Collaboration between Law Enforcement Agencies in Combating Cybercrime: Implications of a Taiwanese Case Study about ATM Hacking

Abstract

An increasing number of cybercrimes has presented new global challenges to law enforcement agencies that traditionally operate within designated geographical jurisdictions and patrol territories. The borderless nature of cyberspace has brought substantial opportunities—both legal and illegal—to its users, and many local law enforcement agencies have encountered motivated offenders taking advantage of the globally connected Internet and causing damage locally and transnationally. This study examines a high-profile case of European criminals who hacked into a Taiwanese financial institution—First Commercial Bank (FCB)—and programmed its ATMs to “spit out” cash netting the thieves $2.6 million US dollars in 2016 summer. Before the incident of FCB, this European criminal group committed more than a hundred similar ATMs hackings, victimizing dozens of financial institutions across several European countries, and profiting over one billion Euros. FCB is the only case revealing specific details about the modus operandi of ATM hacking thus far, in addition to disclosing reactions from law enforcement. By analyzing qualitative data collected from different branches of law enforcement involved in the investigations, this unique case study underscores the importance of national-local law enforcement collaboration in fighting transnational cybercrime. Empirical implications are particularly valuable in the law enforcement context of “turf jealousies” when defending homeland security.

Keywords

law enforcement collaboration ATM hacking cybercrime Taiwan policing jackpotting organized crime qualitative method

Get full access to this article

View all access options for this article.

References

Britz

(2013). Computer forensics and cyber crimes: An introduction (3rd ed.). Pearson Education Inc.

Cao

Huang

Sun

I. Y.

(2014). Policing in Taiwan: From authoritarianism to democracy. Routledge.

Cao

Huang

Sun

(2016). From authoritarian policing to democratic policing: A case study of Taiwan. Policing & Society, 26(6), 642–658.

Castells

(2002). The Internet galaxy: Reflections on the Internet, business, and society. Oxford University Press.

Chaiken

Karchmer

(1990). Multijurisdictional drug law enforcement strategies: Reducing supply and demand. Issues and Practices series. U.S. Department of Justice, National Institute of Justice.

Chu

D. C.

(2013). Crime and criminal justice issues in Taiwan. International Journal of Comparative and Applied Criminal Justice, 37(2), 75–78.

Cohen

(2017). Cultural fragmentation as a barrier to interagency collaboration: A qualitative examination of Texas law enforcement officers’ perceptions. American Review of Public Administration, 48(8), 886–901.

Cybersecurity Ventures. (2019). 2019 cybercrime report. Cybersecurity Ventures.

Dambazau

A.-R. B.

(2010). Cross-border crimes and policing: Challenges and lessons for Nigeria. In Eterno

J. A.

Das

D. K.

(Eds.), Police practices in global perspective (pp. 207–224). Rowman and Littlefield Publishers, Inc.

10.

Decker

S. H.

Lewis

P. G.

Provine

D. M.

Varsanyi

M. W.

(2009). Law enforcement: Local police and federal immigration law. Sociology of Crime, Law and Deviance, 13, 261–276.

11.

Devereux

(2018, March 26). Cops nab ATM hacker behind $1.2 billion swindle. Bloomberg. https://www.bloomberg.com/news/articles/2018-03-26/malware-mastermind-who-rigged-atms-to-spew-cash-caught-in-spain

12.

Devereux

Wild

Robinson

(2018, June 25). The biggest digital heist in history isn’t over yet. https://www.bloomberg.com/news/features/2018-06-25/the-biggest-digital-heist-in-history-isn-t-over-yet

13.

Farrell

McDevitt

Fahy

(2008). Understanding and improving law enforcement responses to human trafficking (Grant No. 2005-IJ-CX-0045). National Institute of Justice.

14.

Federal Bureau of Investigation. (2018). A brief history. https://www.fbi.gov/history/brief-history.

15.

Finkle

J. R.

(2017, January 4). Taiwan ATM heist linked to European hacking spree: Security firm. Reuters. https://www.reuters.com/article/us-taiwan-cyber-atms/taiwan-atm-heist-linked-to-european-hacking-spree-security-firm-idUSKBN14P0CX

16.

Geller

W. A.

Morris

(1992). Relations between federal and local police. In Tonry

Morris

(Eds.), Modern policing (pp. 231–348). University of Chicago Press.

17.

Hsieh

M.-L.

Boateng

F. D.

(2015). Perceptions of democracy and trust in the criminal justice system: A comparison between mainland China and Taiwan. International Criminal Justice Review, 25(2), 153–173.

18.

Hsieh

M.-L.

Wang

S.-Y. K.

(2018). Routine activities in a virtual space: A Taiwanese case of an ATM hacking spree. International Journal of Cyber Criminology, 12(1), 333–352.

19.

Huang

Wang

S.-Y. K.

(2009). Emerging cybercrime variants in the socio technical space. In Whitworth

de Moor

(Eds.), Handbook of research on socio-technical design and social networking systems (pp. 209–220). IGI Global.

20.

Jaishankar

(2008). Space Transition Theory of cyber crimes. In Schmalleger

Pittaro

(Eds.), Crimes of the internet (pp. 283–301). Prentice Hall.

21.

James

Warren

(2010). Australian police responses to transnational crime and terrorism. In Eterno

J. A.

Das

D. K.

(Eds.), Police practices in global perspective (pp. 207–224). Rowman & Littlefield Publishers, Inc.

22.

Jiang

P.-S.

(2018). The study of national police organization in investigation management and risk communication: Case study on the heist of First Commercial Bank. Master Thesis, Central Police University, Taiwan.

23.

Kean

T. H.

Hamilton

L. H.

(2004). The 9-11 Commission Report. U.S. Government Printing Office.

24.

Kuo

S.-Y.

Shih

Y.-C.

(2018). An evaluation of a community-oriented policing program in Taiwan. International Journal of Offender Therapy and Comparative Criminology, 62(7), 2016–2044.

25.

Lai

Y.-L.

(2016). College students’ satisfaction with police services in Taiwan. Asian Journal of Criminology, 11(3), 207–229.

26.

Levi

(2017). Assessing the trends, scale and nature of economic cybercrimes: Overview and issues. Crime, Law and Social Change, 67, 3–20.

27.

Liang

(2010). Internet development, censorship, and cyber crimes in China. Journal of Contemporary Criminal Justice, 26(1), 103–120.

28.

Ministry of Justice Investigation Bureau. (2018). Anti-money laundering annual report, 2017. Ministry of Justice Investigation Bureau.

29.

Mitchell

G. E.

O’Leary

Gerard

(2015). Collaboration and performance: Perspectives from public managers and NGO leaders. Public Performance and Management Review, 38, 684–716.

30.

Mitnick

K. D.

Simon

W. L.

(2001). The art of deception: Controlling the human element of security. John Wiley & Sons.

31.

Mosher

C. J.

Miethe

T. D.

Hart

T. C.

(2010). The mismeasure of crime. Sage.

32.

Pelfrey

W. V.

(2007). Local law enforcement terrorism prevention efforts: A state level case study. Journal of Criminal Justice, 35(3), 313–321.

33.

Pew Research Center. (2019). Internet/broadband fact sheet. http://www.pewinternet.org/fact-sheet/internet-broadband/

34.

Phillips

(2003). Between assimilation and independence: The Taiwanese encounter nationalist China, 1945-1950. Stanford University Press.

35.

Poushter

Bishop

Chwe

(2018). Social media use continues to rise in developing countries but plateaus across developed ones. Pew Research Center.

36.

Provine

D. M.

Doty

R. L.

(2011). The criminalization of immigrants as a racial project. Journal of Contemporary Criminal Justice, 27(3), 261-277.

37.

PWC. (2016). Adjusting the lens on economic crime: Preparation brings opportunity back into focus. PricewaterhouseCoopers LLP.

38.

Quah

J. S. T.

(2015). Enhancing the effectiveness of Taiwan’s anti-corruption agencies in combating corruption. American Journal of Chinese Studies, 22(2), 291–307.

39.

Reuters. (2016, July 17). Taiwan says foreign suspects arrested over $2 million ATM cyber robbery. https://www.reuters.com/article/us-taiwan-banks-theft/taiwan-says-foreign-suspects-arrested-over-2-million-atm-cyber-robbery-idUSKCN0ZX0N7

40.

Riley

Wilson

J. M.

Treverton

G. F.

Raymond

(2006). Think locally, act nationally: Police efforts in fighting terrorism need greater federal leadership. RAND Review, 30(1), 24–29.

41.

Sancho

Huq

Michenzi

(2017). Cashing in on ATM malware: A comprehensive look at various attack types. https://documents.trendmicro.com/assets/white_papers/wp-cashing-in-on-atm-malware.pdf

42.

Singer

P. W.

Friedman

(2014). Cybersecurity and cyberwar: What everyone needs to know. Oxford University Press.

43.

Skogan

(2018). The commission and the police. Criminology and Public Policy, 17(2), 379–396.

44.

Stambaugh

Beaupre

D. S.

Icove

D. J.

Baker

Cassady

Williams

W. P.

(2001). Electronic crime needs assessment for state and local law enforcement. National Institute of Justice.

45.

Steffensmeier

Zhong

(2017). Age and its relation to crime in Taiwan and the United States: Invariant, or does cultural context matter? Criminology, 55(2), 377–404.

46.

Stewart

D. M.

(2011). Collaboration between federal and local law enforcement: An examination of Texas police chiefs’ perceptions. Police Quarterly, 14(4), 407–430.

47.

Stuntz

W. J.

(2002). Terrorism, federalism, and police misconduct. Harvard Journal of Law and Public Policy, 25(2), 665–679.

48.

Sun

I. Y.

Chu

D. C.

(2006). Attitudinal differences between Taiwanese and American police officers. Policing: An International Journal of Police Strategies and Management, 29(2), 190–210.

49.

Sun

I. Y.

Chu

D. C.

(2009). Rural v. urban policing: A study of Taiwanese officers’ occupational attitudes. The Police Journal, 82, 222–246.

50.

Sun

Tripelet

Wang

S.-Y. K.

(2016). The impact of media exposure and political party orientation on public perceptions of police in Taiwan. Policing: An International Journal of Police Strategies and Management, 39(4), 694–709.

51.

Taipei District Prosecutors Office. (2016). Press release. Taipei District Prosecutors Office.

52.

Taylor

R. W.

Fritsch

E. J.

Liederbach

Holt

T. J.

(2011). Digital crime and digital terrorism. Pearson Prentice Hall.

53.

van Wilsem

. (2013). Bought it, but never got it: Assessing risk factors for online consumer fraud victimization. European Sociological Review, 29(2), 168–178.

54.

Volz

(2018, January 29). “Jackpotting” hackers steal over $1 million from ATMs acorss U.S.: Secret Service. Reuters. https://www.reuters.com/article/us-usa-cyber-atm/jackpotting-hackers-steal-over-1-million-from-atms-across-u-s-secret-service-idUSKBN1FI2QF

55.

Wang

S.-Y. K.

Sun

I. Y.

(2020). A comparative study of rural and urban residents’ trust in police in Taiwan. International Criminal Justice Review, 30(2), 197–218.

56.

Wang

S.-Y. K.

Sun

Van Craen

Hsu

K. K.-L.

(2020). Does trusting in supervisors translate to compliance and cooperation? A test of internal procedural justice among Taiwanese police officers. Australian and New Zealand Journal of Criminology, 53(3), 433–453.

57.

Wang

S.-Y. K.

Huang

(2011). The evolutional view of the types of identity thefts and online frauds in the era of the Internet. Internet Journal of Criminology. https://958be75a-da42-4a45-aafa-549955018b18.filesusr.com/ugd/b93dd4_83ceccb58ea64dcd8bd7a6aa67f082fe.pdf.

58.

Waugh

W. L.

Streib

(2006). Collaboration and leadership for effective emergency management. Public Administration Review, 66(s1), 131–140.

59.

Williams

M. L.

(2016). Guardians upon high: An application of routine activities theory to online identity theft in Europe at the country and individual level. British Journal of Criminology, 56, 21–48.

60.

Worrall

J. L.

(2008). The effects of local law enforcement block grants on serious crime. Criminology and Public Policy, 7(3), 325–350.

61.

Zolbe

(1980). The Uniform Crime Reporting program: 50 years of progress. FBI Law Enforcement Bulletin, 49(9), 2–7.