After observing a noticeable increase in sophisticated attacks targeting payment processors of prepaid debit accounts in which criminals are able to manipulate balances of accounts and/or fraud prevention controls, the United States Secret Service released an Industry Advisory. It outlines several “macro” and “prepaid platform specific” strategies that payment processers should take to mitigate the risk of such attacks occurring on their systems.
The Advisory notes that the goal of such attacks is to “obtain administrative access to the database systems” related to the accounts so the attackers can increase account balances and alter certain fraud and loss prevention controls to prevent account alerts from triggering. After successfully altering the database systems, the attackers proceed to conduct simultaneous ATM withdrawals from the same accounts in multiple countries.
To mitigate the risk of such attacks, the Secret Service recommends that payment processors take several steps related to prepaid debit account platforms, including: requiring two factor authentication for remote access into the database systems; disabling or deleting administrative testing accounts when no longer in use; protecting account information by limiting how PIN reset requests are sent to account holders; and by employing aggressive fraud detection measures. On a more global level, the Secret Service recommends that payment processors review how their network security and fraud/loss prevention groups communicate with each other so that the companies can create and implement strategies to quickly detect attacks.
Barclays has signed contracts with six of the fintech startups that just graduated from its second New York accelerator programme.
Company card killer Pleo has raised $3m in new funding as it prepares for public launch in the UK and Denmark.
Cheques are become less and less common in the UK according to new research from global market research firm Mintel which claims contactless card use has overtaken cheque payments in the UK for the first time.
Payments for digital and physical goods made mobile operating system-based payments platforms like Apple Pay and Android Pay are expected to boom in the next few years according to new analysis from Juniper.