Tuesday, June 20, 2017

Reverse PIN Panic Code

Entering your PIN in reverse at any ATM will not automatically send an alarm to local police -- the idea is nothing more than an old and unimplemented suggestion.

Entering your PIN in reverse at any ATM will automatically summon the police.

Messages offering a seemingly helpful heads-up about how to deal with a situation in which one is forced to hand over money withdrawn from an ATM under duress began circulating on the Internet in September 2006:





However, the word “seemingly” applies in this case because the tip is only a chimera, as entering one’s Personal Identification Number (PIN) in reverse at Automated Teller Machines (ATMs) does not automatically summon the police.

The Credit Card Accountability Responsibility and Disclosure Act of 2009 compelled the Federal Trade Commission to provide an analysis of any technology, either then currently available or under development, which would allow a distressed ATM user to send an electronic alert to a law enforcement agency. The following statements were made in the FTC’s April 2010 report in response to that requirement:


FTC staff learned that emergency-PIN technologies have never been deployed at any ATMs.

The respondent banks reported that none of their ATMs currently have installed, or have ever had installed, an emergency-PIN system of any sort. The ATM manufacturer Diebold confirms that, to its knowledge, no ATMs have or have had an emergency-PIN system.

Ergo, there aren’t and haven’t ever been “reverse PIN” technologies despite online claims dating to September 2006 that anyone being robbed at an ATM simply had to enter his or her PIN in reverse to summon help.

Moreover, said that FTC report:

The available information suggests that emergency-PIN and alarm button devices: (1) may not halt or deter crimes to any significant extent; (2) may in some instances increase the danger to customers who are targeted by offenders and also lead to some false alarms (although the exact magnitude of these potential effects cannot be determined); and (3) may impose substantial implementation costs, although no formally derived cost estimates of implementing these technologies are currently available.

The reverse PIN system was first imagined in 1994 and patented in 1998 by Joseph Zingher, a Chicago businessman. His SafetyPIN System would alert police that a crime was in progress when a cardholder at an ATM keyed in the reverse of his personal identification numbers. The flip-flopped PIN would serve as a “panic code” that sent a silent alarm to police to notify them that an ATM customer was acting under duress. Because palindromic PINs (e.g., 2002, 7337, 4884) cannot be reversed, Zingher’s system included work-arounds for such numeric combinations.

However, Zingher had little success in interesting the banking community in SafetyPIN despite his pitching it to them with great persistence over the years. He did in 2004 succeed in getting the Illinois General Assembly to adopt a “reverse PIN” clause in SB 562, but the final version of the bill watered down the wording so as to make banks’ implementation of the system optional rather than mandatory: “A terminal operated in this State may be designed and programmed so that when a consumer enters his or her personal identification number in reverse order, the terminal automatically sends an alarm to the local law enforcement agency having jurisdiction over the terminal location.”

In 2006, Michael Boyd pressed the Georgia State Assembly to pass a law requiring banks to create ATM panic codes that would operate the machines normally while also alerting police. His wife, Kimberly Boyd, was killed on 12 September 2005 after being carjacked by convicted sex offender Brian O’Neil Clark and forced to withdraw cash at an ATM. (She died when Clark crashed her SUV while being followed by a civilian who ultimately shot Clark to death afterwards.) Such a bill was placed before the Georgia Senate on 29 December 2005 (SB 379), but nothing came of it.

In 2004, the Kansas state senate sent to its Financial Institutions and Insurance Committee SB 333, a bill that stated: “Any automated teller machine operated in this state shall be designed and programmed so that when a consumer enters such consumer’s personal identification number in reverse order, the automated teller machine automatically sends an alarm to the local law enforcement agency having jurisdiction over the automated teller machine location.” That bill died in committee that year.

All this talk of various bills in three different state legislatures may serve to obscure some of the more important points attaching to this issue, points that are key to making up one’s mind about whether having such a system in place is actually a good idea.

No one in the banking industry seems to want the technology. The banks argue against its implementation, not only on the basis of cost but also because they doubt such an alert would help anyone being coerced into making an ATM withdrawal. Even if police could be summoned via the keying of a special “alert” or “panic” code, they say, law enforcement would likely arrive long after victim and captor had departed. They have also warned of the very real possibility that victims’ fumbling around while trying to trigger silent alarms could cause their captors to realize something was up and take those realizations out on their captives.

Finally, there is the problem of ATM customers’ quickly conjuring up their accustomed PINs in reverse: Even in situations lacking added stress, mentally reconstructing one’s PIN backwards is a difficult task for many people. Add to that difficulty the terror of being in the possession of a violent and armed person, and precious few victims might be able to come up with reversed PINs seamlessly enough to fool their captors into believing that everything was proceeding according to plan. As Chuck Stones of the Kansas Bankers Association said in 2004: “I’m not sure anyone here could remember their PIN numbers backward with a gun to their head.”


Source: Snopes