A new ATM scam involving superglue and social engineering is causing victims to lose large sums of money in a single session. Scammers glue the card slot shut, trick users into using the tap feature, and then exploit the open session to withdraw additional funds. Understanding the scam, your legal rights, and protective steps can help you avoid becoming a victim.
Imagine walking up to an ATM, inserting your card, withdrawing $40, and then going home. Later, you check your account and find $960 missing — all from the same ATM session. When you call your bank, they say you authorized the transaction. This is not hypothetical; it has happened to multiple people in California through a deceptively simple yet clever scam involving superglue, a stranger, and the contactless tap feature on your ATM card.
The attacker arrives before any victims and applies superglue to the ATM's card insertion slot, sealing it shut. This simple act prevents cards from being inserted, but the ATM otherwise functions normally.
When a victim tries to insert their card and fails, a stranger nearby offers help, suggesting they use the tap feature instead. The tap feature is a legitimate contactless payment technology on many modern cards.
The victim taps their card, enters their PIN, withdraws cash, and leaves, unaware that the session remains open.
Because the session remains active after the tap transaction, the scammer can immediately use the ATM to conduct additional withdrawals without entering a PIN. The bank sees one continuous authorized session, making it difficult to dispute.
Banks record the session as authorized since the PIN was entered once and the session never closed. From their perspective, all transactions in that session are authorized by the customer. This makes it challenging for victims to prove fraud.
The EFTA protects consumers against unauthorized electronic fund transfers. An unauthorized transfer is one initiated without the consumer's actual authority. Since the scammer gains access through deception, not genuine authorization, the transactions are unauthorized.
Regulation E requires banks to investigate unauthorized transaction claims and provisionally credit consumers during investigations. Banks must resolve disputes within specific time frames. Failure to do so may violate Regulation E.
The Consumer Financial Protection Bureau (CFPB) enforces these regulations and has taken action against banks that fail to comply.
Financial experts recommend using credit cards for transactions whenever possible, including cash advances, to benefit from stronger protections.
Victims in California recovered their money after media attention pressured the bank. You should not need a news crew to enforce your rights.
This superglue ATM scam exploits a little-known vulnerability in contactless ATM sessions combined with social engineering. Understanding how it works, your legal protections, and following the protective steps outlined can save you from losing thousands. Always be vigilant at ATMs, use credit cards when possible, and know your rights to dispute unauthorized transactions effectively.
Stay informed, stay safe, and protect your hard-earned money from evolving financial scams.
