Andrew, In that case i would make an ATM withdraw in kenya and stay with the receipt that you can not be in Dar at the same time. Follow it up with a letter to branch manager first thing tomorrow with the ATM withdrawal receipt as proof. Just to be on the safe side. regards Patrick

Hi, that might not work if its been over an hour. At 7.30 i was in dar, one hour later i was at jkia... When you receive such notifications, act immediately. Call the bank.. On 9/18/10, Andrew Kerich <andykerich@gmail.com> wrote:

Thanks Pato, will do. Cheers.

On Sat, Sep 18, 2010 at 1:21 AM, Patrick Karanja <wabethi@gmail.com> wrote:

...

Andrew,

In that case i would make an ATM withdraw in kenya and stay with the receipt that you can not be in Dar at the same time. Follow it up with a letter to branch manager first thing tomorrow with the ATM withdrawal receipt as proof. Just to be on the safe side.

regards Patrick

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Sent from my mobile device ------------- David Mugo, ICT & E-Commerce Consultant, http://majibu.com Twitter: @raidarmax

Pole boss, hope they sort it out. Let me not talk too much, the fact that i was in dar may qualify me for a suspect :) On 9/18/10, Andrew Kerich <andykerich@gmail.com> wrote:

@David, i called kcb center 0711087000 immediately but got an answering machine that they are closed from 10:00pm till 8:00 am. Raring to rant.

On Sat, Sep 18, 2010 at 2:03 AM, David Mugo <raidarmax@gmail.com> wrote:

...

Hi, that might not work if its been over an hour. At 7.30 i was in dar, one hour later i was at jkia... When you receive such notifications, act immediately. Call the bank..

On 9/18/10, Andrew Kerich <andykerich@gmail.com> wrote:

...

Thanks Pato, will do. Cheers.

On Sat, Sep 18, 2010 at 1:21 AM, Patrick Karanja <wabethi@gmail.com> wrote:

...

Andrew,

In that case i would make an ATM withdraw in kenya and stay with the receipt that you can not be in Dar at the same time. Follow it up with a letter to branch manager first thing tomorrow with the ATM withdrawal receipt as proof. Just to be on the safe side.

regards Patrick

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Sent from my mobile device

------------- David Mugo, ICT & E-Commerce Consultant, http://majibu.com Twitter: @raidarmax _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Sent from my mobile device ------------- David Mugo, ICT & E-Commerce Consultant, http://majibu.com Twitter: @raidarmax

Patrick... True, the thing here is that KCB needs to sort its issues, such loopholes could cost it a lot in clients and money. David. On Sat, Sep 18, 2010 at 3:02 AM, Patrick Karanja <wabethi@gmail.com> wrote:

David,

For you to have moved from dar to nairobi in one hour implies you use a plane meaning there is an exit and entry visa on your passport.

Andrew can provide his passport as proof he did not travel, so additional document to provide am assuming they wont assume you travelled on those EAC permits.

In the statement does it relfect if it was an ATM withdrawal cause that would be easier but I can assure you it will take some time before they reverse that transaction. Heard of cases where it took 6 months.

regards

night owl

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- ------------- David Mugo, ICT & E-Commerce Consultant, http://majibu.com Twitter: @raidarmax

Got me googling http://www.novinite.com/view_news.php?id=106042 On Sat, Sep 18, 2010 at 9:30 AM, Andrew Kerich <andykerich@gmail.com> wrote:

now it has been escalated to their forensic department who unfortunately do not work on weekends. nkt.

On Sat, Sep 18, 2010 at 7:15 AM, David Mugo <raidarmax@gmail.com> wrote:

...

Patrick...

True, the thing here is that KCB needs to sort its issues, such loopholes could cost it a lot in clients and money.

David.

On Sat, Sep 18, 2010 at 3:02 AM, Patrick Karanja <wabethi@gmail.com> wrote:

...

David, For you to have moved from dar to nairobi in one hour implies you use a plane meaning there is an exit and entry visa on your passport. Andrew can provide his passport as proof he did not travel, so additional document to provide am assuming they wont assume you travelled on those EAC permits. In the statement does it relfect if it was an ATM withdrawal cause that would be easier but I can assure you it will take some time before they reverse that transaction. Heard of cases where it took 6 months.

regards night owl

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- ------------- David Mugo, ICT & E-Commerce Consultant, http://majibu.com Twitter: @raidarmax

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

KCB Can do better than this. Eric am sure you somewhere here. Andrew did you confirm from the statement whether it was an ATM withdrawal? regards Patrick

Hi skunks, did you know that most of the banks in Kenya do not implement proper security software? The reason for this is: 1. Cost 2. Our fraud-engineers are not so sophisticated 3. They are not required by law to do so. A reasonable bank security software should be able to profile you and protect your account to some extent. Take for instance I live in Nairobi and my upcountry home is Meru. It is likely that: - Most of my ATM withdrawals have been around Nairobi, Meru and points along the Nairobi-Meru highway - I have never withdrawn money after 10pm and before 6am on any given day. Therefore I should expect that my bank is watching over my account and if I try to withdraw money in Kisumu, or anywhere at 2:00am, they delay the transaction. They could then contact me via mobile phone or any other means and request me to allow the transaction to go through. They could also put the person performing the transaction through a basic test which that if they fail, the transaction is blocked. There is a guy from Eastern Europe who was arrested with a several ATM cards and bundles of cash at JKIA some months ago. Kenyan banks might be a target for sophisticated fraudsters. So until our banks fix security properly, such cases will go on. If you are carjacked in the middle of the night, all the thugs need is your PIN and your account is wiped clean Mugo On Sat, Sep 18, 2010 at 10:48 AM, Andrew Kerich <andykerich@gmail.com>wrote:

@Patrick, yes it is an ATM withdrawal. There is also no Transaction Reference number as is the norm in the SMS alert. The amount debited is not a whole figure - the customer care lady told me that this is because it was withdrawn in TZ currency but converted to KES hence the decimals in the withdrawn amount. I hope they can fix this mess asap. am definately jumping ship.

Kerich.

On Sat, Sep 18, 2010 at 10:37 AM, Patrick Karanja <wabethi@gmail.com> wrote:

...

KCB Can do better than this. Eric am sure you somewhere here. Andrew did you confirm from the statement whether it was an ATM

withdrawal?

...

regards Patrick _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...

...

------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Stephen, He he he I doubt if any will stand up regards Patrick On Sat, Sep 18, 2010 at 1:34 PM, ndungu stephen <ndungustephen@gmail.com>wrote:

Speaking of *software loophole*s at out local banks, is there any Skunkworks member who benefited from this error at KCB ? I understand that this went on for a while and people ripped big:

On Sat, Sep 18, 2010 at 2:05 PM, FREDRICK OGUTU <fredkitenda@gmail.com>wrote:

*SAFARICOM CAN NOT EXPLAIN HOW MY MONEY DISAPEARED FROM MY MPESA AND WITHDRAWN TO ANOTHER PERSON.

I had 6834/= in my mpesa account by 4th September,2010 the followind day which was on Sunday 5th i found i had 69/= balance. No mpesa message telling me money has been transfered and to make it worse i had my phone throughout secondly,when i went to complain in their branch in sarit they did not give me their attention,just telling me to pay 500/= for mpesa statement and report to police,going to police they cant understand how this can happen.And that money is lost that way.SAF people can see details of the guy who withdrew my money in their machine and they cant follow it up,so we be aware,of mpesa banking.

*

Hi Fredrick, If I were you, I'd talk to MJ about this. He's quite responsive, understanding, more than those tired-and-heavy-footed folks at Customer Care. You really don't need to take this to the Police. They need to do it themselves and they have all the data. You don't need this data. It's for them and the Police to deal with. Safaricom have the full audit trail of how your money moved. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "If you have nothing good to say about someone, just shut up!." -- Lucky Dube

exactly my thoughts @wash. I wonder is the banks have sorted out the error though, cause even on his extended holiday, he can move that money around mpesa / coop / KCB and leave jail a billionaire.... :-) On Tue, Sep 21, 2010 at 12:18 PM, Odhiambo Washington <odhiambo@gmail.com>wrote:

On Sat, Sep 18, 2010 at 1:34 PM, ndungu stephen <ndungustephen@gmail.com>wrote:

...

Speaking of *software loophole*s at out local banks, is there any Skunkworks member who benefited from this error at KCB ? I understand that this went on for a while and people ripped big:

By mere change of currency symbol, he became a millionaire

*Published on 07/09/2010* Related Stories CBK: Sh8m missing from embassy proceeds <http://www.standardmedia.co.ke/InsidePage.php?id=2000017916&cid=159&story=CBK:%20Sh8m%20missing%20from%20embassy%20proceeds> MPesa Fraudster <http://www.standardmedia.co.ke/InsidePage.php?id=2000017634&cid=541&story=MPesa%20Fraudster> Court seeks Interpol help to arrest Ugandan <http://www.standardmedia.co.ke/InsidePage.php?id=2000017134&cid=4&story=Court%20seeks%20Interpol%20help%20to%20arrest%20Ugandan> Finally, Old Mutual secures seat at NSE <http://www.standardmedia.co.ke/InsidePage.php?id=2000015226&cid=457&story=Finally,%20Old%20Mutual%20secures%20seat%20at%20NSE> Kenya, Tanzania zero in on looters <http://www.standardmedia.co.ke/InsidePage.php?id=2000015276&cid=457&story=Kenya,%20Tanzania%20zero%20in%20on%20looters> Law alone is inadequate to curb laundering <http://www.standardmedia.co.ke/InsidePage.php?id=2000015275&cid=457&story=Law%20alone%20is%20inadequate%20to%20curb%20laundering>

BY WAHOME THUKU

A witness narrated how money was transferred from several banks in thousands of shillings only to be received by another bank in millions.

Some Sh388,400 was allegedly transferred from an account at the Co-operative Bank, Kimathi Street in nine transactions. But when it reached the Kenya Commercial Bank, Moi Avenue branch, through electronic transfer, it was credited into an account as $388,400 (Sh30,295,200).

The Cooperative Bank account belonged to Daniel Ndirangu and the KCB one to Boniface Mwangi Kiiru. The two banks are barely 500 metres apart.

Another Sh28,900 left the same Co-operative Bank account and was credited as $28,900 at Mwangi’s second account held at the KCB, Sarit Centre branch.

The court heard another Sh147,400 was transferred from National Bank, Harambee Avenue branch, in three transactions and all of it credited in Mwangi’s KCB Sarit Centre account as $147,400.

Mwangi is now being tried before Nairobi Chief Magistrate Gilbert Mutembei for stealing $388,400 (Sh30,295,200) from KCB Moi Avenue and $260,800 (Sh20,342,400) from Sarit Centre branch.

This is a cool heist! I love the ingenuity involved. This guy knew and organized his plan well. BTW, since Kenyan law does not have (maybe now it will have, but I don't know when) a requirement for restitution, if the guys already withdrew the money, then they are "sorted", if you get what I mean. The cases will drag through court and probably some guys "will go in" for a few months but they have already made their money. Locking them up is a nice break for them to sit down and get the money to work for them. A little denial, but who cares, as long as the money is there?

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "If you have nothing good to say about someone, just shut up!." -- Lucky Dube

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Regards, Collins Areba. Strategic Operations. Center for Renewable Alternatives Old Ferry Road, off Msa Malindi Rd, Kilifi, Kenya. +254 720 516758 +254 734 696821 skype/gtalk/twitter: arebacollins *Solar *| * Wind *| * Waves * | * Biomass *

On 21 September 2010 14:19, Edmund Okumu <edmund.okumu@gmail.com> wrote:

Commercial banks have lost upto 761 million to fraud within the past six months.

http://www.standardmedia.co.ke/InsidePage.php?id=2000018760&cid=4&

On Fri, Sep 17, 2010 at 9:48 PM, Andrew Kerich <andykerich@gmail.com>wrote:

...

I just got an sms from KCB connect that my account has been debited KES 21000 from Dar-es-salaam!! I have not stepped out of Nairobi or withdrawn any money today. Are these Internal dealings or some kind of fraud? I cant make any inquiries/complaints till tomorrow morning. KCB, anyone?

Kerich. _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Edmund C. O. Okumu P.O Box 8490-00200, Nairobi, Kenya. TEL: 254-721-734935

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

OK have to ask, 761 million is that a reduction or an increase since implementation of the RTGS last year? Any banking experts? Kind regards, -- Lusiola Brian |3 R 1 /-\ |\|

I have heard of a guy who registered for Mkesho just to be told that there was no money in his account. Fortunately this was reversed shortly after. The problem is that they had registered him under a wrong account number. On Tue, Sep 21, 2010 at 2:24 PM, Brian Munyao Longwe <blongwe@gmail.com>wrote:

Let's not get this twisted guys - it is *imperative* for mobile operators to have a process that involves the police before disclosing such information because otherwise any tom, dick or harry could come in and make all manner of claims, in other words there would be a massive loophole.

At the end of the day, the problem described here is one of "theft" - which is covered under criminal law and investigations into such have certain legal requirements....

B

On Tue, Sep 21, 2010 at 1:19 PM, Edmund Okumu <edmund.okumu@gmail.com>wrote:

...

Commercial banks have lost upto 761 million to fraud within the past six months.

http://www.standardmedia.co.ke/InsidePage.php?id=2000018760&cid=4&

On Fri, Sep 17, 2010 at 9:48 PM, Andrew Kerich <andykerich@gmail.com>wrote:

...

I just got an sms from KCB connect that my account has been debited KES 21000 from Dar-es-salaam!! I have not stepped out of Nairobi or withdrawn any money today. Are these Internal dealings or some kind of fraud? I cant make any inquiries/complaints till tomorrow morning. KCB, anyone?

Kerich. _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Edmund C. O. Okumu P.O Box 8490-00200, Nairobi, Kenya. TEL: 254-721-734935

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Brian Munyao Longwe e-mail: blongwe@gmail.com cell: + 254 722 518 744 blog : http://zinjlog.blogspot.com meta-blog: http://mashilingi.blogspot.com

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

I know someone who once worked on a project for one of the banks mentioned and said how easy it was to slip in a code without anyone being able to trace the fraudulent program within the banks system.........clearly this is something that needs urgent attention On 9/21/10, Peter Osotsi <peter.osotsi@gmail.com> wrote:

Brian L.

According to press reports, thats a half year heist, and its more than last years grand total. Shows you some smart people / crooks are on the move.

Peter

On Tue, Sep 21, 2010 at 3:02 PM, Boniface <mboteb@gmail.com> wrote:

...

I have heard of a guy who registered for Mkesho just to be told that there was no money in his account. Fortunately this was reversed shortly after. The problem is that they had registered him under a wrong account number.

On Tue, Sep 21, 2010 at 2:24 PM, Brian Munyao Longwe <blongwe@gmail.com>wrote:

...

Let's not get this twisted guys - it is *imperative* for mobile operators to have a process that involves the police before disclosing such information because otherwise any tom, dick or harry could come in and make all manner of claims, in other words there would be a massive loophole.

At the end of the day, the problem described here is one of "theft" - which is covered under criminal law and investigations into such have certain legal requirements....

B

On Tue, Sep 21, 2010 at 1:19 PM, Edmund Okumu <edmund.okumu@gmail.com>wrote:

...

Commercial banks have lost upto 761 million to fraud within the past six months.

http://www.standardmedia.co.ke/InsidePage.php?id=2000018760&cid=4&

On Fri, Sep 17, 2010 at 9:48 PM, Andrew Kerich <andykerich@gmail.com>wrote:

...

I just got an sms from KCB connect that my account has been debited KES 21000 from Dar-es-salaam!! I have not stepped out of Nairobi or withdrawn any money today. Are these Internal dealings or some kind of fraud? I cant make any inquiries/complaints till tomorrow morning. KCB, anyone?

Kerich. _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Edmund C. O. Okumu P.O Box 8490-00200, Nairobi, Kenya. TEL: 254-721-734935

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Brian Munyao Longwe e-mail: blongwe@gmail.com cell: + 254 722 518 744 blog : http://zinjlog.blogspot.com meta-blog: http://mashilingi.blogspot.com

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- ---------- BROOKLYN VIRTUAL NETWORKS ASSOCIATES Computer Sales, Service & Repair | Disaster Recovery | IS Consulting | Corporate Networks | Software Development | Web Development | Telecommunications 411 Calls (+254) 721-586-109

Don't wait for success; hunt it down like there's no tomorrow.

-- Sent from my Voice Recognition Watch© -------------------------------------------------------------------- Our greatest fear is not that we are inadequate,but that we are powerful beyond measure.It is our light, not our darkness, that frightens us.There is nothing enlightened about shrinking so that other people won't feel insecure around you.As we let our own light shine, we consciously give other people permission to do the same. As we are liberated from our fear,our presence automatically liberates others.

On Thu, Oct 14, 2010 at 7:33 PM, Andrew Kerich <andykerich@gmail.com> wrote:

Finally KCB have reversed the transaction and credited my account with the illegally withdrawn amount - almost a month later.

What happened was that my ATM card was skimmed in Oil Libya waiyaki way - basically this means that some magnetic reader was inserted on top of the existing card slot that was harvesting ATM card details from the magnetic strip. The false card slot is made to match the color and texture of the ATM and is very thin so it does not change the profile of the machine in a noticeable way once installed. The con artist then makes a duplicate card with the same credentials and the card is as good as the original one. This was rampant in credit cards but now it has also moved to ATM cards.

Exercise caution and watch out for anything suspicious (some ATMs may have micro cameras installed).

As for me i shall be paranoid until the ATM/card technology improves ;-)

That's worrying! At one point I was shopping in a supermarket and presented by card for payment, but my sixth sense told me that the guy I had given the card was acting weird! Is there a way they can swipe twice, forge my signature, and take goods worth the same amount as I had purchased?? Me thinks nothing is impossible with fraudsters - serious ones, with the right connections. Exercise care. I am sure this has happened to someone. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!

I'm just wondering how the con artist got the PIN number... On 14/10/2010, Derrick Wesonga <wesongaderrick@gmail.com> wrote:

Yeah today almost all the ATMs in the city were down at around 1pm. Maybe they were trying to get the same sorted out. Whats for sure is that this is not doing any favors to the progress of electronic cash in Kenya. regards

and all of my pals wonder why i prefer to queue at the bank for over the counter transactions.. On Fri, Oct 15, 2010 at 10:12 AM, Steve Obbayi <steve@sobbayi.com> wrote:

I've heard about these devices which can read the details off the magnetic strip from an ATM card. They've been used quite a lot even in places like UK. These devices are custom shaped to fit on the ATM card slot seamlessly. So when you use your ATM card it also gets read by the device which then saves the card info. These devices also have a tiny cameras in them that are designed to focus on the numpad. so as it reads your card it also records the number sequence you have punched into the ATM numpad. It can sit there a whole day recording details of everyone who uses that machine witout anyone suspecting as it looks just like the part of the ATM. Later on in the day the crook can come back remove the device and take it to a more convenient location and download all the info to a computer. He can duplicate any of the ATM card details by simply using a used up pre-paid debit card and re-recording the new card details from one of the victims using card writers.

So armed with his new card and your pin, the crook has now got a duplicate of your ATM card in his pocket... the rest is history

Steve Obbayi

http://sobbayi.com

----- Original Message ----- From: "Simon Mbuthia" <simon.mbuthia@gmail.com> To: "Skunkworks Mailing List" <skunkworks@lists.my.co.ke> Sent: Friday, October 15, 2010 8:19:31 AM GMT +03:00 Iraq Subject: Re: [Skunkworks] KCB systems problem or fraud?

I'm just wondering how the con artist got the PIN number...

On 14/10/2010, Derrick Wesonga <wesongaderrick@gmail.com> wrote:

...

Yeah today almost all the ATMs in the city were down at around 1pm. Maybe they were trying to get the same sorted out. Whats for sure is that this is not doing any favors to the progress of electronic cash in Kenya. regards

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet

http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

The problem with all these services banks provide to give you convenient access to your money is that they also give crooks the same level of convenience. Regards, Joshua Twinamasiko G. Pixel Magic Ltd. t: +256 312 274 869 m: +256 774 143 720 +256 701 143 720 www.pixelmagic.co.ug www.pctechmagazine.com www.joshtwin.com From: Kiti Chigiri Sent: Friday, October 15, 2010 10:30 To: Skunkworks Mailing List Subject: Re: [Skunkworks] KCB systems problem or fraud? and all of my pals wonder why i prefer to queue at the bank for over the counter transactions.. On Fri, Oct 15, 2010 at 10:12 AM, Steve Obbayi <steve@sobbayi.com> wrote: I've heard about these devices which can read the details off the magnetic strip from an ATM card. They've been used quite a lot even in places like UK. These devices are custom shaped to fit on the ATM card slot seamlessly. So when you use your ATM card it also gets read by the device which then saves the card info. These devices also have a tiny cameras in them that are designed to focus on the numpad. so as it reads your card it also records the number sequence you have punched into the ATM numpad. It can sit there a whole day recording details of everyone who uses that machine witout anyone suspecting as it looks just like the part of the ATM. Later on in the day the crook can come back remove the device and take it to a more convenient location and download all the info to a computer. He can duplicate any of the ATM card details by simply using a used up pre-paid debit card and re-recording the new card details from one of the victims using card writers. So armed with his new card and your pin, the crook has now got a duplicate of your ATM card in his pocket... the rest is history Steve Obbayi http://sobbayi.com ----- Original Message ----- From: "Simon Mbuthia" <simon.mbuthia@gmail.com> To: "Skunkworks Mailing List" <skunkworks@lists.my.co.ke> Sent: Friday, October 15, 2010 8:19:31 AM GMT +03:00 Iraq Subject: Re: [Skunkworks] KCB systems problem or fraud? I'm just wondering how the con artist got the PIN number... On 14/10/2010, Derrick Wesonga <wesongaderrick@gmail.com> wrote:

Yeah today almost all the ATMs in the city were down at around 1pm. Maybe they were trying to get the same sorted out. Whats for sure is that this is not doing any favors to the progress of electronic cash in Kenya. regards

_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke -------------------------------------------------------------------------------- _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Most modern ATM's machines have a counter for this - if you see a machine with a blue thing protruding from the card entry, then it can detect those devices if place and will not allow any transaction. The vulnerable machines are the normal slide-in your card one's - avoid them if you can. I know for sure BBK and SCB have several ATM's with this guard on and it has a sign of a lock. ./Ok3ch On Fri, Oct 15, 2010 at 11:39 AM, Dennis Kioko <dmbuvi@gmail.com> wrote:

And those who built ATMS have not factored this  ie built to avoid physical tampering or maybe the costs defeat the purpose _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Surprisingly, I have seen the ones with the blue lock somewhere, oh, it was at KCB! At the same time , most of our ATMs are reportedly second hand. and will occasionally display some windows XP error dialog (Equity Bank). So unless the measures wre in software , the second hand ones leave us to the mercy of "serikali itusaidie"