I remember reading in one of Bruce Schneier's books that some clever thiefs set up a fake ATM machine outside the Burlington Mall in CT. When people went to withdraw money, the machine recorded their credentials and then displayed an ambiguous error message.

You have to wonder how they got the information from the machine, as it would have been relatively easy for the police to watch it once someone figured out it was a fake.