What new MAS security directives change about embedded links and alerts?

Question

Accepted Answer

New MAS Security Directives Address Embedded Links and Account Alerts

New security directives issued by the Monetary Authority of Singapore (MAS) will prevent banks from using embedded links in their communications with customers. Furthermore, customers will now receive notifications for even minor transactions, including small amounts of money being debited from their accounts. These measures aim to enhance online security and protect customers from increasingly sophisticated phishing scams that have led to significant financial losses.
Prohibition of Embedded Links in Bank Communications

Under the new directives, banks are no longer permitted to include embedded links within their messages to customers. This change is a direct response to phishing scams where victims were directed to fake websites that mimicked official bank portals after clicking on malicious links. For instance, a recent scam involved SMS messages appearing to be from OCBC, prompting users to click a link due to suspicious activity, leading to the compromise of their account details.
Enhanced Transaction Alerts for Customers

Customers will now be alerted to any movement of funds from their accounts, regardless of the amount. This new protocol ensures that even minor debits, which might previously have gone unnoticed, will trigger a notification. This increased vigilance is crucial, especially considering that scams can involve the rapid transfer of funds, making swift detection by account holders essential for potential recovery efforts.
Increased Reporting of Significant Financial Losses

The directives come in the wake of substantial reported losses due to scams. As of December of the previous year, 469 OCBC customers reported losing approximately S$8.5 million. Between December 24th and 26th alone, S$2.7 million in scam-related losses were reported to OCBC, highlighting the aggressive and coordinated nature of these attacks, particularly during the year-end holiday period.
Broader Regulatory Push for Bank Security

These new directives are part of a wider regulatory push by the Monetary Authority of Singapore to compel banks to tighten security around their online services. This follows incidents where victims lost life-changing sums, such as a civil servant losing S$500,000 and a software engineer losing S$250,000 in sophisticated scams. The MAS's intervention underscores the growing concern over the scale and impact of digital fraud on financial institutions and their customers.

Reading history

Hide →

This history is cleared when the page is closed.

What new MAS security directives change about embedded links and alerts?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends