Is 3DS compatible with secure 2FA technologies? (TOTP, WebAuthn)

Is PSD2’s Strong Customer Authentication requirement possible to satisfy with secure 2FA solutions, such as TOTP and WebAuthn?
For the purposes of this question, I’m classifying all systems where an OTP has to be transmitted as "insec… Continue reading Is 3DS compatible with secure 2FA technologies? (TOTP, WebAuthn)

Are banks significantly reducing security by migrating everyone to mobile banking?

I have noticed a disturbing trend across banks (in the EU). Previously, many banks used 2FA by combining a login/password for an online banking website with a mobile authenticator app. However, many banks now integrate the mobile authentic… Continue reading Are banks significantly reducing security by migrating everyone to mobile banking?

Strong compliance management is crucial for fintech-bank partnerships

72% of banks and credit unions are prioritizing compliance when evaluating fintechs, citing it as their top criteria in the due diligence process, according to Ncontracts. As banks and credit unions evaluate fintech partnerships, cybersecurity (62%) is… Continue reading Strong compliance management is crucial for fintech-bank partnerships

Australia’s Financial Technology Startups Are Changing How Banks and Financial Institutions Procure New Tech

Australia’s Fintech ecosystem is now seen as a critical source of technology innovation by banks and financial institutions, as they seek to offer products and services faster, more cheaply and more scalably in the fast-changing business and cloud envi… Continue reading Australia’s Financial Technology Startups Are Changing How Banks and Financial Institutions Procure New Tech

Bank employees asked random 2 characters of password during verification! [duplicate]

Let me ask to experts how bank BBVA and Santander en España can check dedicated digits of my password during call to their hot line?
They said me that it is verification procedure but I am not sure it is safe because every call they ask di… Continue reading Bank employees asked random 2 characters of password during verification! [duplicate]

Are there potential legal issues with allowing a user to see their full SSN and DL after entering username and SMS pin?

I have an account on the ChexSystems site which allows me to easily view and request my consumer report.*
Once I sign into my account, I can see my full social security number and driver’s license. I can’t delete this information or delete… Continue reading Are there potential legal issues with allowing a user to see their full SSN and DL after entering username and SMS pin?

The staggering cost of identity fraud for financial services

The impact of identity fraud varies for organizations in the financial services industry, based on whether they belong to the banking or FinTech sector, according to Regula. Specifically, every fourth bank reported experiencing over 100 identity fraud … Continue reading The staggering cost of identity fraud for financial services