Gartner warns banks on spyware fraud

Theft from personal bank accounts is the fastest-growing financial fraud plaguing US consumers, with spyware attacks to blame for much of the rise.

According to a survey by Gartner, 1.98 million online adults have experienced this sort of crime in the past 12 months. The analyst organisation urged banks to implement stronger access controls to online and telephone banking systems.

From the survey of 5,000 US adults who used the internet, Gartner estimated that the cost of this fraud was approximately $2.4bn in direct fraud losses - or $1,200 per victim.

Avivah Litan, vice president and research director at Gartner, said in a statement: "In most cases that are not inside jobs, thieves likely stole account numbers and passwords to get into accounts online or through telephone banking services. Neither method involves face-to-face transactions."

Gartner's study said: "Thieves appear to be proliferating through online channels."

Just by clicking on a pop-up ad, web users can inadvertently download spyware which can potentially trap their user ID and password for their online bank account without them ever knowing about it.

"It will take time for the financial services industry to develop sophisticated back-end tools, but banks must implement stronger access controls to online and telephone banking systems," said Litan.

The study recommends using shared-secret authentication, where a consumer might select a topic, such as the name of a favourite pet, and enter an answer that is shared with a service provider.

Gartner found that unauthorised access to checking accounts has grown faster than any other fraud in the past year.

In terms of number of victims, checking account hijacks were found to be the second most prevalent type of crime in the 12 months to April 2004, the most common being fraudulent credit card purchase.

See also:

Spyware

An increasing number of web users are inadvertently downloading software which can trap ID and password information for online bank accounts.  22 Sep 2004

Sainsbury's offers online banking simulation

Try-before-you-buy scheme allows prospective users to manage fictitious accounts  21 Jun 2004

Combating spyware

These days companies are using increasingly intrusive techniques to get hold of your details and snoop on your surfing habits. We show you how to hit back.  27 May 2004

PCs infested with 30 pieces of spyware

Who's watching you online?  16 Apr 2004

Security

The latest wave of cyber-crimes and acts of vandalism have demonstrated once again that many systems are still vulnerable to attack.  15 Apr 2004

Online phishing uses new bait

One click sends unwary users to fake websites  06 Apr 2004

Fraud and phishing attacks soar

Action group issues warning as incidents rise 52 per cent from December to January  18 Feb 2004

Spyware threat creeps up on PCs

Online espionage becoming as prevalent a threat as virus-carrying spam email  01 Oct 2003

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!