Two Romanian nationals living in Sydney have been sentenced for their involvement in a $36,000 ATM card shimming scam, following an investigation led by the AFP’s Joint Policing Cybercrime Coordination Centre (JPC3). The 34-year-old man received a four-year sentence, while the 33-year-old woman was sentenced to two years by the Campbelltown District Court on August 30, 2024.
The duo was found guilty of installing ATM shimmers—thin metal devices that capture card data—on ATMs across Sydney and Melbourne. These devices allowed them to clone victims’ financial information, which they later exploited for financial gain.
The JPC3 launched its investigation in June 2023 after the United States Secret Service reported suspicious packages of ATM shimmers being sent to Australia. Investigators identified the Romanian nationals as key suspects and witnessed them installing the devices and using stolen data to withdraw funds.
In August 2023, a search warrant executed at their Rhodes residence and a rented vehicle led to the seizure of $12,935 in cash, multiple shimming devices, false identity documents, and electronic equipment. Both suspects were arrested shortly after.
The man pleaded guilty to multiple offenses, including possessing identification information for fraud and dealing with proceeds of crime, resulting in a four-year and two-month sentence with a non-parole period of two years and six months. The woman faced similar charges and received a two-year and six-month sentence, eligible for parole from February 3, 2025.
Detective Superintendent Tim Stainton emphasized the effectiveness of collaboration among law enforcement agencies in combating cybercrime. He noted that this case serves as a reminder that criminal actions are traceable and that the AFP is committed to prosecuting offenders.
Both offenders are expected to be deported upon completing their sentences. The seized assets, including cash and devices, have been forfeited to the Crown.