Little Red Riding Hood is stressed out. A job in fraud protection is no picnic — far from it. As the digital banking fraud manager for Fairy Tale Bank, she’s constantly assessing her customers to make sure no fraudulent activity is occurring. After all, fraud is no myth — it’s as real as can be. If Red has her way, her customers will stay safe along every step of their journey. Even in the darkest corners of the financial forest, Red’s customers deserve to feel secure and protected.

A Wolf in Grandma’s Clothes?

As she sips her coffee and scrolls through some reports, Red is feeling a little more confident. Things seem to be going well today. But wait a minute — what is that? One case in particular sends her stress levels instantly skyward. Red pulls up a customer called Mrs. Grandma. She looks like Grandma, she acts like Grandma and she has all the right answers to every question, but something is off. Red has a feeling she can’t shake: This isn’t Grandma. What if it’s a wolf — Mr. Big Bad Wolf? She needs to take action, and fast. If she hesitates at all, it may be too late.

Red has a few choices when it comes to fraud protection: She could allow Grandma to continue on her way, she could authenticate Grandma or she could restrict Grandma’s activity. Each choice has a serious outcome. If Red restricts Grandma’s activity and it’s really her on the other end, Grandma may lose access to her account. She won’t be happy, and she may even take her business elsewhere. Not good.

If Red requires additional steps for authentication and it’s really Grandma on the other end, Grandma may get frustrated. Again, not good. But what if Red’s intuition is correct? Grandma will be thrilled to know that Red saved her account from a fraud like Mr. Big Bad Wolf. So what should Red do?

Awareness Is the Best Fraud Protection

Little Red Riding Hood turns to the hunter: IBM Trusteer. These guys can deliver a dynamic digital identity fraud assessment with actionable risk recommendations using machine learning and advanced analytics, without impacting the customer experience. Little Red Riding Hood turns to IBM Trusteer, and it turns out she was right. It was a Big Bad Wolf. Grandma is saved.

Maximizing fraud protection for enterprise data and customers starts with training employees about security best practices and the dangers that await on the web. That’s why malware detection and phishing awareness need to be an essential part of any security training program. Next time there’s fraudulent activity, Red will feel confident that it’s the Big Bad Wolf in Grandma’s clothes.

Read the white paper: How digital banking is transforming fraud detection

Click here to read more lessons in security and discover how all our favorite fairy tale characters learned to live securely ever after.

More from Fraud Protection

Unveiling the latest banking trojan threats in LATAM

9 min read - This post was made possible through the research contributions of Amir Gendler.In our most recent research in the Latin American (LATAM) region, we at IBM Security Lab have observed a surge in campaigns linked with malicious Chrome extensions. These campaigns primarily target Latin America, with a particular emphasis on its financial institutions.In this blog post, we’ll shed light on the group responsible for disseminating this campaign. We’ll delve into the method of web injects and Man in the Browser, and…

PixPirate: The Brazilian financial malware you can’t see

10 min read - Malicious software always aims to stay hidden, making itself invisible so the victims can’t detect it. The constantly mutating PixPirate malware has taken that strategy to a new extreme. PixPirate is a sophisticated financial remote access trojan (RAT) malware that heavily utilizes anti-research techniques. This malware’s infection vector is based on two malicious apps: a downloader and a droppee. Operating together, these two apps communicate with each other to execute the fraud. So far, IBM Trusteer researchers have observed this…

New Fakext malware targets Latin American banks

6 min read - This article was made possible thanks to contributions from Itzhak Chimino, Michael Gal and Liran Tiebloom. Browser extensions have become integral to our online experience. From productivity tools to entertainment add-ons, these small software modules offer customized features to suit individual preferences. Unfortunately, extensions can prove useful to malicious actors as well. Capitalizing on the favorable characteristics of an add-on, an attacker can leverage attributes like persistence, seamless installation, elevated privileges and unencrypted data exposure to distribute and operate banking…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today