COVID-19 and Fraud: Banks must adopt their fraud strategies to combat growing threat

The current COVID-19 pandemic is unprecedented in its global reach and implications for consumers and businesses worldwide. Across the globe, millions of people have been locked down in their homes, with online banking and shopping consequently seeing a significant rise. However, this situation has also created a fertile ground for fraudsters, with banks reporting a dramatic increase in fraud related COVID-19 scams. Many of these scams are playing on the fears of consumers and targeting the vulnerable and elderly.

Below I look at the key trends we are seeing right now and discuss what consumers and financial institutions can do to protect themselves.

Focusing on fear: A rise in phishing attempts 

Coronavirus-themed phishing attacks have increased dramatically over the last few weeks. These usually involve an email or text attempting to trick people into opening malicious attachments which could lead to criminals stealing banking details, email logins and passwords. The messages often appear legitimate, purporting to contain information or requests in relation to the pandemic. Be aware! Don’t click on links in emails or texts from senders you don’t know!

Requests for fake charitable donations

Fraudsters are also trying to exploit the generosity of those wanting to help the NHS or people struggling during the crisis. They are sending emails either purporting to be from fake charities and support groups requesting payments. There are also reports that fraudsters have been brazenly knocking on peoples’ doors asking for donations. If you want to help the NHS or others during these testing times, only give money to people you know or charities you have supported in the past. 

Fake merchants selling testing kits, masks and medical supplies

There has also been reported cases of fake merchants pretending to be selling COVID-19 testing kits, masks and medical supplies and several individuals and organizations have fallen prey to this tactic. Only buy from reputable websites and verify whether the merchant you are buying from is genuine.

Fake fines for leaving home during lockdown

Other scams purporting to be official messages from the government include texts telling people they have been fined £250 for leaving their home more than once during lockdown.

Pension, saving accounts and Investment Scams

Fraudsters are also exploiting the downturn in interest rates and are contacting unsuspecting consumers, offering ‘better products’, often tricking their victims into transferring money to a fraudster.

Mule accounts on the rise

As individuals struggle to make a living, the temptation to succumb to fraudulent advertised ‘money transfer agent’ roles have increased massively.  Most mule account holders and operators are aware that what they are doing is not right, but because they do not see where the money comes from and profit from taking part in this scam, they turn a blind eye to the potential harm this is doing to communities. 

Increase in Employee Fraud      

Pressure to be complicit in financial wrongdoing increases during times of uncertainty and fear, and employees of financial institutions are no exception to this rule. The current crisis coupled with new remote working practices has created both the financial need and the opportunity that could see good employees turn bad.

APP fraud will be on the rise

Unfortunately, many of the scams described above will lead to more Authorized Push Payment (APP) fraud.  Once a victim has been tricked into transferring money to a fraudster, it will often be impossible to get the money back because the transaction is instant, and cybercriminals will have already moved on to the next target without being caught.

Another contributing factor to APP fraud is that many companies now have their employees working from home, so the ‘normal’ contact mechanism may no longer be active (e.g. the usual telephone number to reach preferred vendor representatives).  Fraudsters may take advantage of this disruption by sending out fake invoices that appear to be from trusted and regularly used vendors, with the only difference on the invoice being the account number, often missed by the invoice recipient.  The separation of the workforce into isolated home working environments may result in relaxed due-diligence procedures, especially if there is increased difficulty in reaching the vendor representative, and invoice recipients may therefore be paying out funds to fraudsters. 

Businesses must therefore evolve and adapt their fraud strategies to combat the rising threat of COVID-19 scams. Utilising specific APP detection technology combined with layers of behavioural biometrics capabilities can help detect APP fraud much quicker. A multi-layered approach that uses adaptive and predictive analytics and expertly defined rules in response to the new trends we are seeing as a result of the pandemic is crucial.

Behavioural biometrics technology can identify a wide range of cyberthreats in real-time, by analysing hundreds of behavioural parameters of online banking users, for example the way users interact with online applications and devices. It will also use subtle tests known as ‘invisible challenges’ during online banking sessions. To effectively detect and prevent APP scams, the latest behavioural biometrics analysis extracts powerful insights that suggest a genuine customer is under pressure to complete a payment which the fraudster is directing them to do on the telephone.

Armed with behavioural analytics to detect fraud, businesses should also use positive profiling – a combination of consortium intelligence and big data analytics. This allows businesses to separate legitimate customers from the fraudsters. It means building comprehensive customer profiles based on detailed behavioural data from multiple businesses and externally confirmed fraud intelligence, so organisations can screen the customer rather than just the transaction.

Implementing a multi-layered approach to fraud prevention will enable businesses to tailor the customer experience, improve conversion rates, maximize revenue and, most importantly, block fraud during these challenging times.