Payment safety After many consumers were recently defrauded, experts say users must accept heightened security methods when paying online

Asia's Tech News Daily
Payment safety  After many consumers were recently defrauded, experts say users must accept heightened security methods when paying online

A person shows several rapid cash withdrawals, each of 34.15 baht, that appeared in her bank passbook when it was updated. (Photo from the ‘Sharing Experience on Unaware Cash Withdrawals’ Facebook page.)

Related parties share a common view that the security bar must be further raised by both users and service operators to prevent cybercrime regarding online payment transactions.

Panic broke out last week after scores of bank card holders, particularly those with debit cards, complained via social media that their money had been removed without their knowledge or that they had been charged for certain online services that they didn’t want.

Many of the fraudulent transactions were for small sums but occurred repeatedly.

Many victims are sharing their experiences on a Facebook page called “Sharing Experience on Unaware Cash Withdrawals”, which has now attracted almost 100,000 members.

Payment safety  After many consumers were recently defrauded, experts say users must accept heightened security methods when paying online

Cyber threats are expected to escalate in the new normal lifestyle where people become more engaged in online shopping, digital payment and mobile wallets.

HIGHER SECURITY BAR

The National Cyber Security Agency (NCSA) indicated that the recent spate of unauthorised withdrawals of cash debited via the customers’ credit and debit cards suggests the bar must be raised when it comes to security among both users and service operators.

Group Captain Amorn Chomchoey, acting secretary-general of the NCSA, said a one-time password (OTP) must be required for transactions of all sizes. At present, a small value transaction may not require OTP verification for the sake of customer convenience.

Some apps may currently only use an OTP during subscription.

Both businesses and technical teams may have to find a balance between security risk and users’ convenience.

Users will have to accept heightened security methods, said Gp Capt Amorn.

“We have become more familiarised with the use of e-payment following the pandemic and we have barely got back to using only cash now. Users need to set a level of acceptable risk, such as a ceiling,” he said.

Users should not use one account for all the services they receive, he said.

During the recent mass unauthorised withdrawals from bank accounts, he said, perpetrators were likely to use bots to randomly check the validity of card data, including the card number, expiry date and CVC.

Therefore, financial institutions need to detect such automated bot attacks and fraud to minimise risk, he said.

Gp Capt Amorn said consumers must accept more inconveniences through an OTP requirement for every transaction.

Consumers need to avoid using the same pass codes for every log in, such as smartphone access and mobile bank apps.

They need to link their emails with bank apps to receive notifications of transaction details and avoid using the same email passwords with all social media and online services they engage with because if the passwords were leaked, those accounts would be all gone, he said.

In the long run, the country may need as many as 100,000 cybersecurity experts with the knowledge required to detect and prevent cyber attacks and restore data following such incidents.

By next year, NCSA aims to increase the number of cybersecurity staff who have the Certified Information Systems Security Professional (CISSP) status from 250 to 300, Gp Capt Amorn added.

Payment safety  After many consumers were recently defrauded, experts say users must accept heightened security methods when paying online

PREVENTIVE MEASURES

Yeo Siang Tiong, general manager for Southeast Asia at Kaspersky, a global cybersecurity firm, suggested various measures to prevent users from falling prey to cybercriminals.

“Each extra level of protection makes it harder for scammers to reach their goal, and ultimately minimises your losses,” he said.

“You should enable 3D-Secure [MasterCard SecureCode, Verified by Visa] for all online payments and two-step authentication in your online banking tool, choose terminals with chip and PIN support and say ‘no’ to those requiring only a swipe and signature,” said Mr Yeo.

He suggested online payment be done through secure WiFi networks and the installation of a robust antivirus solution on PCs.

Paying with a credit card at large retailers can be potentially dangerous, if a special trojan had infected their systems. This specifically applies to many retailers because often they use outdated point of sale (POS) terminals.

A leak of payment data from online merchants is another concern.

“A criminal could have somehow managed to track down the shop, which used an outdated processing system with no support for 3D-Secure, and therefore charge the victim’s card,” said Mr Yeo.

“To minimise risks, it is also best to not store your financial credentials with merchants.”

When finding out card details have been compromised and malicious transactions have been done, users must quickly report to the banks and have their cards blocked.

“This is because someone who stole your card credentials can also resell it to various people,” he said.

According to Mr Yeo, users should have a minimum of between two and four cards.

“One dedicated card should be used only for online payments and you should avoid storing large sums on it,” he added.

Payment safety  After many consumers were recently defrauded, experts say users must accept heightened security methods when paying online

Exposure to cyber threats may increase as people become more engaged in online shopping.  PAWAT LAOPAISARNTAKSIN

CYBER THREAT CONCERNS

Cyber threats are expected to escalate in the new normal lifestyle, in which people have become more engaged in online shopping, digital payment and mobile wallets.

According to the Electronic Transactions Development Agency (ETDA), the value of e-commerce in Thailand stood at 3.78 trillion baht in 2020, but it is expected to surge 6.1% to 4 trillion baht this year.

The value of the e-commerce industry in Thailand is expected to register a compound annual growth rate (CAGR) of 9.7% between 2017 and 2021.

This highlights the surging engagement of e-commerce among customers in Thailand, which could also make them more exposed to the threats.

Prinya Hom-anek, a cybersecurity expert, indicated that most of the cyber threats in Thailand lie in social engineering and phishing where people fall prey to criminals who trick them using fear or greed tactics into clicking malicious links, such as SMS messages and emails.

There is also a growing concern about ransomware and business email compromise (BEC), an attack in which a perpetrator obtains access to a business email account and imitates executives’ identity to defraud the company, its employees, customers or partners.

Regarding BEC, spoof emails of company executives may be sent to financial officers with an instruction to transfer money to an account controlled by criminals.

“BEC in Thailand costs organisations hundreds of millions of baht,” said Mr Prinya.

He said financial institutions have become the top target of cyber attacks during the pandemic as staff members from financial institutions have to work from home, making them vulnerable to attacks.

Citing the “IBM Security Cost and Data Breach 2021” report, he said it took an average of 212 days to identify a breach and an average of 75 days to contain the breach.

BEC saw the highest average total cost of US$5 million, followed by phishing with $4.65 million, malicious insiders at $4.61 million and social engineering at $4.47 million.

“To mitigate cyber risks, using proper technology and creating cyber immunity among people is key,” said Mr Prinya.

Stepping up security measures

A financial industry source, who requested anonymity, said that the banks are upgrading their security systems for online payment transactions via plastic cards and will ask all e-commerce platform operators to set up a verification system on their platforms to prevent cases of fraud.

The move follows last week’s meeting with the Bank of Thailand (BoT) to seek ways to deal with the spate of unauthorised withdrawals of cash debited via customers’ credit and debit cards.

He added that the banks would also alert the cardholders for all online payment transactions via debit and credit cards.

Currently, the banks have different criteria in terms of alerting cardholders of their payment transactions.

The source said that earlier the number of debit card fraud cases was low as debit card spending was not popular in Thailand. The rising popularity of debit cards was in line with the fast growth of online shopping in Thailand.

The source added that these fraud cases, especially with debit card transactions, had occurred in Europe and European banks have improved their security systems to prevent this kind of fraud. This improvement in the security system has driven card scammers to switch to exploit loopholes in other countries.

Regarding the spate of unauthorised withdrawals of cash debited via customers’ credit and debit cards, the Thai Bankers’ Association (TBA) last week disclosed that during Oct 1-17, this kind of fraud involved 10,700 cards, of which 5,900 were credit cards accounting for transactions worth 100 million baht. The remaining 4,800 cases were debit cards with transactions worth 31 million baht.

Last week, the BoT’s assistant governor for payment systems policy and financial technology group, Siritida Panomwon Na Ayudhya, said most of the cases that took place recently were small-ticket size payments via debit cards and occurred with card payments at overseas-based merchants.

The perpetrators used a robotic algorithm method to randomly select the card numbers and expiration dates when making payment transactions. The BoT confirmed that the fraud was not caused by the banks’ data leak.

Miss Siritida said the BoT would also collaborate with other regulators, including the Digital Economy and Society (DES) Ministry, the National Broadcasting and Telecommunications Commission (NBTC) and the Royal Thai Police to prevent cyber risks.

Last week, the BoT and the TBA jointly set guidelines for all banks to step up measures to prevent unauthorised withdrawals of cash debited through bank cards. One guideline is all the banks will have to step up their monitoring of suspicious transactions by extending the monitoring to cover low value transactions and the highly frequent transactions made.

According to the BoT, in general online payment requires the use of an OTP to verify a cardholder’s identity. However, some online shops do not require an OTP when paying for low value goods in order to provide convenience to customers.

Internet Explorer Channel Network
Asia's Tech News Daily
News Related

OTHER NEWS

Gold-loan demand surges, banks compete fiercely with NBFCs

Banks are usually hesitant to promote gold loans aggressively because of higher operational cost. Competition is heating up among non-banking financial companies (NBFCs) and commercial banks for distribution of gold ... Read more »

Centrica marks further UK shift away from oil through sale of Norwegian assets

Sky's Ian King explains the latest move by a major UK firm to reduce its exposure to oil as governments and investors seek a clean energy future. Read more »

Analysis| Omicron uncertainty puts Das & Co in slow gear; back to the waiting game

Reserve Bank of India (RBI) Governor Shaktikanta Das There were no real surprises in Wednesday’s monetary policy committee (MPC) announcement. Amid the continuing uncertainty on the growth front, which is ... Read more »

Instagram CEO Testifies Before Congress About Whistleblower Claims

Photo: ANP Instagram CEO Adam Mosseri will testify before Congress on Wednesday about how the social media platform handles the safety of young users. Mosseri will have to respond to ... Read more »

Blok: support scheme for starters no longer available this year

Photo: ANP There will be no more support scheme this year for starting entrepreneurs affected by the tightened corona measures. At the insistence of the House of Representatives, outgoing minister ... Read more »

Scholz replaces Merkel as German chancellor, opening new era

The Associated PressNew elected German Chancellor Olaf Scholz holds his letter of appointment presented by German President Frank-Walter Steinmeier during a reception at Bellevue Palace in Berlin, Germany, Wednesday, Dec. ... Read more »

Local X Truffle inspired menu & VIVIN grocery gift baskets Enjoy the best of both worlds with Local Products X Italian Black Truffle this Festive Season at VIVIN Grocery 2021

VIVIN Grocery, a grocery which prides itself on local, artisanal, organic and natural grocery products and meals, brings a premium Italian touch to its 2021 Festive Menu with Italian Black ... Read more »

Dr. Scott Gottlieb says omicron may extend pandemic, but still sees 2022 as a 'transition year'

Dr. Scott Gottlieb told CNBC the omicron variant “extends the timeline” on when Covid will go from being a health emergency to something the world learns to live with. “I ... Read more »

Christmas Wishes at The Athenee Hotel

There is something for everyone to celebrate the Christmas and New Year festivities at The Athenee Hotel, a Luxury Collection Hotel, Bangkok. Festive afternoon tea is served at The Bakery ... Read more »

Christmas Market at Sofitel Bangkok Sukhumvit

Every year, Sofitel hotels around the world celebrate Christmas with a unique theme, and this year the theme is Christmas Joy. This tradition combines the brand’s passion for creativity, French ... Read more »

Americans plan robust spending this holiday season, but worry about inflation, supply bottlenecks

Shoppers at the King of Prussia mall in King of Prussia, Pennsylvania, on Saturday, Dec. 4, 2021.Hannah Beier | Bloomberg | Getty Images Americans plan to spend with gusto this ... Read more »

It's the season to sparkle! GET READY FOR THE DECEMBER HAPPENINGS AT KIMPTON MAA-LAI BANGKOK

The month of December has more to offer than just holiday preparations. Kimpton Maa-Lai Bangkok is ready to roll-out the red carpet for Kimptonians for best offers from staycation, eat ... Read more »

ANVR happy with plans around corona travel rules Europe

Photo: ANP Travel industry organization ANVR is happy with the plans that have been made about the European corona travel rules. In order to be able to travel freely in ... Read more »

IPO-bound Delhivery acquires US-based Transition Robotics

IPO-bound Delhivery has acquired Transition Robotics Inc, a California-based company focused on developing unmanned aerial system platforms for an undisclosed amount. This deal will help Delhivery strengthen its capabilities in ... Read more »

Residential demand returns to Phuket Sandbox brings a return of prospective foreign buyers, but more Thais and expats are seeking getaways as well

According to the Tourism Authority of Thailand, a total of 59,689 international tourists visited Phuket under the Sandbox scheme from July 1 to Oct 31. Four months after kicking off, ... Read more »

Starry Starry New Year's Eve The last supper of the year, on high at Red Sky, is one mouth-watering Michelin-laurelled menu after the other

New Year’s Eve at the breathtakingly elevated restaurant and bar brings on the stars from all directions. Amid a million twinkling pinpricks, beneath the vaulted heavens, the 8-course “Extravagant New ... Read more »

‘In order to make Germany greener, industry can no longer look away'

Germany is Europe’s biggest polluter, but this month it will have the greenest government in its history. The German industry boss Siegfried Russwurm wants to reduce the emission of harmful ... Read more »

Data Patterns IPO opens on December 14, price band to be announced tomorrow

Data Patterns IPO Data Patterns (India), a defence and aerospace electronics solutions provider, is set to launch its initial public offering (IPO) on December 14. The price band and lot ... Read more »

How can banks still thrive as fintech meets 5G? Tech innovation and rising consumer expectations are reshaping Thailand's digital-banking market – and differentiation counts more than ever

Digital banking in Thailand has taken a big leap forward in recent years. According to McKinsey’s new Personal Financial Services 2021 survey, which covers approximately 20,000 urban banked respondents in ... Read more »

Meta to skill 1 crore small businesses, 2.5 lakh creators in India

(Image Courtesy: Reuters) Meta (formerly Facebook) on Wednesday unveiled a new office in Delhi-NCR – one of its biggest facilities in Asia – and announced plans of skilling one crore ... Read more »

Jio-bp and Mahindra Group sign MoU for EV and low-carbon solutions

(Representative image) Reliance BP Mobility Limited (RBML), operating under the brand name Jio-bp and the Mahindra Group, on December 8 announced a non-binding MoU for exploring the creation of EV ... Read more »

Gainers & Losers: 10 stocks that moved the most on December 8

Indian benchmark indices ended higher for the second consecutive day on December 8 after the Reserve Bank of India (RBI) kept the key rates unchanged. At close, the Sensex was ... Read more »

Evening Wrap - Currency & Bond Markets

The Reserve Bank of India’s (RBI) monetary policy committee on December 8 maintained the status quo on key rates – repo rate remained unchanged at 4%, reverse repo rate at ... Read more »

Google's list for top searches in 2021 is out. Check out top 10 searches for India

Google India has released its list of the most searched terms in India. (Representative image) Google India on Wednesday announced the results for its Year in Search 2021, revealing what ... Read more »

Mercedes F1 team ends sponsorship deal with Grenfell insulation firm Kingspan

Image: Lewis Hamilton drives for the Mercedes team The Mercedes Formula One team has confirmed it has ended its controversial tie-up with a company that made some of the insulation ... Read more »

Renault Zoe scores poorly in NCAP's European safety test

Photo: ANP The electric Renault Zoe scores poorly when it comes to safety. At least that is the conclusion of the test of the Euro New Car Assessment Program (NCAP). ... Read more »

Public companies to remediate Evergrande faltering

Is Evergrande still alive? Hardly. On Monday, the share price of the Chinese real estate giant plunged deeper than ever. The company had hinted on Friday that it is now ... Read more »

Travelodge reveals strangest requests from guests in 2021 - including asking where the Welsh rarebit lives

As if 2021 could get any weirder... Read more »

RBI monetary policy more dovish than expected, comes as no surprise

The RBI kept its inflation forecast unchanged at 5.3 percent for FY22. The Reserve Bank of India’s latest monetary policy turned out to be more dovish than expected and came ... Read more »

Taking Stock | Sensex up 1,016 points, Nifty above 17,450 as RBI holds rates steady

Indian shares closed higher for the second consecutive day on December 8 as the Reserve Bank of India left key rates unchanged at record lows and stuck to an accommodative ... Read more »

Johnson to hold final business council summit with bosses amid 'party crisis'

Bosses of companies including BP, British Airways and ITV have been invited for talks with Boris Johnson on Wednesday when the PM hosts the final meeting of his advisory council, Sky News learns. Read more »

NFT buzz grows in India, 30 celebrities to launch their digital collectibles soon

[Image: Shutterstock] More celebrities are jumping on the non-fungible token (NFT) bandwagon with the industry picking up pace in India especially after the great response to the digital collectibles offered ... Read more »

MPC meet | More on caution, less on activism

Representative image In line with our expectations, today’s monetary policy decision was primarily influenced by the uncertainty created by the emergence of the COVID-19 variant omicron and lingering imbalances in ... Read more »

Byju's acquires Austria's GeoGebra

(Source: ShutterStock) Continuing its aggressive acquisition spree, Byju’s on Wednesday said it has acquired Austria-headquartered GeoGebra. The acquisition will help the homegrown edtech company – which has 115 million students ... Read more »

'Lack of information' over LV= deal

Read more »

BMW closes deal for millions of chips for lighting systems

Photo: ANP German carmaker BMW has signed a long-term agreement to secure the supply of chips for lighting systems in cars. The car industry has been struggling with shortages of ... Read more »

Tighter Covid restrictions could reportedly be announced for England as omicron spreads

Prime Minister Boris Johnson gives an update on the coronavirus Covid-19 pandemic during a virtual press conference inside 10 Downing Street on March 18, 2021 in London, England.Tolga Akmen – ... Read more »

Pattaya eyes EVs for public transport

An electric vehicle like those that may soon be operating in Pattaya. (Photo supplied) Pattaya City Municipality is preparing to buy electric vehicles (EVs) for its public transport system, to ... Read more »

Fewer workers at risk of poverty again

Just over 900 thousand people lived in households below the low-income threshold in 2020, 376 thousand of whom had been living for at least four years in a row (2.4 ... Read more »

Unions file complaint about office duty Nouryon

Nouryon, the former chemical branch of paint group AkzoNobel, is said to have informed staff about office duty in a memo at the end of November. According to the complainants, ... Read more »
On free-english-test.com you will find lots of free English exam practice materials to help you improve your English skills: grammar, listening, reading, writing, ielts, toeic