Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

1/14/2020
05:46 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Florida Man Sentenced in ATM 'Cash-out' Scheme

PROVIDENCE – A Florida man who admitted to successfully conducting more than 100 ATM “cash-out scheme” withdrawals in two days in Rhode Island and Massachusetts in May 2019 using stolen identities and fraudulent ATM cards was sentenced today in U.S. District Court in Providence to 36 months in federal prison.

Dean Emmanuel Colin, 27, of Miami, was arrested outside a Santander Bank branch office by Seekonk, Mass., Police on May 23, 2019, after bank security officials notified the United States Secret Service that they were monitoring live video of an individual making repeated fraudulent withdrawals of large sums of cash using multiple cards. The Secret Service in turn notified the Seekonk Police Department who responded to the bank and detained Colin.

An investigation by the United States Secret Service and the Seekonk and Warwick Police Departments determined that Colin and others encoded blank ATM cards with individuals’ personal identifying and account information stolen during a data breach. The account holders had large or no limits on ATM cash withdrawals.

According to information presented to the Court, Colin travelled to Boston and rented a hotel room in Foxborough, Mass., on May 22, 2019. He spent the next two days traveling around Southeastern Massachusetts and Rhode Island conducting ATM withdrawals with the use of fraudulent ATM cards. Colin attempted to conduct 173 ATM fraudulent cash withdrawal transactions totaling $289,530. At least 112 of those transactions were successful, totaling $174,660.

At the time of his arrest, Colin was found to be carrying nine ATM cards. From inside his vehicle, law enforcement seized additional bank cards and a hotel room plastic key card.  A court-authorized search of Colin’s hotel room resulted in the seizure of a sweatshirt Colin is seen on surveillance video wearing while visiting some of the ATMs, two bank cards, and $65,920 in cash.

Additionally, U.S Postal inspectors and Secret Service agents obtained a search warrant for a package sent by Colin from Warwick, R.I., to his residence in Miami. Inside the package was a cereal box containing several plastic bags of wrapped bundles of cash totaling $48,500, labelled with the names of co-conspirators.

Colin pleaded guilty on September 11, 2019, to bank fraud conspiracy and aggravated identity theft. He was sentenced today to 36 months in federal prison, 3 years supervised release. The Court will determine restitution at a later date.

Colin’s sentence, imposed today by U.S. District Court Chief Judge John J. McConnell, Jr., is announced by United States Attorney Aaron L. Weisman, Craig A. Marech, Resident Agent in Charge of the Providence Office of the United States Secret Service, Seekonk Police Chief Frank John, and Warwick Police Chief Colonel Rick Rathbun.

United States Attorney Weisman thanks the United States Postal Inspection Service and the Bristol County, Massachusetts, District Attorney’s Office for their assistance in the investigation of this matter.

The case was prosecuted by Assistant U.S. Attorney John P. McAdams.

###

Topic(s): 
Financial Fraud
Identity Theft
Component(s): 
Contact: 
Jim Martin (401) 709-5357
Press Release Number: 
20-03

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-8423
PUBLISHED: 2020-04-02
A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of the Wi-Fi network.
CVE-2019-14868
PUBLISHED: 2020-04-02
In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those env...
CVE-2019-20635
PUBLISHED: 2020-04-02
codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields.
CVE-2020-11452
PUBLISHED: 2020-04-02
Microstrategy Web 10.4 includes functionality to allow users to import files or data from external resources such as URLs or databases. By providing an external URL under attacker control, it's possible to send requests to external resources (aka SSRF) or leak files from the local system using the f...
CVE-2020-11453
PUBLISHED: 2020-04-02
Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed through the path /MicroStrategyWS/. The functionality requires no authentication and, while it is not possible to pass parameters in the SSRF request, it is still possible to exploit it ...