<p>For example, multi-layer security by way of login password, transaction password and confidential data confirmation make online transactions more secure. <br /><br />Multiple passwords<br />But, there are issues like memorising multiple passwords, slogans, pictures, answers to questions, etc, and some transactions of urgent nature getting struck due to these problems, or even online access getting blocked some times.<br /><br />“This, coupled with the time taken for access re-activation, password generation, etc, which is sometimes a lengthy, time-taking process, causes irritation and inconvenience to the customer,” said RBI Executive Director G Padmanabhan at the Annual Conference on Secure Banking 2011 organised by the Indian Banking Association (IBA) recently. He said managing security was more challenging in online and phone banking compared to other delivery channels.<br /><br />Threats to ATMs also take the form of ATM skimming, eavesdropping, spoofing and service denial, he observed, citing threats like password hacking, card cloning, data and identity theft at various levels of the transaction, Padmanabhan added. <br /><br />Observing that identity theft in electronic transactions is a growing cybercrime, Padmanabhan said innovative methods of hacking and stealing have come to the fore regularly and the industry has to take prompt action to safeguard business and customer interest.<br /><br />Stressing that management of third party risks in transactions has becoming a daunting task, he said unlimited cyberspace exposes banks to internationally organised crimes.<br /><br />“In mobile banking, the challenge is to decide the transaction value limits up to which un-encrypted data can be transmitted for payments and funds transfer. If limits are set too tight, there can be cost and efficiency implications while making it too lax may invite the risk of information getting compromised.<br /><br />“If we recognise that compromise of cards could happen, not only at ATMs but also at to over half-a-million and still growing point of sale (PoS) terminals, the task is indeed formidable,” the RBI official said. On the modus operandi of fraudsters, he said after the RBI introduced second factor authentication, their focus has shifted to ATM transactions.<br /></p>
<p>For example, multi-layer security by way of login password, transaction password and confidential data confirmation make online transactions more secure. <br /><br />Multiple passwords<br />But, there are issues like memorising multiple passwords, slogans, pictures, answers to questions, etc, and some transactions of urgent nature getting struck due to these problems, or even online access getting blocked some times.<br /><br />“This, coupled with the time taken for access re-activation, password generation, etc, which is sometimes a lengthy, time-taking process, causes irritation and inconvenience to the customer,” said RBI Executive Director G Padmanabhan at the Annual Conference on Secure Banking 2011 organised by the Indian Banking Association (IBA) recently. He said managing security was more challenging in online and phone banking compared to other delivery channels.<br /><br />Threats to ATMs also take the form of ATM skimming, eavesdropping, spoofing and service denial, he observed, citing threats like password hacking, card cloning, data and identity theft at various levels of the transaction, Padmanabhan added. <br /><br />Observing that identity theft in electronic transactions is a growing cybercrime, Padmanabhan said innovative methods of hacking and stealing have come to the fore regularly and the industry has to take prompt action to safeguard business and customer interest.<br /><br />Stressing that management of third party risks in transactions has becoming a daunting task, he said unlimited cyberspace exposes banks to internationally organised crimes.<br /><br />“In mobile banking, the challenge is to decide the transaction value limits up to which un-encrypted data can be transmitted for payments and funds transfer. If limits are set too tight, there can be cost and efficiency implications while making it too lax may invite the risk of information getting compromised.<br /><br />“If we recognise that compromise of cards could happen, not only at ATMs but also at to over half-a-million and still growing point of sale (PoS) terminals, the task is indeed formidable,” the RBI official said. On the modus operandi of fraudsters, he said after the RBI introduced second factor authentication, their focus has shifted to ATM transactions.<br /></p>
