The United Kingdom's House of Lords Science and Technology Committee has recommended a revision in the UK Banking Code to provide bank customers more protection against losses arising from Internet fraud. This TowerGroup ViewPoint analyzes the benefits of such legislation to the UK banking industry and provides advice on what banks in the United Kingdom and anywhere else should do to manage the rising tide of online fraud.
TowerGroup Take-Aways
TowerGroup strongly supports the recommendation of the UK House of Lords Science and Technology Committee that banks assume full liability for their customers' losses due to Internet fraud.
Banks should automatically assume it is possible that a customer's personal identifiable information such as user name and password can be compromised.
Banks continue to adopt a wide variety of authentication techniques, but making them liable for all online fraud would increase their motivation to be as innovative in resisting fraud as criminals are in perpetrating fraud.
TowerGroup strongly recommends that all banks adopt a risk-based authentication approach in addition to any other defenses.