Telephone Banking Authentication Practical Approaches to Securing a Popular yet Vulnerable Channel



Similar documents
PCI Compliance: Finding Value beyond Fine Avoidance

Online Storage Vaults The Electronic Safe Deposit Box Brings Opportunities for Loyalty and Fees, but Can It Overcome Daunting Challenges?

E Commerce Platform Review:

2011 Online Account Opening:

Multi-Factor Authentication of Online Transactions

Voice biometrics. Advait Deshpande Nuance Communications, Inc. All rights reserved. Page 1

Voice Authentication On-Demand: Your Voice as Your Key

FFIEC CONSUMER GUIDANCE

FFIEC CONSUMER GUIDANCE

IDRBT Working Paper No. 11 Authentication factors for Internet banking

Using Voice Biometrics in the Call Center. Best Practices for Authentication and Anti-Fraud Technology Deployment

FIS Dispute Resolution Center Dispute/Fraud Cover Sheet. FRAUD INVESTIGATION FORM PO Box Tampa, FL Or by fax to

Voiceprint. México. May 2014

Online Banking Risks efraud: Hands off my Account!

Developing A True Multi-Channel Contact Center

Knowledge Based Authentication [KBA] is not just for onboarding new customers

Shared VRU. A Key Link in Your Customer Service Chain Kyle Shadday, Director, Voice Response Strategy

CSR REPORT 2016 Corporate Social Responsibility Report

2011 B2B Marketing BenchMark Report

ExtendTime Time & Labor Management

State Network Consumer Assistance Small Group Consultation Call Center

Guidelines for Accepting Credit Cards as a Form of Payment for Education, Registration and Other Fees

Securing e-government Web Portal Access Using Enhanced Two Factor Authentication

ONLINE CREDIT REPORTING S SUITE SOLUTIONS MEMBERSHIP GUIDELINES

Dissecting Wire Fraud: How it Happens, and How to Prevent It WHITE PAPER

SECURITY FREEZE INFORMATION

Volume Challenges? Technology Can Help A look at the many ways in which technology is a resource for managing peaks and unpredictable volume.

PHONE FRAUD & SOCIAL ENGINEERING: HOW THE MODERN THIEF ROBS A BANK A WHITEPAPER BY PINDROP SECURITY

Vendor Solutions Gateway

Customer experience roulette: are banks making the right investments?

Checking Switch Kit. 1. Get Organized. 2. Switching Your Direct Deposit. 3. Switching Your Automatic Payments. 4. Request to Close Account

PROTECTING YOUR CALL CENTERS AGAINST PHONE FRAUD & SOCIAL ENGINEERING A WHITEPAPER BY PINDROP SECURITY

AUTHENTIFIERS. Authentify Authentication Factors for Constructing Flexible Multi-Factor Authentication Processes

How To Control Credit Card And Debit Card Payments In Wisconsin

FIS Dispute Resolution Center Dispute/Fraud Cover Sheet

REPORT. Next steps in cyber security

Visa Debit processing. For ecommerce and telephone order merchants

Improving Small Business Payments Processing

Welcome to Golden Belt Bank We Appreciate Your Business

Hitachi ID Password Manager Telephony Integration

SECURITY FREEZE INFORMATION Any consumer in Wisconsin may place a security freeze on his or her credit report by requesting it in writing.

Account-to-Account Transfer Services Risk

Enterprise Readiness Series: The Case for Passive, Voice-Based Authentication

Penetration Testing Guidelines For the Financial Industry in Singapore. 31 July 2015

Inside Electronic Signature APIs

Contact Centers: The Fraud Enablement Channel

Understanding and Combating Online Fraud in 2014

Osterman Research Executive Summary

Vishing (and SMiShing ) Countermeasures

Solutions. Billing and Payment Solutions for Billers A Multi-Channel, Integrated Approach to Reduce Costs and Delight Customers

XYPRO Technology Brief: Stronger User Security with Device-centric Authentication

Secure Data Exchange Solution

2014 Media Kit & Editorial Calendar

Accounts Payable and Payments Policy

Defending the Internet of Things

Completing an Accounts Payable Audit With ACL (Aired on Feb 15)

Protective Life Corporation (PL) - Financial and Strategic SWOT Analysis Review

BENCHMARK REPORT Social Marketing. New research and insights on the monetization of social marketing for ROI. sponsored by EXCERPT

Frequently Asked Questions on FFIEC Guidance on Authentication in an Internet Banking Environment. August 15, 2006

Hospital Certified Electronic Health Record (EHR) Technology Questionnaire

2. Once the 5 day right to cancel period has passed, we will begin investigating and repairing your credit profile.

Failure to follow the following procedures may subject the state to significant losses, including:

E Source Multichannel Metrics Survey 2012

Transcription:

Telephone Banking Authentication yet Vulnerable Channel March 2007

Overview Financial institutions (FIs) must implement effective authentication solutions that address specific, often mutually exclusive threats from different channels, while remaining in compliance with FFIEC guidelines which pertain to both telephone and online channels. With phone usage increasing over historical levels, this report provides comprehensive coverage and analysis of consumer preferences toward telephone banking, and evaluates the authentication methods currently being used by FIs for the phone channel. Building upon robust consumer data generated from a survey of 3,215 respondents, Javelin also interviewed several top FIs and authentication solutions providers to obtain qualitative input on current phone security efforts and market trends. Finally, Javelin investigates several well-known phone authentication products. Primary Questions How can FIs secure the phone channel, while maximizing efficiency and reducing costs? Which phone authentication solutions provide the best security? What phone authentication solutions are FIs using? How many consumers conduct phone banking transactions (compared to other channels)? How secure do consumers feel using the phone channel? Audience: Author: Contributors: Editor: Financial institutions and authentication solutions providers Rachel Kim, Research Associate Bruce Cundiff, Senior Analyst Mary T. Monahan, Editor Publication date: March 2007 Length: 23 pages 11 charts/graphs Price: $950

Table of Contents Overview. 3 Primary Questions... 3 Findings and Analysis. 3 Over One-Third Of Consumers Bank By Phone: Channel Security Is Critical... 4 Confidence High In Telephone Banking Safety Despite Fraud Potential... 6 Expect Growth In Telephone Fraud With Advent Of VOIP 7 Weak, In-Wallet Authentication Prevails On The Phone Channel 9 Fortify Phone Authentication With Risk Scoring, Voice Biometrics And KBA... 12 Vendor Solutions By Need: Comprehensive Or Component. 14 What s The Bottom Line.. 16 Related Research... 17 Appendix A: 15% Of Fraud From In-Store, Mail Or Telephone Purchases. 18 Appendix B: Online Bill Payers Have Higher Rates Of Phone Contact Then Non-Bill Payers 19 Appendix C: Telephone Channel Usage Increasing Over Historical Levels... 20 Appendix D: Two-Thirds Of Consumers Use Telephone Channel... 21 Appendix E: Passwords And Voice Recognition Are The Top Phone-Based Solutions... 22

Table of Figures Figure 1: Used a Phone Operated System to Perform a Banking Function 4 Figure 2: Spoke By Phone with a Bank or Credit Union Representative. 5 Figure 3: How Consumers Rate the Safety of Using a Phone Automated System... 6 Figure 4: How Consumers Rate the Safety of Speaking with a CSR... 7 Figure 5: Telephone Authentication Factors Used By Top 23 US FIs. 9 Figure 6: Phone Authentication Model.. 12 Figure 7: Sources of Identity Fraud... 18 Figure 8: Financial Activities in Past 12 Months by Bill Payer at Bank Web Site... 19 Figure 9: Consumer Financial Activities by Type and Time Period.. 20 Figure 10: Percentages of Online Consumers Who Have Ever Used these Channels 21 Figure 11: Consumers Preferred Methods of Authentication for Online Accounts 22 Companies/Organizations Mentioned in Report Verid Experian Digital Resolve TradeHarbor RSA VoiceVerified Additional Report Topics Phone authentication Call center adoption Vishing Pretexting Voice Biometrics Biometric Authentication FFIEC Compliance CSR Security VOIP Security Knowledge Based Authentication (KBA) Interactive Voice Recognition (IVR) Risk Scoring Adaptive Authentication Voice Signature Service

Sample Pages

Health Savings Accounts: Focus on Transactions and Product Development Will Lead to Asset Growth Target Place Your Order as Follows: 1) Call us at 925 225 9100, x26 2) Email us at 3) Fax or Mail using the form below: Please send me the following report(s): Report Title Publication Date Price Name Title Organization Division or group Email Phone Fax Address Signature to confirm your order: Payment Method: [ ] Payment card [ ] Check Enclosed [ ] Invoice me Visa, MC, AE or Disc. card #: Exp date: / Name on Card: Signature For invoicing, provide PO number: (Invoicing is available to financial institutions or publicly owned firms) Note: Reports are provided in electronic PDF form only. Javelin reports are subject to standard terms and conditions, as described on our web site. Javelin will contact you in the future to provide our free research newsletter or other mailings. If you do not wish to receive our newsletter or other mailings, you may advise us of this. Your contact information will not be sold to other organizations.