2021 saw the world settling into a new normal with heightened expectations of digital experiences. But European fraud and financial crime have continued to evolve. As we move forward into 2022, we are seeing the first signs of some interesting trends that will pick up pace across borders. Whether they are seen as challenges or opportunities, they are worth watching to avoid another disruptive year.
1. More Vaccine-Related Scams
Vaccine passports and certificates are now in use as proof of vaccination when travelling or attending certain events and venues. But we can’t ignore the backlash from anti-vaccination groups. Despite their views, many still want to travel and attend those events that require proof of vaccination. As such, we’ve seen a slow emergence of a black market for the sale of fake vaccine passports and it is on its way to becoming a lucrative industry in 2022.
Related scams have also been on the rise. In the UK, Action Fraud reported several hundreds of cases of people receiving emails claiming to be from the NHS, offering them a vaccine passport, prompting them to click on a link and input their personal and financial details. We believe this is one of the many scams that will consistently hit the headlines in 2022.
2. Accessibility of Deep Fake Technologies
We’ve seen a steady rise in fake videos and audio with targeted content that manipulates and gains access to personal and finance data. As the technology becomes more sophisticated, it’s becoming the new favorite tool in financial crime. Take the most recent example of the bank manager in the United Arab Emirates who fell victim to a threat actor’s scam. Hackers used AI voice cloning to trick the bank manager into transferring $35 million.
In 2022, we believe this will become a significant challenge for banks in Europe and across the globe as they find themselves increasingly targeted in this way. A platform approach to managing the authentication of customers will be a strong starting point for any organisation, so that they can adapt, adopt and adjust as the market changes. As those deep fake technologies develop, we will see more innovation and use of a wider variety of biometric technology thrown into the mix.
3. Investment in Scam-Fighting AI
Significant investment was focused on improving authentication in the years leading up to the pandemic by banks (thanks to PSD2) to "strengthen the locks on their front door". And this spend rose during the pandemic when organisations across the globe were forced into rapid digitisation. Aware of this, fraudsters have sought more creative alternatives, and scams have hit the jackpot.
Last year we predicted that scams would become the leading fraud type in 2021, and the most recent research from UK Finance confirmed it. In the first half of 2021, APP fraud losses increased by 71%, surpassing card fraud for the first time. 70% of those scams originated on an online platform.
People have been tricked into willingly opening the "front doors" to their finances and leaving them wide open. No traditional authentication process can stop that kind of fraud, no matter how robust.
And banks are footing the bill. In the UK, 75% of customer complaints against banks that refuse to repay those losses are being supported. We are seeing signs of investment focus returning to the application of AI to predict customer behaviour and look for signals of fraudulent behaviour. Evidence of this can be seen in the uptake of our Falcon Fraud Manager, which uses behaviour sorted lists to detect scams. Human beings are creatures of habit, and Falcon monitors their frequent, repeated payment behaviours to distinguish in-pattern, normal customer spending from out-of-pattern, suspicious transaction activity. With our new scam models, clients have seen a 50% uplift in the identification of scam transactions, compared to using the fraud score alone.
This area will see major investment in 2022, with machine learning and AI playing a far greater role in helping banks to spot potential scams and stop them before it's too late.
4. Data Breach Reporting Use
When it came into effect in 2018, the GDPR put a spotlight on data protection and kickstarted a wave of global privacy laws. For most, GDPR compliance has been a costly, time-consuming and complicated process. But we are now beginning to see some of the wider benefits of the toughest privacy and security law in the world.
Only last month, the electronics retail merchant MediaMarkt became the latest victim of a ransomware attack. Pre-GDPR, it could be six months before banks whose customers shopped there became aware of the attack. By that point, their personal details could have long been sold on the Dark Web.
Under GDPR, these merchants must report a data breach to a supervisory authority within 72 hours. Already in the first three months of 2021 there were more publicly reported data breaches than in the whole of 2020. This is vital early insight for fraud teams and the perfect opportunity for banks and other organisations to be much more proactive.
2022 will be the year where we see this early insight, thanks to GDPR, becoming a key element in fraud prevention tools. Our Falcon Compromise Manager is already helping banks reduce fraud losses by proactively detecting compromised merchants and alerting fraud teams. This insight will help give organisations the advantage over criminals, enabling them to implement timely actions and better protect those customers who could be affected.
5. Abuse of Open Banking
The total number of users of Open Banking-enabled products is expected to have doubled between 2019 and 2021 to 40 million users, with Europe driving this growth. The regulator-led approach in this region means providers operate in a standardised market with low barriers to entry, opening up competition. But it may have also opened doors for a particular fraud trend, which could increase in 2022.
Before Open Banking, criminals applied for low-risk accounts using a fake identity in order to start building up their credit file. Over time, they would move into commerce and then onto higher-value targets, hitting them hard.
We believe this approach is finding its way into the Open Banking ecosystem as a faster route to higher-value credit. Having secured low-risk bank accounts and passed the Know Your Customer requirements, criminals are attempting to access new services through Open Banking third-party providers, who offer loan approvals and various other financial and investment services. While they are still regulated, third-party providers do not need to meet the same requirements as authorised, traditional banks. Keen to satisfy customer demand for access to services in real time, many third-party providers trust and rely on the KYC bond already created from the existing accounts.
This demonstrates the importance of robust application fraud protection no matter what the circumstances. Open Banking is still a relatively new concept and this may change, but we see it as a risk in 2022.
