Wire Fraud: New Threats & Old
Several articles have surfaced online this past week related to payment fraud activity tied to distributed denial of service (DDOS) and wire fraud. While the goal of DDoS attacks has primarily rested on taking down banking websites and causing customer access issues and inconvenience, a more sinister byproduct is being introduced to this method of disruption.While the IT security teams are distracted and working to correct or react to DDoS attacks, fraudsters carry out attacks on other transactional activities. And, as noted in this week’s articles, the focus goes beyond taking over individual computers or accounts to target and raid, but taking control of a complete wire system. I’m not surprised at the ingenuity of the approach, but would like to better understand what measures were in place to protect the payment switch and subsequent wire fraud.
In her blog, Avivah Litan, VP, Distinguished Analyst, Gartner, states "One rule that banks should institute is to slow down the money transfer system while under a DDoS attack." She continues with "more generally, a layered fraud prevention and security approach is warranted."
When thinking about wire fraud management, the layered approach referenced by Litan, should include:
- inherent wire system security controls such as segregation of privileges, 4-eyes principle, risk limits, amount limits, and complex password control features, coupled with
- a transaction monitoring system capable of profiling and understanding standard behavior and alerting on anomalies in a real-time to mitigate and minimize loss. Only then will
- the combination of these facilitate monitoring holistic spectrum of activities before, during and after wire activities rather than using single line defenses which can be vulnerable
Banking systems will always be a target for fraud schemes as will software and IT infrastructures that move money. Security protocols, fraud and AML prevention and detection techniques must continue to keep pace with potential criminal activity in even the most presumed safe environment - easier said than done with often limited resources. With millions of dollars and reputational risk at stake, the imperative is there in order to achieve peace of mind.
For some additional perspective, check out ACI’s recently published White Paper on wire fraud which gives an overview of what wire fraud is about and the varying tools and tactics the criminals use to commit this type of financial crime. It also covers the legal landscape, case studies and includes recommended best practices to address and combat wire fraud.
Wire Fraud: New Threats & Old by Michael Grillo
Related Blog Posts
Payments and Fraud: The Paradox Twins
Digital commerce through web and mobile is where merchants predominantly experience shopper growth today. This has become a hugely important domain for their focus. It offers a means for international growth, new market penetration and a way to engage with shopper-hungry Millennials in their culture. Merchants frequently adopt a Digital-First, eCommerce-First or Mobile-First strategy to ensure full corporate buy-in to this strategy.
Knowing New Customers – And How Shared Data Helps in Fighting Fraud
As the eCommerce industry continues its rapid growth, the lines between physical and digital shopping are becoming increasingly blurred. These changes are creating a number of challenges for merchants, not least around customer visibility and fraud prevention.
Adding a Global Payments Layer for Future Growth
Digitization has changed the payments industry completely and irrevocably. Cash payments are in full retreat, as more people pay digitally – with more than 1.6 billion people now shopping online. The digital customer expects an extremely fast and convenient payment experience, with high security standards, and immediate availability of payments information.
Let’s Get Phygital: eCommerce Is Coming To A Store Near You
While payments vendors continue to pitch and strategize with a focus on omnichannel, the omnichannel story has already moved on.
Make no mistake – omnichannel remains important and the best vendors have solutions that provide a single cloud payments service capable of delivering a single view of the customer across stores and digital channels. And the best retailers utilize these solutions to deliver efficient cross-channel shopping experiences. Meanwhile, many other retailers get by (though seldom rise to the top) with a siloed approach.
Around The World: Taking Stock of Global eCommerce in 2019
As I head to #NRF2019 in New York City next week, I’m excited to see how some of the biggest retailers and merchants see the industry evolving over the coming year. What trends they think are going to shape 2019, and which of 2018’s buzzwords can be put to bed.
Fraudsters Don’t Wait for Peak, So Neither Should You: 2019 Fraud Strategy Starts Now!
In existence for barely two decades, eCommerce has transformed not only the way we shop, but also how retailers plan and execute their marketing strategies around the peak shopping season. Now that we’re deep into this period, retailers will have prepared for changes in buyer behaviors, relaxed their strategies to be within the limits of manageable review rate, and most important of all, put strategies in place for increased fraud attempts.
The Power Behind Payments – Is It Time for the ‘Slow Fintech’ Movement?
According to a freshly-minted piece of research from the Dutch central bank, choosing card payments over cash is not only convenient, it’s also good for the environment. The study considers everything from the origin of cotton that goes into the production of (Euro) banknotes and the environmental impact of armored vehicles to transport cash, through to the energy usage of POS card payment terminals in standby mode.
‘Soup To Nuts’ – A Multi-Layered Fraud Menu for the Holiday Season
The holiday shopping season is well underway, with Black Friday now behind us and many retailers around the world braced for higher levels of eCommerce fraud, from Cyber Monday all the way though until Christmas.
The ‘Internet of Things’ is the Game-Changing Next Step for Telcos… But What Are They Missing?
As I travel to meet new telcos and attend an array of trade shows around the globe, one discussion that comes up again and again is how the telco industry can gear up for the world of IoT. And it’s not just a topic that telcos are “a bit” interested in – the sector believes that IoT will drive the fourth industrial revolution, likening it in importance to the discovery of steam power.
The Challenge of Catering to the Anything, Anywhere, Anytime Retail Shopper
Ten years ago, retail eCommerce was a fairly simple provision; most retailers’ websites offered a small range of products with long lead times, local delivery and postal returns. Payments were mostly completed by card in the local currency, and the online customer experience was less than slick.