A Romanian couple living in Sydney have been jailed for their roles in a $36,000 ATM card ‘shimming’ scam as a result of an investigation by the AFP-led Joint Policing Cybercrime Coordination Centre.
The man, 34, and the woman, 33, were sentenced to four years and two years respectively by the Campbelltown District Court today.
The court was told the offenders stole funds by installing ATM shimmers on ATMs across Sydney and Melbourne to clone victims’ financial data, which was later used to obtain a financial benefit.
ATM shimmers (pictured, below) are thin, card-sized metal devices that act like a spacer when inserted into the card slot of an ATM.
The devices are designed to record the data on the card magnetic stripe and chip, which can then be accessed later by the offender when the shimmer is retrieved.
An investigation was launched in June 2023 after a report was received from the United States Secret Service (USSS) about a consignment of ATM shimmers sent to Australia.
Investigators identified individuals in Australia which had allegedly received a number of suspicious packages believed to contain ATM shimmers sent from the United Kingdom, China and the United States.
As part of the investigation, the AFP witnessed the Romanian nationals install shimming devices in ATMs in Melbourne and Sydney and attend banks to withdraw or transfer money to bank accounts using stolen card data.
The AFP executed a search warrant on a residence in the Sydney suburb of Rhodes and a vehicle rented by the pair in August 2023, seizing $12,935 in cash, multiple shimming devices, false identity documents, electronic devices, card readers, and SIM cards. The pair were arrested shortly after.
The man pleaded guilty on 1 May 2024 to a raft of fraud offences. He was sentenced to four years and two months’ jail, with a non-parole period of two years and six months’.
The woman also pleaded guilty to all charges and was sentenced to two years and six months’ jail, with a non-parole period of one year and six months’. She will be eligible for parole from 3 February 2025.
The $12,935 in cash, multiple shimming devices, false identity documents, electronic devices, card readers and SIM cards have been forfeited to the Crown. The couple are expected to be deported once released from jail.
AFP Detective Superintendent Tim Stainton said the investigation demonstrated the value of ongoing collaboration between the AFP and its domestic and international partners in cybercrime matters.
“This investigation is a great example of the work the JPC3 does. The intelligence sharing and joint investigation between the USSS, banks and state and territory police partners has helped us identify and prosecute cyber criminals scamming, stealing and defrauding innocent Australians,” D/Supt Stainton said.
“Criminals will unashamedly use any tools they have available to exploit people for their own greedy profit, at the expense of Australians who are already doing it tough.
“This should serve as a reminder that no matter where you are, your criminal actions can always be traced, and the AFP will not hesitate to bring you before the courts.”
If you are a victim of cybercrime, report it to police using Report Cyber.
