How to Protect Business from Fraud and Attacks in Digital Banking
Read more
TechCentral
techcentral.co.za

How to Protect Business from Fraud and Attacks in Digital Banking

As businesses grow and the volume of digital transactions increases, not only do opportunities grow, but so do risks. Fraudsters use sophisticated methods, making the security of digital banking critically important for protecting cash flows, reputation, and company development. The Standard Bank Business Digital Security Center helps enterprises understand these threats and strengthen their protective mechanisms.

Main Types of Fraud

Many deception schemes are based on social engineering rather than technical hacking. Phishing emails and SMS messages, calls using vishing (voice phishing), and OTP fraud can impersonate a trusted organization, create a sense of urgency, or direct the user to a link to request a PIN, password, or OTP.

Fraud involving fake accounts and payments can utilize altered accounts or false requests to change a supplier's bank details, while transactional fraud can exploit compromised credentials to authorize payments. Furthermore, remote access fraud allows criminals to gain control over a device and disclose digital banking information.

Basic Protection Rules

The most reliable protection starts with simple and consistent security rules: never disclose your PIN, password, or OTP. Standard Bank will never ask for this information over the phone, email, or via a link.

Any changes to payments must be independently verified. If a supplier reports a change in their bank details, you should contact them using a previously known trusted number before making the payment.

If you receive an unexpected message supposedly from Standard Bank or a trusted supplier, especially if you are pressured to act urgently, you must cease interaction and verify the information yourself using known and reliable contact details. It is also important to protect devices: never install third-party applications or grant remote access to a computer or mobile device during an unsolicited or unverified support call.

Fraud prevention is a shared responsibility, especially for employees involved in payments, supplier management, and online banking.

The Standard Bank Business Digital Security Center provides companies with access to security guides, educational materials, anti-fraud checklists, and information on scam schemes to enhance their protection. Protecting people, systems, and payments that ensure your business functions is part of the 'Where Real Growth Begins' principle.

For practical security resources, visit the Standard Bank Business Digital Security Center. Save the 24/7 Standard Bank fraud reporting number: 0800 222 050, to respond promptly in case of suspected fraud.

Similar stories

How to validate identities digitally without hindering the user experience
Read more
g1.globo.com

How to validate identities digitally without hindering the user experience

Digital security must be adaptable to the specific circumstances of each access. Logging into an account using a daily-use mobile phone differs significantly from executing a delicate transaction from a device never seen before.

For this reason, corporations need to find a balance between identity verification and maintaining a fluid digital experience, preventing every interaction from becoming a series of obstacles.

In addition to determining who is accessing, it is possible to analyze data related to the equipment, behavioral patterns, and the operating environment. Device intelligence, for example, helps identify the characteristics of the device, its usage history, and any indicators that might suggest suspicious behavior.

By cross-referencing this data with biometric and identity information, it becomes possible to make a more complete assessment of the situation, without a single sign being sufficient to define, in isolation, whether the interaction is fraudulent.

A significant change in context may justify the inclusion of an extra authentication phase. Examples include changing devices, exhibiting behavior different from the usual, or executing a higher-sensitivity operation.

The principle adopted is to apply stricter controls only when the risk requires it, instead of imposing the same procedure on all interactions performed.

PNB warns customers about AI-driven attacks amid rise in cyber fraud
Read more
business-standard.com

PNB warns customers about AI-driven attacks amid rise in cyber fraud

The Punjab National Bank (PNB) has cautioned its customers against AI-based cyberattacks, including voice cloning using AI, deepfakes, and phishing, amidst an increase in fraudulent incidents, urging them to remain vigilant.

Highlighting that October is annually observed as Cybersecurity Awareness Month, the bank informed customers that fraudsters are employing increasingly sophisticated methods to make their attempts more convincing.

Ashok Chandra, MD and CEO of PNB, stated in his address to customers that many modern cyber frauds exploit human behavior, particularly trust, fear, sense of urgency, and daily digital habits. Fraudsters can imitate the voice or appearance of family members, friends, or trusted individuals, creating a false emergency to prompt immediate money transfers.

He also noted that fraudulent emails, SMS, or messages can appear highly personalized and indistinguishable from genuine bank communications, making them difficult to detect. Such messages induce panic and compel customers to act without proper verification.

Due to the rise in cybercrimes across the country, banks in both the public and private sectors are actively increasing investments in IT and cybersecurity to counter evolving threats stemming from advanced artificial intelligence, quantum computing risks, and stringent regulatory requirements from the Reserve Bank of India.

Listen to this article

Shrinivas L, Joint Director and CEO of 63SATS Cybertech, pointed out that all these schemes operate on fuel called urgency. He provided examples: a cloned voice of a son reporting his arrest; a video of a police officer threatening digital arrest; or a message stating that a bank account will be blocked within an hour. Shrinivas emphasized: 'Technology has changed, but the scenario remains the same. It causes panic, which forces people to pay.'

As a countermeasure, according to Shrinivas, there is a simple approach: one must pause, verify the information through a chosen channel, hang up, and call the person back using the number saved in the phone. He also advised agreeing upon a family code word known only to household members, since AI can copy voices but not secrets.

Shrinivas added that maintaining digital hygiene is an urgent necessity for people worldwide to protect themselves from emerging cyber frauds. He recommended users enable two-factor authentication for email, banking services, and social media, use a unique password for each platform, and set daily transaction limits via UPI and cards so that one mistake does not lead to account depletion.

Affirming its commitment to protecting customers' hard-earned money and personal information, Chandra from PNB stated that awareness and vigilance remain the strongest partners in preventing cyber fraud. He concluded: 'Cybersecurity is a shared responsibility. Your awareness combined with our security measures creates the most robust defense against cyber fraud.'

Popular