RBI warns banks on vulnerability of ATMs running on windows XP or unsupported version of operating system and non-implementation of other security measures
RBI has expressed concerns over the ATMs running on Windows XP and/or other unsupported operating systems.
In a recent communication made to all Scheduled Commercial Banks, Small Finance Banks and Payment Banks and white-Label ATM Operators, the RBI has expressed displeasure over slow progress on the part of the banks in addressing these issues.
RBI has frawn attention to the vulnerability arising from the ATMs operating on unsupported version of operating system and non-implementation of other security measures which could potentially affect the interests of the banks’ customers adversely, apart from impinging on the image of the bank.
Banks and White-Label ATM Operators have been advised to initiate immediate action in this regard and implement the following control measures as per the prescribed timelines indicated there against:
| Sr. No. | Control Measures for the ATMs | To be completed by |
| a. | Implement security measures such as BIOS password, disabling USB ports, disabling auto-run facility, applying the latest patches of operating system and other softwares, terminal security solution, time-based admin access, etc. | August 2018 |
| b. | Implement anti-skimming and whitelisting solution. | March 2019 |
| c. | Upgrade all the ATMs with supported versions of operating system. Such upgrades shall be carried out in a phased manner to ensure that in respect of the existing ATMs running on unsupported versions of operating system, | |
| i. Not less than 25% of them shall be upgraded by | September 2018 | |
| ii. Not less than 50% of them shall be upgraded by | December 2018 | |
| iii. Not less than 75% of them shall be upgraded by | March 2019 | |
| iv. All of them shall be upgraded by | June 2019 |
Penalty u/s 271B for unfilled column 40 in Form 3CD related to details regarding turnover, gross profit etc. for previous…
Merely rectifying computation without amending assessment order without notice to assessee does not nullify the entire assessment - ITAT In…
Once assessee discharges primary onus of providing basic documents in support of the identity, genuineness and the creditworthiness it shifts…
CBDT has notified Cost Inflation Index for Financial Year / Tax Year 2026-27 CBDT has notified "384" as Cost Inflation…
Power of CIT(A) under section 251(1)(a) to remand case could be exercised only when the assessment is passed u/s 144…
ICAI (Global Networking) Guidelines, 2025 kept in abeyance In February 2026, ICAI had issued ICAI (Global Networking) Guidelines 2025 to…