White Paper
Winning the Malware Arms Race
BioCatch takes a unique approach to solve the Trojan predicament. Rather than detecting a specific Trojan variant, wouldn’t it be better to detect all types of malicious actors, be it Trojans, bots or other adversaries? And what if we could not only protect against current, known, threats, but also future, unknown modes of operation? And finally, what if this detection can be truly continuous, easy to integrate with and deploy, with tools that provide visibility into the user activity?
White Paper
New Account Opening: 3 Ways Behavioral Biometrics Can Spot Criminals and Protect Customers
New account opening fraud can directly impact the bottom line and threatens new digital business models, especially those that rely on growth through rapid customer acquisition. From credit cards and deposit accounts to a wide range of lending products, cybercriminals spare no effort to turn a profit by exploiting weaknesses in the digital onboarding process. This e-book explores the financial and business impacts of new account opening fraud, the effect on customer experience, and how behavioral biometrics can be used to reduce fraud risk and increase customer acquisition in digital onboarding.
Data Sheet
Advanced Behavioral Biometrics with BioCatch
White Paper
Five Things Fueling Account Takeover
Account takeover fraud remains an ongoing problem for financial institutions, e-commerce merchants, and virtually any organization that offers products or services that can be monetized. Last year, account takeover fraud cost U.S. businesses nearly $7 billion in losses. This e-book provides insights into what is fueling the growth in account takeover attacks, what traditional fraud prevention tools are missing, and new strategies and approaches to fight back.
Data Sheet
Case Manager
The BioCatch Case Manager tool empowers fraud operators to investigate high-risk activities and provide genuine and fraud feedback in real-time, reducing the fraud-review operational cost and enhancing accuracy of the risk engine based on confirmed fraud cases. The Case Manager tool helps simplify investigation and drives faster resolution, while providing visibility into the fraud operators activities and workload
Within a remarkably short period of time, COVID-19 has dramatically altered the way in which the global population works, transacts, and interacts. Social distancing, a term that was not in most people’s vocabulary just a few short months ago, is the new norm. Fraud and AML operations functions at financial services firms have not typically consisted of a remote-enabled workforce, nor are most operations centers known for ample space between workers, so the shift to remote workers and the requirements of social distancing have necessitated a rapid adjustment for firms around the globe.
The US banking industry has made a significant leap forward by launching Zelle, a real-time p2p platform for moving money from the user’s bank account to an email/mobile contact. In Q3 2019, Zelle traffic was reported to be 196 million transactions with a volume of $49 billion, and many banks in US are now offering Zelle functionality via their online and mobile banking applications.
According to multiple threat index reports issued at the end of 2018, the threat of Remote Access Trojans (RATs) is at an all time high. One RAT made Checkpoint’s Global Threat Index Top 10 list, while Proofpoint reports that the number of RATs doubled each quarter of 2018, accounting for more than 5% of all malicious payloads for the year, marking a significant change from the past.
Zelle is awesome! The highly innovative P2P scheme allows people to pay in real-time from their bank account to any of their contacts. It’s easy to use, super-fast and extremely convenient.
Digital transformation has introduced exponential opportunity in the financial space. The way we manage our money online (via banking, money transfers and shopping) has changed dramatically. We have moved away from a one-time, occasional transaction with a merchant, requiring several steps to checkout, to a continuous, connected relationship and quick, instant checkout. Digital identity has evolved into an essential part of the modern money lifecycle, bringing into the mix issues of securing personal data, privacy and more. At the same time, data breaches and phishing attacks have created an abundance of stolen credentials, turning identities into the most consequential attack vector in the financial world. During this webinar, Ayelet Biger-Levin, VP, and Gareth Campbell, Head of Threat Analytics, will discuss how BioCatch enables the future of money by providing a secure and frictionless user experience across multiple use cases such as account opening, login and payments.
Data Sheet
Policy Manager
The Policy Manager allows fraud teams to define the actions that should take place depending on the various system outputs, streamlining the implementation process and heightening the usability of the BioCatch system. Going beyond simply providing a best-of-breed risk score, the BioCatch Policy Manager offers flexibility in establishing the actions that should occur if the user behavior inside a session triggers a predefined condition. Instead of building rules based on 0-1000 ranges that have to be well-understood for a particular environment, the Policy Manager allows fraud analysts to benefit from added logic that mitigates fraud in real-time, simplifies back-end operations and assists with gathering data for proactive, investigative analysis.
New account fraud continues to grow at a rapid pace, threatening new digital banking business models and fintech platforms such as Zelle, that are in a customer acquisition race. Convenience, speed and ease of use make digital the preferred channel for consumers, but also open the door for criminals. With 14.7 billion personal records stolen in the last 6 years and the proliferation of synthetic identities making it very difficult to tell the difference between a legitimate applicant and one that will result in loss, new models for identity verification are starting to emerge, with behavioral biometrics as a key component.
Identity is everything on the internet. Every authentication hurdle online users need to jump through, such as two-factor authentication and passwords, is aimed at one goal – verifying the identity of the user. Digital identity has never been as important as it is now and will only continue to grow in importance as digital transformation takes hold.
This tier-one credit card issuer suffered from millions of dollars in fraud losses caused by the use of stolen personal information or synthetic IDs in the application process. Their existing fraud detection model was based on traditional means of verifying identity – personal data, device reputation, etc.
One-time passwords (OTP) remain one of the most widely used forms of two-factor authentication, despite their well-documented vulnerabilities. Earlier this year, a major UK bank was hit by an attack in which fraudsters diverted text messages from legitimate customers’ phones in order to bypass two-factor authentication and access accounts.
Webinar
Vishing and the Rise of Authorised Push Payment Fraud: How is BioCatch Fighting This Epidemic
Vishing costs British banking customers millions of pounds every year and has become the fastest growing scam in the United Kingdom, but the risk is not limited to that country. In a typical vishing fraud case, the criminal dupes his/her victims into performing financial transactions. For example, a fraudster may call the victim disguised as a security official from his or her bank and, after establishing trust, coerce the victim into transferring funds from his or her account into the scammer’s account as a ‘security measure.’ This voice-based, social engineering crime is only growing in popularity and is set to cost banking customers even more money in the coming years.
White Paper
Behavioural Biometrics in a PSD2 World
The financial services industry is in the midst of sweeping change. Earlier this year, we saw one of the latest shifts with the introduction of the European Union’s revised Payment Services Directive (PSD2).
Data Sheet
BioCatch Analyst Station
The BioCatch Analyst Station is a web-based interface that displays the data for one or many sessions and provides summary reports. The portal enables the customer to easily detect and act upon possible fraudulent activity in user accounts. The BioCatch Analyst Station is used for post-session data analysis, typically at the end of each day or whenever required by the administrator.
Data Sheet
Behavioral Biometrics in a P2P World
In recent years, Peer to Peer payments have shown a significant increase, passing the $120 billion mark (2017). Currently, one in three American consumers uses P2P apps to make instant payments to friends, relatives, service providers, or anyone they owe money. Since P2P account opening does not require identity verification, it is vulnerable to various types of fraud and threats including malware, social engineering, remote access, SIM swapping, call forwarding and other techniques. Using these techniques, the fraudsters are able to exploit two main points of failure:
Case Study
A Top-5 U.S. Bank Detects TrickBot Malware Attacks with BioCatch’s Behavioral Biometrics Solution
Malware infections and Remote Access Trojan (RAT) attacks are on the rise, enabling cyber criminals to take over accounts from afar and automate fraud. Despite traditional fraud detection measures and cybersecurity safeguards, malware and RAT attacks remain prevalent. Undetected malware attacks can result in direct losses to account holders and have a long-term detrimental effect on business and customer confidence.
Data Sheet
Behavioural Biometrics in a PSD2 World
In recent years, a growing number of organizations have employed two-factor authentication (2FA) as a primary safeguard mechanism. They all share the notion that requiring a second security layer will be instrumental in reducing data breaches and identity theft. Two-factor authentication is based on the fundamental assumption that at least two out of three authentication factors are used in the process (“something you know, something you have, something you are”). 2FA is not a new security measure, nevertheless, it is in extensive use, despite the growing recognition that it is not so effective.
As account opening continues to transition from physical to digital channels, financial institutions, issuers, lenders, and other organizations must optimize the digital experience of applicants in order to compete. At the same time, fraud is on the rise as criminals have become more successful than ever, thanks to some of the same digital channel benefits enjoyed by consumers: convenience, speed, and ease of use. To achieve the necessary balance between preventing fraud and providing a delightful experience for consumers, an approach to identity proofing that accounts for the channel, product, customer, and threat environment is absolutely critical. But regardless of the approach, inconspicuous solutions — like those based on applicant behavior — have a distinct role to play in how institutions manage the risk of application fraud.
The global insurance market is a multi-trillion-dollar market worth more than $4.5 trillion in gross insurance premiums (2015). In 2016, the gross insurance in premiums in the U.S reached $2.67 trillion with $1.5 trillion in paid claims.
Data Sheet
Behavioral Biometrics for Mobile Payments
Digital transformation in banking and retail is rapidly evolving. In this fast-moving environment, where finance and fraud intersect, there are several ramifications for financial institutions and the user experience.
The equation is quite simple: where there is money, there is fraud. As the use of mobile banking grows, so do the threats of hacks, malware and other remote attacks. Traditional means of detecting fraud can take considerable time and resources, sometimes taking weeks to detect or to confirm an incident.
In the digital world - whether mobile payments, e-commerce or online banking – this is much too long. Transactions happen quickly, and any delay can have significant repercussions, both from a consumer confidence perspective and a cost perspective. In the digital world, it seems there is always a choice to make between security and the user experience.
As mobile devices eclipse computers and laptops as the preferred method of going online, fraudsters have followed users, porting their modus operandi –account takeover, social engineering, and malware based remote control attacks – to the mobile arena. Mobile has opened up many new ways for users to communicate and connect without being tied to a desk or a power outlet – and at the same time, it has presented hackers with many more opportunities to perpetrate fraud and carry out attacks that cannot be detected with traditional tools used to detect attacks in web sites. As a result, companies need to apply new fraud controls to protect mobile users and enable them to carry out transactions, check bank accounts, make purchases, etc.