Two Romanian nationals living in Sydney have been sentenced for their roles in a $36,000 ATM card ‘shimming’ scam as a result of an investigation by the AFP-led Joint Policing Cybercrime Coordination Centre (JPC3).
The man, 34, and the woman, 33, were sentenced to four years and two years respectively by the Campbelltown District Court today (30 August, 2024).
The offenders stole funds by installing ATM shimmers on ATMs across Sydney and Melbourne to clone victims’ financial data, which was later used to obtain a financial benefit.
ATM shimmers are thin, card-sized metal devices that act like a spacer when inserted into the card slot of an ATM.
The devices are designed to record the data on the card magnetic stripe and chip, which can then be accessed later by the offender when the shimmer is retrieved.
The JPC3 began an investigation in June 2023 after receiving a report from the United States Secret Service (USSS) about a consignment of ATM shimmers sent to Australia.
Investigators identified individuals in Australia which had allegedly received a number of suspicious packages believed to contain ATM shimmers sent from the United Kingdom, China and the United States.
As part of the investigation, the AFP witnessed the Romanian nationals install shimming devices in ATMs in Melbourne and Sydney and attend banks to withdraw or transfer money to bank accounts using stolen card data.
The AFP executed a search warrant on a residence in the Sydney suburb of Rhodes and a vehicle rented by the pair in August 2023, seizing $12,935 in cash, multiple shimming devices, false identity documents, electronic devices, card readers, and SIM cards. The pair were arrested shortly after.
The man pleaded guilty on 1 May 2024 to the following offences:
- One count of possessing identification information with intent to commit fraud, contrary to section 372.2(1) of the Criminal Code Act 1995 (Cth);
- One count of dealing with money, $10,000 or more, believed to be proceeds of crime, contrary to section 400.6(1) of the Criminal Code Act 1995 (Cth);
- One count of possessing a thing used to obtain/deal in financial information, contrary to section 480.5(1) of the Criminal Code Act 1995 (Cth);
- One count of dishonestly dealing in personal financial information, contrary to section 480.4 of the Criminal Code Act 1995 (Cth);
- One count of attempting to dishonestly obtain personal financial information, contrary to sections 11.1(1) and 480.4 of the Criminal Code Act 1995 (Cth);
- One count of providing a false foreign travel documents to another person with intent to be used or acted upon, contrary to section 22(1) of the Foreign Passports Act 2005 (Cth); and
- One count of giving false or misleading information to specified persons or entities, contrary to section 136(1) of the Anti-Money Laundering and Counter Terrorism Financing Act 2006 (Cth).
He was sentenced to four years and two months’ imprisonment, with a non-parole period of two years and six months’.
The woman pleaded guilty on 1 May 2024 to:
- One count of possessing a thing used to obtain/deal in financial information, contrary to section 480.5(1) of the Criminal Code Act 1995 (Cth);
- One count of dealing with money, $10,000 or more, believed to be proceeds of crime, contrary to section 400.6(1) of the Criminal Code Act 1995 (Cth);
- One count of dishonestly dealing in personal financial information, contrary to section 480.4 of the Criminal Code Act 1995 (Cth); and
- One count of attempting to dishonestly obtain personal financial information, contrary to sections 11.1(1) and 480.4 of the Criminal Code Act 1995 (Cth).
The woman was sentenced to two years and six months’ imprisonment, with a non-parole period of one year and six months’. She will be eligible for parole from 3 February 2025.
The $12,935 in cash, multiple shimming devices, false identity documents, electronic devices, card readers and SIM cards have been forfeited to the Crown. Both the man and the woman are expected to be deported once released from jail.
AFP Detective Superintendent Tim Stainton said this investigation demonstrated the value of ongoing collaboration between the AFP and its domestic and international partners in cybercrime matters.
“This investigation is a great example of the work the JPC3 does. The intelligence sharing and joint investigation between the USSS, banks and state and territory police partners has helped us identify and prosecute cyber criminals scamming, stealing and defrauding innocent Australians,” D/Supt Stainton said.
“Criminals will unashamedly use any tools they have available to exploit people for their own greedy profit, at the expense of Australians who are already doing it tough.
“This should serve as a reminder that no matter where you are, your criminal actions can always be traced, and the AFP will not hesitate to bring you before the courts.”
The JPC3 brings together Australian law enforcement and key industry and international partners to fight cybercrime and prevent harm and financial loss to the Australian community.
We are committed to equipping all Australians with the knowledge and resources to protect themselves against cybercrime.
Watch our and protect yourself from being a victim of cybercrime.
If there is an immediate threat to life or risk of harm, call 000.
If you are a victim of cybercrime, report it to police using
Two Romanian nationals living in Sydney have been sentenced for their roles in a $36,000 ATM card ‘shimming’ scam as a result of an investigation by the AFP-led Joint Policing Cybercrime Coordination Centre (JPC3).
The man, 34, and the woman, 33, were sentenced to four years and two years respectively by the Campbelltown District Court today (30 August, 2024).
The offenders stole funds by installing ATM shimmers on ATMs across Sydney and Melbourne to clone victims’ financial data, which was later used to obtain a financial benefit.
ATM shimmers are thin, card-sized metal devices that act like a spacer when inserted into the card slot of an ATM.
The devices are designed to record the data on the card magnetic stripe and chip, which can then be accessed later by the offender when the shimmer is retrieved.
The JPC3 began an investigation in June 2023 after receiving a report from the United States Secret Service (USSS) about a consignment of ATM shimmers sent to Australia.
Investigators identified individuals in Australia which had allegedly received a number of suspicious packages believed to contain ATM shimmers sent from the United Kingdom, China and the United States.
As part of the investigation, the AFP witnessed the Romanian nationals install shimming devices in ATMs in Melbourne and Sydney and attend banks to withdraw or transfer money to bank accounts using stolen card data.
The AFP executed a search warrant on a residence in the Sydney suburb of Rhodes and a vehicle rented by the pair in August 2023, seizing $12,935 in cash, multiple shimming devices, false identity documents, electronic devices, card readers, and SIM cards. The pair were arrested shortly after.
The man pleaded guilty on 1 May 2024 to the following offences:
- One count of possessing identification information with intent to commit fraud, contrary to section 372.2(1) of the Criminal Code Act 1995 (Cth);
- One count of dealing with money, $10,000 or more, believed to be proceeds of crime, contrary to section 400.6(1) of the Criminal Code Act 1995 (Cth);
- One count of possessing a thing used to obtain/deal in financial information, contrary to section 480.5(1) of the Criminal Code Act 1995 (Cth);
- One count of dishonestly dealing in personal financial information, contrary to section 480.4 of the Criminal Code Act 1995 (Cth);
- One count of attempting to dishonestly obtain personal financial information, contrary to sections 11.1(1) and 480.4 of the Criminal Code Act 1995 (Cth);
- One count of providing a false foreign travel documents to another person with intent to be used or acted upon, contrary to section 22(1) of the Foreign Passports Act 2005 (Cth); and
- One count of giving false or misleading information to specified persons or entities, contrary to section 136(1) of the Anti-Money Laundering and Counter Terrorism Financing Act 2006 (Cth).
He was sentenced to four years and two months’ imprisonment, with a non-parole period of two years and six months’.
The woman pleaded guilty on 1 May 2024 to:
- One count of possessing a thing used to obtain/deal in financial information, contrary to section 480.5(1) of the Criminal Code Act 1995 (Cth);
- One count of dealing with money, $10,000 or more, believed to be proceeds of crime, contrary to section 400.6(1) of the Criminal Code Act 1995 (Cth);
- One count of dishonestly dealing in personal financial information, contrary to section 480.4 of the Criminal Code Act 1995 (Cth); and
- One count of attempting to dishonestly obtain personal financial information, contrary to sections 11.1(1) and 480.4 of the Criminal Code Act 1995 (Cth).
The woman was sentenced to two years and six months’ imprisonment, with a non-parole period of one year and six months’. She will be eligible for parole from 3 February 2025.
The $12,935 in cash, multiple shimming devices, false identity documents, electronic devices, card readers and SIM cards have been forfeited to the Crown. Both the man and the woman are expected to be deported once released from jail.
AFP Detective Superintendent Tim Stainton said this investigation demonstrated the value of ongoing collaboration between the AFP and its domestic and international partners in cybercrime matters.
“This investigation is a great example of the work the JPC3 does. The intelligence sharing and joint investigation between the USSS, banks and state and territory police partners has helped us identify and prosecute cyber criminals scamming, stealing and defrauding innocent Australians,” D/Supt Stainton said.
“Criminals will unashamedly use any tools they have available to exploit people for their own greedy profit, at the expense of Australians who are already doing it tough.
“This should serve as a reminder that no matter where you are, your criminal actions can always be traced, and the AFP will not hesitate to bring you before the courts.”
The JPC3 brings together Australian law enforcement and key industry and international partners to fight cybercrime and prevent harm and financial loss to the Australian community.
We are committed to equipping all Australians with the knowledge and resources to protect themselves against cybercrime.
Watch our and protect yourself from being a victim of cybercrime.
If there is an immediate threat to life or risk of harm, call 000.
If you are a victim of cybercrime, report it to police using
