou Tianfu, captain of the investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: After he told us about the process, the investigators felt that this should be a problem, because the victim said with certainty that he had used a bank card at that time, only used it once at this ATM, and other family members and friends did not have the information of his bank card, and his bank card was not associated with WeChat and Alipay on the Internet.
The case-handling personnel judged that this did not seem to be an ordinary case of theft, and they rushed to the self-service cash machine used by Mr. Zhang to verify, could they find anything suspicious?
Yang Gang, deputy director of the Public Security Bureau of Leishan County, Guizhou Province: Asked a lot of people around the visit, the people said that this is a regular coming, looking at the uniform of the bank worn, and then doing decoration and installing ATM machines.
Li Yongyong, deputy captain of the economic investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: The installation of the ATM machine at that time was just like this picture, and this logo was exactly the same as the ATM installation point of a bank for withdrawal. The normal ATM machine has only one pinhole camera, and this ATM machine has a detailed look, in addition to this pinhole camera, there is also a pinhole camera on the right side of it, which is different from the normal ATM.
According to the police, the ordinary self-service cash machine only has a camera located in the middle position above the machine, and the left position above the cash machine has a pinhole camera secretly.
Li Yongyong, deputy captain of the economic investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: There is also a place where the normal ATM page has seven to eight option functions, and then this ATM machine has only this one option, which is a non-financial function, so it is also suspicious of the normal ATM.
The increase in cameras, the reduction of service options, the police judged based on two anomalies, this is likely to be a forged bank self-service cash machine. The case-handling staff contacted the bank shown on the façade, and the staff's reply also confirmed the police's speculation.
Li Yongyong, deputy commander of the economic investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: Then they also passed the consultation of many parties, and indeed in our Leishan County, this point has not been installed with atm machines, and there are no approval procedures. This ATM machine may have been used before 2010, but now this ATM machine is obsolete in the market.
Impersonate a bank outlet at an ATM to obtain bank card information
Surrounding residents reported that this self-service CASH machine was probably installed and put into use in May 2019. So, since it's not a bank branch, who installed it here? The police visited the nearby people, and jointly with the network security department and the technical department to conduct a survey, hoping to find more clues from this machine.
Hou Tianfu, captain of the investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: Through visits to understand this façade, it was a month ago, a few young men from outside the province just came to rent with the landlord, and then installed this ATM machine later. So we basically determined that this is a disguised ATM machine, which may be such a device used to read and copy the victim's bank card information.
Yang Gang, deputy director of the Public Security Bureau of Leishan County, Guizhou Province: I have been working for sixteen years, and it is the first time I have encountered such a strange police situation. Why is it strange? There are quite a lot of scams every time I receive the police, and I encounter a lot of things, but I have made a fake ATM machine for the first time.
Renting a house does not show up, only consulting with the landlord by phone
The police learned that the landlord of this façade is surnamed Xu, and in April 2019, Mr. Xu received a call from a strange man who wanted to rent the storefront and agreed that the rent would be 5500 yuan per month. Obviously, it should be this man and his accomplices who used the fake CASH machine to defraud the victim of money, so can the landlord provide any clues?
Hou Tianfu, captain of the investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: This young man contacted the phone when renting the façade at that time, and happily agreed to the landlord's situation of renting the façade, and then the tenant did not meet directly with the landlord, he directly docked with the landlord, asked the landlord to provide his bank card, and then he directly transferred the rent to the landlord through bank transfer.
Although the perpetrator did not show his face and thought that he was acting in a hidden way, he could not escape the investigation of the case-handling personnel, and the police quickly locked a man named Guan Mou.
Yang Gang, deputy director of the Public Security Bureau of Leishan County, Guizhou Province: Just carry out a counter-investigation from the electronic evidence, we say that a trace of the information flow can still find out a lot of suspicious places.
Hou Tianfu, captain of the investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: We found that this tenant was in the bank under our Jurisdiction of Leishan, and transferred it directly to the landlord through the way of counter deposits, so at that time, our investigators immediately went to retrieve the video of the bank at that time, and there was a middle-aged man who went to the counter to deposit money, and we listed this person as one of the suspects who installed the ATM.
The perpetrator Guan Mou surfaced, who is his accomplice? At this time, the police also made progress in the investigation of the cash machine involved in the case.
Li Yongyong, deputy commander of the economic investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: First of all, we extracted biological traces on this route of the atm switch, and from it we identified one.
The process of transporting and installing fake ATMs is complicated, and it is inferred that there must be accomplices
Through technical comparison, after Guan, the second criminal suspect, Chang Mou, was also locked. The police believe that it seems to be difficult to transport and install such a fake CASH machine by only two people, is there any other participant behind this?
Hou Tianfu, captain of the investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: Later, through our comprehensive investigation, we did find that the trajectories of these three people in that period of time were highly consistent, and at the same time, the three of them were indeed from Leishan mountain outside the province during that time, so at that time we basically determined the suspects in this case.
How do the three people who solve the mystery hide their eyes and ears to install a fake cash machine?
After the police grasped the true identity of the suspect, they successively arrested the three suspects who had absconded. According to their confession, they went to great lengths to install the fake CASH machine.
The suspect confessed that the purpose of their pinhole camera was to monitor the victim's every move during the withdrawal process.
Li Yongyong, deputy captain of the economic investigation brigade of the Leishan County Public Security Bureau in Guizhou Province, said: "After we dismantled and extracted this ATM machine, we went to the back to see its structure. We disassembled, and when we opened the back door of this ATM, we first found that there was a router on top of this machine, and then there was a mobile phone on it, and the router was in use at that time, and the mobile phone was also in use. ”
The police also asked the staff at the scene, they said that the regular ATM it will never have a router, and will not install a mobile phone in the back.
The police learned that all the data read by the regular self-service cash machine should be transmitted back to the bank to which they belonged, but the criminal suspect used these devices to intercept the victim's bank card, password and other information.
Deliberately rent a hotel near the site for remote operation
In order to grasp the victim's situation and receive data, the suspect also rented a room in a nearby hotel and used a computer to operate remotely. Guan Mou and others thought that doing some tricks and feet on the equipment would disturb the police's vision and make people have no way to do anything, but they did not know that these tricks had long been recognized by the case-handling personnel.
Li Yongyong, deputy commander of the economic investigation brigade of the Leishan County Public Security Bureau in Guizhou Province: Now our network environment is relatively extensive and complex, and he is just trying to circumvent our local network, using a network that he has already scrambled, which may be outside the country, and its IP (Internet Protocol) is embodied in a network outside the country, which brings a kind of confusion to our investigation.
After the three were arrested, they confessed the criminal facts that in order to make quick money, they used counterfeit self-service cash machines to steal victims' information and steal bank cards. They first purchased equipment online, went to many places to step on, and finally selected this crowded street in Leishan County.
It is difficult to distinguish between true and false Passers-by mistakenly believe that it is a new branch of the bank
In people's eyes, this is just a new branch of the bank, but what they don't know is that once they follow the machine's system prompts to insert the card and enter the password, the money in the card becomes the pocket of the suspect. If a victim is hooked, they will take the copied bank card to the province or even withdraw money from a downgrade abroad, obtaining illegal benefits.
Yang Gang, deputy director of the Public Security Bureau of Leishan County, Guizhou Province: Because of such a case, it is different from a traditional fraud case, it is done with an actual façade, there is an actual ATM machine, and then by remotely stealing the victim and copying some data of the victim's bank card, it is carried out in a case of cash withdrawal and consumption abroad.
Police tip: Carefully distinguish and detect abnormalities and call the police in time
The police reminded that although the counterfeit cash machine in the case is very similar to the regular cash machine, if you are more careful, you can also reduce the risk of recruitment, when it comes to money operations, people should pay attention to whether there is a different situation in the process, if there is any doubt, you should call the police in time.