Jake Moore’s Post

View profile for Jake Moore, graphic

Global Cybersecurity Advisor | ESET

From October, UK banks will be 💯% liable for #scam losses - even when the payment is authorised by the customer. (It doesn’t mean you can all go and get scammed now! 😅) Authorised Push Payment fraud is where a victim is tricked into making a large bank transfer to an account posing as a legitimate organisation. But in a few months, people will be fully reimbursed and the costs will be equally divided between the bank managing the customer's account sending the funds and the bank operating the account receiving them. 🤔 Not only could this force banking costs to rise, I predict we could see an increase in attempts as fraudsters will know the money is available. I also think we may see an uptick in first-party fraud where the actual account holder uses their own credentials for fraudulent means.

  • No alternative text description for this image
Andrew Fleming ICA AML Dip

MI and Reporting EMEA Head | Keynote Speaker | AI In Business | Anti-Money Laundering | Fraud | Terrorist Financing | Data Management | Assurance | Management | Cross-border Investigation | Corruption

3w

At what point does the customer become responsible for their own actions? I have seen cases where I have personally informed the victim that they have been the subject of fraud, yet they are so emotionally invested, they still send the fraudster money (romance fraud in particular). There are even cases where the alleged activity the alleged victim is involved in is itself a criminal offence, yet the victim then complains when they find out that they are the target of the crime, not the insurance company, bank, or relevant executer of a will. In those cases, should we really be reimbursing the victim? My personal belief is that there needs to be some sort of balance in the equation. If there isn't, then we may open the doors to even more frauds, especially when "victims" realise that they will never be held to account.

Aiden Arnkels-Webb

SMB Cybersecurity Guardian | Bridging the gap between IT, Security and Insurance | Empowering SMBs to Grow Fearlessly in a digital world

3w

You pinched my post! Just kidding - but you beat me to the punch. I've been talking about this a lot lately in the context of a business I was contacted by last year. £300k gone from a phone-call man-in-the-middle. The bank refused to reimburse because it was "authorised" and the business went bust. It's a very positive development - it is capped at £415,000 and still excludes Gross Negligence, but puts the onus on the bank to prove negligence rather than on the customer to prove they weren't.

On one hand this sounds like a great idea and about time, but on the other can you see this will mean that free banking for consumer will come to an end and actually doing any banking transactions will become even more painful, bank branches are closing so face to face confirmation is becoming harder, it is actually quite painful to move sums of money as it is, will this make it even harder and more painful for the customer?

Scott McGready

Maker, Breaker, Fixer, Faker. Focusing on making the world a safer place

3w

Fully agree. We need to be careful how this is broadcast to stop a feeling of “well I’ll get the money back anyway” which will impact costs for everyone.

Jakub Osmani

Penetration Tester at ESET

3w

Won't this just motivate the scammers to move the funds out of a UK bank asap? I've even seen scams in the Czech Republic, where the scammer asks for an international transfer outright...

Christopher Petrides Ⓥ

Intrapreneur | Executor of Board Strategy | Startup Advisor | CRO of 3CT Security | B.Com MM

3w

Wow, banks covering scam losses? That's big news! But let's not forget, smarter fraud detection systems will be key. Can't just throw money at the problem and hope it goes away.

Adam Moss

Technical Sales Lead- AVoptics | Optical & Engineering Solutions

3w

This seems to me like it will make consumers less cautious, why do their due diligence and assess the situation properly if they'll get their money back anyway?

Emma King

Legal Executive/Director at Matthew & Matthew

3w

Interesting! Surely there should be more punishment on the bank who let the crook open the account in the first place!

One of the benefits of PSD2, you have baked in strong Customer Authentication methods which support a more resilent process to users not being scammed. Not to say it still cant happen and indeed will, but the level of data collected on the user flow in PSD2 via any banking transaction means there's a decent level of informationo to detect on whether something is potentially and actually fraudelent!

See more comments

To view or add a comment, sign in

Explore topics