diff --git a/clusters/attck4fraud.json b/clusters/attck4fraud.json
index 5b13025..73d0209 100644
--- a/clusters/attck4fraud.json
+++ b/clusters/attck4fraud.json
@@ -84,6 +84,19 @@
       "uuid": "0e45e11c-9c24-49a2-b1fe-5d78a235844b",
       "value": "ATM skimming"
     },
+    {
+      "description": "Trap the cash dispenser with a physical component. Type 1 are visible to the user and type 2 are hidden in the cash dispenser",
+      "meta": {
+        "kill_chain": [
+          "fraud-tactics:Initiation"
+        ],
+        "refs": [
+          "https://medium.com/@netsentries/beware-of-atm-cash-trapping-9421e498dfcf"
+        ]
+      },
+      "uuid": "1e709b6e-ff4a-4645-adec-42f9636d38f8",
+      "value": "ATM cash trapping"
+    },
     {
       "description": "ATM Shimming refers to the act of capturing a bank card data accessing the EMV chip installed on the card while presenting the card to a ATM. Due to their low profile, shimmers can be fit inside ATM card readers and are therefore more difficult to detect.",
       "meta": {
@@ -380,5 +393,5 @@
       "value": "ATM Explosive Attack"
     }
   ],
-  "version": 3
+  "version": 4
 }