/security

News and resources on cyber and physical threats to banks and fintechs worldwide.

Discussion
Sustainable finance, data, and technology: The way forward for a climate resilient future
Richard Peers

Richard Peers

  excellent a must read
UK Finance reveals huge rise in APP fraud
Ketharaman Swaminathan

Ketharaman Swaminathan

  Sympathies for the victims and all that but what did they expect when they handed over their online banking creds to callers? In all the kerfuffle about identity, confirmation of payee, etc., we forget one basic human behavior trait: Even if the caller were a genuine bank employee, there will be too much temptation when they get the customer's banking creds. That's precisely why banks limit access to customer accounts on a strictly need-to-know basis among their employees.
Fidor Bank to test fingerprint cards
Hayden Kaya

Hayden Kaya

  Didn't NatWest pilot this back in 2019, wasn't sure on the use case back then and still not sure given the rise in mobile wallet paymets and increases in contactless limits (in the UK at least)
How to take ownership of SCA by understanding Authentication vs. Authorisation
Ketharaman Swaminathan

Ketharaman Swaminathan

  Great post. SCA in the form of 2FA / 3DS has been a thing in India for 15 years. It's "one size fits all". Exemption is not a thing. Going by that sole experience of SCA, I didn't know 3DS has a good degree of flexibility. 2FA has been a conversion killer in India, with failed payments touching 40% at their peak. Going by the nuanced implementation of SCA in EU, I no longer feel it might be a recipe for disaster as I'd thought so far.