Skip to main content

The Need to Limit Fraud and Manipulation with ATM Cards, Phone Banking, and Online Banking Services

No: 19109/ BCT /166 Date(g): 5/1/2002 | Date(h): 21/10/1422

Translated Document

SAMA has recently received some fraud cases related to ATM cards issued by banks operating in the Kingdom, and after considering these cases, it was noted that most banks do not focus on some security aspects related to the information of these cards and ATMs, which facilitated the occurrence of these fraudulent operations. Therefore, SAMA stresses the need to adhere to the security aspects of operations and cards, as well as the ATMs recorded in the Saudi Payment Network guides, and out of SAMA's keenness not to spread the phenomenon of fraud in bank cards in order to preserve the rights of customers and banks alike, it is necessary to adhere to the following:

First: Not allowing ATM cardholders to exceed the maximum daily withdrawal limit (5000 riyals), whether through ATMs or other banks' devices, correcting the status of any card that allows withdrawals to exceed this limit, and not submitting requests to SAMA to exceed this limit for any category of customers, whatever the reasons.

Second: Follow the security safety means related to concealing the electrical current wires of the ATMs in a tight manner to prevent users from accessing and seeing them, and making the necessary technical procedures in the bank's ATM system to prevent the reversal of the operations carried out by the ATMs after the power outage of the ATM used. 

Third: In the event that two or more devices are installed in close proximity, users cannot see others while entering passwords when performing operations on these devices, and security and control tools such as cameras are provided at ATM sites. 

Fourth: Ensure that the inventory of the contents of the ATMs is carried out in the presence of at least two people, and the bank must follow up the team in charge of this through inventory forms and ATM reports and make the necessary adjustments resulting from the inventory, whether on the accounts of the bank's customers or customers of other banks directly. 

Fifth: Making the necessary technical measures to prevent the full number of the exchange card from appearing in the receipt given to the cardholder after conducting automated teller operations to avoid the use of customer card numbers by other people.

 Sixth: Working to raise awareness among the bank's customers of the importance of maintaining the ATM card password and not writing it. 

For your information, adopt and abide by it.