On 18 May 2016, the French Gendarmerie of Pau, in close cooperation with the Investigative Unit of the Italian State Police of Imperia and Europol, disrupted an international criminal group responsible for large-scale ATM skimming and money laundering. Composed mainly of French-Italian nationals, the criminal network used sophisticated ATM skimming devices which allowed them to compromise ATMs and perform fraudulent withdrawals outside the EU. Estimated losses incurred by the criminals’ activities amount to more than half a million euros.
This operation resulted in multiple house searches and the final arrest of nine individuals in France. Micro camera bars, card readers, magnetic strip readers and writers, computers, phones and flash drives, two hand guns, five vehicles, as well as thousands of plastic cards ready to be encoded, were seized in several locations between France and Italy as part of this operation.
The primary modus operandi of the criminals was to harvest financial data from ATMs in different areas of France. The compromised card data, which was used to create fake payment cards, was stored on a cloud server managed by the members of the criminal organisation. These fake cards were used to withdraw large amounts of cash from ATMs outside the European Union (Asia and the US).
Europol’s European Cybercrime Centre (EC3) initiated the case early this year and supported the involved law enforcement authorities in their efforts to identify the suspects. Operational meetings were held at Europol’s headquarters in The Hague and EC3 provided analytical and forensic support throughout the investigation including the deployment of a mobile office and a forensic expert during the final action day to assist the French authorities.
In addition, Europol’s information and analysis systems were used to exchange and cross-check intelligence received from EU Member States and non-EU countries with which Europol has operational agreements.
 Section de Recherches de Pau.
 Squadra Mobile della Questura di Imperia.