A Chicago man was convicted at trial today for his role in a large-scale, long-running, and lucrative scheme to steal bank customer account information – commonly referred to as “ATM skimming” – by installing hidden card-reading devices on ATMs throughout New Jersey, New York, Connecticut, Florida, and elsewhere, U.S. Attorney Paul J. Fishman announced.
Dinu Horvat, 28, was convicted on four counts of a superseding indictment – conspiracy to commit bank fraud, aggravated identity theft, conspiracy to possess 15 or more counterfeit access devices, and conspiracy to possess access device-making equipment – following a one-week trial before U.S. District Judge William J. Martini in Newark federal court. The jury deliberated about two hours before returning the verdict.
The scheme defrauded Citibank, TD Bank, Wells Fargo, and multiple other financial institutions out of at least $5 million and affected thousands of bank customers.
Vintila and defendant Bogdan Radu, 30, designed and constructed sophisticated card-reader devices and pinhole camera panels capable of reading and storing customers’ bank account information and personal identification numbers. Horvat and his partners then secretly installed the card-reader devices and the pinhole cameras panels onto bank ATMs and removed them a few days later after they had recorded customer bank account information as customers performed routine bank transactions at ATMs. The stolen data was used to create thousands of false and fraudulent ATM cards, which Horvat and others used to withdraw millions of dollars from customers’ bank accounts. Horvat also recruited others to participate in the scheme, including Enes Causevic, Mirel Hadzalic, and Luis Franco, all of whom have previously pleaded guilty.
The bank fraud conspiracy charge for which Horvat was convicted carries a maximum potential penalty of 30 years in prison and a $1 million fine. The aggravated identity theft charge carries a mandatory, consecutive penalty of two years in prison and a maximum $250,000 fine. The conspiracy to possess 15 or more counterfeit access devices carries a maximum potential penalty of five years in prison and a maximum fine of $250,000. The conspiracy to possess access device-making equipment carries a maximum penalty of seven and one-half years in prison and a maximum $250,000 fine. Sentencing is scheduled for June 23, 2015.