I regularly write about fraudulent aspects of finance, and it’s getting worse. As I say in my presentations: “with five billion points of data breach, how can you keep secure?” and this is a key question, as every mobile device is now a point of payment or sale. Equally, as everyone is loosely leaking their…
For a long, long, long, long, long, long time, I’ve talked about biometrics taking off in banking … and it hasn’t. The biometrics market has picked up and tailed off in fits and starts, but there is no real mainstream biometric program out there that I’ve spotted to date. The nearest I got was some…
For a long, long, long, long, long, long time, I’ve talked about biometrics taking off in banking … and it hasn’t. The biometrics market has picked up and tailed off in fits and starts, but there is no real mainstream biometric program out there that I’ve spotted to date. The nearest I got was some…
No, not the state benefits version, but the online version. I've been blogging a lot lately about cybercrime, identity theft and the do's and dont's of social networking. This was in part due to a seminar that took place this week where we were debating the risks related to social networking and mobile finance. There is…
Banks miss a trick in not advising customers how to network socially with safety, so here’s my top do’s and don’ts for social networking. It’s not exhaustive, but just those that are top of mind and banks would do well to send such advice to their customers in writing, online and always when they logon…
After my note about identity theft the other day, I got a nice note from Barry Marshall at Identity Intelligence (IDI), who run a database about fraud. Their numbers are staggering, and they define the issue today is not about Card Not Present (CNP) fraud, but Card Not Necessary (CNN). They noted that over 61,000…
So, there are a lot of things we’re juggling around with in the payments arena, from real-time to TARGET2 to SEPA to SWIFT ISO20022 to mobile to contactless to biometrics and more. I guess I can summarise this area best by using the results from this year’s payments survey because the last section of the…
I mentioned that I spent last Friday morning with card fraud and security experts. The conversation began with a wide view of what’s happening, and a focus upon PCI DSS Standard 2.0, which is yet to be published. The Payment Card Industry (PCI) Securities Standards Council (SSC) have developed new versions of the PCI Data…
Just spent most of today talking about PCI DSS compliance issues with QSAs focused upon E2EE. What? Yea, you heard me right. Delving into an area that I talk a lot about at higher levels usually, but rarely at these levels. Today, I was plumbing the depths of the Payment Cards Industry (PCI) Data Security…
