2022年7月25日

在2022年第一季度，金融科技公司遭受的攻擊是前兩年的2.5倍。日益增長的網絡犯罪加劇了市場動蕩，並對金融科技的準備提出了質疑;一些人聲稱，與傳統銀行業相比，行業參與者更容易受到虛擬威脅的影響，因為他們擁有更多的資源。ConnectPay合規主管Thibaud Catry表示，有關金融科技安全性下降的說法是牽強的，盡管由於網絡威脅不斷上升，他鼓勵加強防禦。“在今天這個時代，你的企業規模並不能決定你抵禦騙子的能力，”卡特裏說。“傳統銀行擁有的龐大的欺詐預防部門正在變得過時，因為‘數字優勢’範式已經轉變為‘技術優勢’。現在，隻需利用適當的工具和自動化，就可以用更少的人力，以同樣甚至更高的效率防止欺詐。”他還指出，在某種程度上，傳統銀行的長期信譽使它們麵臨更大的風險。例如，在網絡釣魚攻擊中，大銀行通常是騙子的更好目標，因為它們服務的人數非常多。“如果一個人在一家知名銀行開設了賬戶，並收到了賬戶被封的通知，他/她更有可能會點擊鏈接。 As a result, scammers frequently target people using the most common bank names, exploit brand awareness to reel in unaware clients.” Threats on the rise When comparing the pre-pandemic period with the first couple of years of the pandemic, reports indicate that online fraud attack rates have shot up by 233%. Fintechs have not been immune as well, with attacks on the industry players reportedly soaring by 70% in 2021. Catry has shared this is largely felt across the industry, noting an increased amount of phishing attacks, Brand Abuse, and CEO scams (fraudsters impersonating a senior company manager). The latter is harder to stop, as social engineering types of frauds prey on and exploit human trust. “Even the best technology implemented might not work if a recipient blindly trusts any sender, does not take time to evaluate the legitimacy of content, and press any link s/he gets,” Catry said. In the last few months alone, ConnectPay had to up their security several times; most recently – when Russia invaded Ukraine . Early preparations have helped keep scammers at bay and clients’ funds secure so far; Catry accredits resilience to securing not only their systems’ backend but also their website, having its backups on another domain. The company also uses its own cyber security solution to maintain ironclad safety. Although the trend is continuing upward, he emphasized that being digitally native enables the fintech sector to handle cyberthreats with more ease than legacy banking could. Yet one crucial point on both sides needs greater attention. “The importance of sound tech safeguards in place cannot be overstated, but when it comes to security, human decisions, rather than technology, is still the weakest link in the chain,” he added. Educating clients to limit human error Building awareness both internally and externally (the latter is often overlooked) could significantly change the power dynamic. Catry noted that while training employees on the most prevalent scam scenarios is a common practice, clients are usually not part of this process, even though they are the primary target. “Raising awareness regarding fraud is key to making sure that the preemptive safeguards hold up. Of course, fraud prevention requires sophisticated technical solutions to quickly spot and address anomalies in transactions. However, you cannot be one step ahead if all the people, involved in the process, are not aware of possible risks.” Daily Newsletter - E-mail sent every business day with a recap of the last 24 hours Weekly Newsletter - E-mail sent every Monday with a recap of the last 7 days (IN)SECURE Magazine - E-mail sent when a new issue is released