Authorized Push Payment Fraud Responsible for Over Half of U.K. Frauds and Scams
Research from The Financial Ombudsman Service, a U.K. based organization dedicated to helping citizens with free financial advice, has found an increase in Authorized Pushed Payment (APP) scams. These attacks are rising both in number and sophistication.
The Financial Ombudsman Service is a U.K. organization dedicated to helping residents with all things financial-as-a-free service.
As part of this service, they take in a large number of complaints around financial fraud. In their latest blog, they note that complaints related to fraud and scams have reached an all-time high:
- Over 8700 cases in one quarter
- Over half related to “customer approved online bank transfers, also known as authorised push payment (APP) scams”
- Increased sophistication involving multiple banks
The challenge with the use of APP is that once the money is sent, there’s no easy way to recover it. The U.K. does have the Contingent Reimbursement Model (CRM) code – a voluntary code financial institutions sign up for that provides additional protection for consumers, reimbursing them in APP fraud cases unless there are exceptional circumstances.
In the case of the second quarter, 4,752 APP scam cases we received by Ombudsman, and, of those, 2,734 were not covered by the code.
In other words, it’s better to be vigilant than to rely on being bailed out.
And vigilance is only attained by continual new-school security awareness training that teaches individuals about such scams and social engineering techniques used by scammers.
With APP scams only increasing, it means that they are working and are profitable, further pointing to the importance to train users to be vigilant.
KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
Will your users respond to phishing emails?
KnowBe4’s Phishing Reply Test (PRT) is a complimentary IT security tool that makes it easy for you to check to see if key users in your organization will reply to a highly targeted phishing attack without clicking on a link. PRT will give you quick insights into how many users will take the bait so you can take action to train your users and better protect your organization from these fraudulent attacks!
Here’s how it works:
- Immediately start your test with your choice of three phishing email reply scenarios
- Spoof a Sender’s name and email address your users know and trust
- Phishes for user replies and returns the results to you within minutes
- Get a PDF emailed to you within 24 hours with the percentage of users that replied
PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser: https://info.knowbe4.com/phishing-reply-test-partner?partnerid=001a000001lWEoJAAW