ABA Banking Journal
No Result
View All Result
  • Topics
    • Ag Banking
    • Commercial Lending
    • Community Banking
    • Compliance and Risk
    • Cybersecurity
    • Economy
    • Human Resources
    • Insurance
    • Legal
    • Mortgage
    • Mutual Funds
    • Payments
    • Policy
    • Retail and Marketing
    • Tax and Accounting
    • Technology
    • Wealth Management
  • Newsbytes
  • Podcasts
  • Magazine
    • Subscribe
    • Advertise
    • Magazine Archive
    • Newsletter Archive
    • Podcast Archive
    • Sponsored Content Archive
SUBSCRIBE
ABA Banking Journal
  • Topics
    • Ag Banking
    • Commercial Lending
    • Community Banking
    • Compliance and Risk
    • Cybersecurity
    • Economy
    • Human Resources
    • Insurance
    • Legal
    • Mortgage
    • Mutual Funds
    • Payments
    • Policy
    • Retail and Marketing
    • Tax and Accounting
    • Technology
    • Wealth Management
  • Newsbytes
  • Podcasts
  • Magazine
    • Subscribe
    • Advertise
    • Magazine Archive
    • Newsletter Archive
    • Podcast Archive
    • Sponsored Content Archive
No Result
View All Result
No Result
View All Result
ADVERTISEMENT
Home Compliance and Risk

Fake people, real threat: Banks scramble to strengthen digital verification

February 9, 2023
Reading Time: 4 mins read
Fake people, real threat: Banks scramble to strengthen digital verification
ADVERTISEMENT

Banks seeking to spot and weed out fake identities face complex challenges.

By Walt Williams

FirstBank, headquartered in Lakewood, Colorado, is “somewhat unique” in how it handles online credit offerings, but that hasn’t prevented it from being targeted by bad actors using synthetic identities, says Brandon Kelly, FirstBank’s vice president. If anything, the bank’s practices have forced fraudsters to get creative.

Download a new report titled “The Growing Significance of Trusted Digital Identities in U.S. Financial Services” from ABA’s Office of Innovation and consultants Oliver Wyman.

“You’re not going to ebankfirst.com and apply for a credit card like you might do at Capital One or something like that,” Kelly says. “We generally open those types of relationships for existing bank customers … You would think that would somewhat insulate us from this problem. But what’s interesting is that, in fact, has not stopped this particular kind of species of fraud.”

Fraudsters instead enroll through the bank’s website to create an account and then follow up with some type of person-to-person contact with a bank branch, such as a phone call. “What we’ve seen in terms of synthetic ID fraud, which I think is something of the norm, is these are highly coordinated, sophisticated, orchestrated (crime) rings,” Kelly says. “What is unusual is we tend to see it a little bit more through our branch channel.”

Synthetic identity fraud is a growing problem that could soon become much worse, according to one report. The digital identity management firm Alloy recently surveyed more than 250 financial institutions and found that 91 percent reported an increase in fraud in 2022, with first-party fraud—people misrepresenting their identities—the most widely reported form of scam.

“Synthetic fraud identities are usually built over the span of multiple years as fraudsters build their fake identities’ credit history,” says Carol Lu, fraud analytics manager at Alloy, speaking at the ABA/ABA Financial Crimes Enforcement Conference in November. “Fraudsters typically wait three- to five years to ‘warehouse’ the stolen information before they start using it to apply for accounts. We expect a lot of the PIIs (personally identifiable information) that were stolen in early 2020, when the pandemic started, to surface in 2023-24.”

An evolving threat

Banks seeking to strengthen their digital identification verification processes face a complex challenge as there are many moving parts to consider. But there are general guidelines that provide a path forward. For starters, never get complacent with the security measures in place as fraudsters are constantly finding new ways to undermine bank defenses. Jeremy Grant, managing director of business technology strategy at the Washington, D.C. law firm Venable, points to verification systems that ask users personal questions, noting they are no longer the deterrent they once were.

“That worked for a while, but the problem is—in part because we’ve had so many big data breaches over the last 10 years—a lot of that data that used to be secret is now out there, to the point that a lot of the banks that I work with say if somebody answers the quizzes too quickly, too accurately, it’s actually a good chance that there’s a sign of fraud going on,” Grant says.

“That sounds weird, but people usually miss a question rather than take time to go through it.”

The amount of PII online has made identity verification particularly challenging for banks,
notes an executive at one large bank who asked not to be named so as to speak candidly. This bank is exploring new technologies to weed out fake personas from real people.

“What we’re seeing now is that a lot of the synthetic identity and even just general identity theft accounts are being opened in large volumes, so they’re being automated through bots,” the executive said. “How do we decipher what is human activity versus scripting attacks? So things like behavioral biometrics are something that we’re working on.”

This large bank is currently using tools such as phone number validation to catch fraudulent accounts before they are created. Still, no matter the systems or processes in place, some will slip through, making monitoring vital, the executive added.

“Keep in mind that when a synthetic identity is used to open up a deposit account, that doesn’t mean that same synthetic identity—or an element of that identity—is not being used in another product that you offer, whether it’s an investor account, a credit card or even an auto loan,” the executive said. The bank, for example, looks for things such as the same Social Security number being used to open multiple accounts. Or multiple accounts being opened from the same IP address or device. “We’re constantly monitoring for that activity and then providing our investigators with link analysis tools that help them identify that connection across our enterprise.”

Three-step strategy

When bolstering a bank’s digital identity verification systems, it is important to consider the three core identity processes in the bank customer’s journey, says Austin Hong, partner in the anti-financial crime practice at consulting firm Oliver Wyman, speaking at the conference. The American Bankers Association and Oliver Wyman last year published a report on the significance of trusted digital identities.

The first thing to consider is the identity-proofing and KYC processes used during customer onboarding, Hong says. The second is authentication, which usually occurs when customers log into their accounts. And the third is transaction authorization and monitoring. All three are paramount, but not equally so, in his view.

“The most important part of this process is being able to stop bad actors—the fraudsters—before they get in the bank, so having and strengthening that onboarding verification process is incredibly important,” Hong says.

Banks seeking to bolster their verification processes can start by benchmarking their organizations against peers and industry best practices, the ABA/Oliver Wyman report points out. That base can then be used to create an analysis by mapping a bank’s customer-facing processes to understand where the institution’s controls may be failing and where vulnerabilities are being exploited, as well as identify weaknesses that need to be addressed.

The next step for banks is to empower a single executive to take point on digital identity leadership by giving that person the ability to break down silos in the organization and balance perspectives between key leadership roles. With the analysis and executive leadership in place, banks can then begin vetting vendors to provide security solutions. Just don’t forget to press vendors on what they offer in terms of maintenance and updates to the digital products they provide, Hong adds.

“As we all know, fraud trends are going to change,” he says. “If the technology doesn’t change along with it, it will be out of date.”

Walt Williams is associate editor of ABA Banking Journal.

Tags: Cyber crimeFraudTechnology
ShareTweetPin

Author

Walt Williams

Walt Williams

Walt Williams is senior editor of ABA Banking Journal.

Related Posts

BAFT releases report on best practices, guidance for ISO 20022 migration

ABA offers fixes for small-business lending data collection rule

Commercial Lending
July 18, 2025

In a letter, ABA said it is pleased with the CFPB's proposal to revise its small-business lending data rule and offered several recommendations to reduce the compliance burden for banks.

CFPB claims ‘complex’ pricing drives up cost of financial products

CFPB to keep notification procedures for state enforcement of consumer law

Compliance and Risk
July 18, 2025

The CFPB is reversing course on its earlier decision to eliminate the procedures under which state officials must notify the bureau if those officials plan to enforce the Consumer Financial Protection Act.

ABA points to role of regulators in discouraging bank engagement in digital assets

ABA, associations urge OCC to postpone crypto firm applications for bank charters

Newsbytes
July 18, 2025

ABA joined four banking and credit union associations in raising concerns about a push by digital asset firms to establish national trust banks, saying there are significant policy and legal questions as to whether the applicants' proposed business...

ABA, associations urge lawmakers to finalize deal on debt ceiling

House passes bills on stablecoins, digital assets, CBDCs

Cybersecurity
July 17, 2025

The House voted in favor of two bills to create a regulatory framework for payment stablecoins and digital assets. House members also voted in favor of a separate bill to ban the Federal Reserve from issuing a CBDC.

The future of careers in risk and compliance

The future of careers in risk and compliance

ABA Banking Journal Podcast
July 17, 2025

What does the future hold for bank risk and compliance professionals? Krysti Cunningham discusses the technological transformation in risk and compliance at community and midsize banks and applications for AI tools and LLMs in risk and compliance.

BIS: Stablecoins fail as ‘sound money’

ABA urges lawmakers to include safeguards in stablecoin bill

Compliance and Risk
July 17, 2025

A durable regulatory framework for stablecoins must balance the potential for enhancing payments with the need to limit negative economic consequences, promote financial stability and guard against consumer protection risks, ABA President and CEO Rob Nichols said in...

NEWSBYTES

ABA offers fixes for small-business lending data collection rule

July 18, 2025

ABA DataBank: Retail sales rebounded in June

July 18, 2025

CFPB to keep notification procedures for state enforcement of consumer law

July 18, 2025

SPONSORED CONTENT

Navigating Disruption in Ag Lending – Why Tariffs Are Just the Tip of the Iceberg

Navigating Disruption in Ag Lending – Why Tariffs Are Just the Tip of the Iceberg

July 1, 2025
AI Compliance and Regulation: What Financial Institutions Need to Know

Unlocking Deposit Growth: How Financial Institutions Can Activate Data for Precision Cross-Sell

June 1, 2025
Choosing the Right Account Opening Platform: 10 Key Considerations for Long-Term Success

Choosing the Right Account Opening Platform: 10 Key Considerations for Long-Term Success

April 25, 2025
Outsourcing: Getting to Go/No-Go

Outsourcing: Getting to Go/No-Go

April 5, 2025

PODCASTS

The future of careers in risk and compliance

July 17, 2025

Breaking down the bank-related provisions in the big budget bill

July 10, 2025

Podcast: Inside ABA’s new Treasury Check Verification System API

June 25, 2025
ADVERTISEMENT

American Bankers Association
1333 New Hampshire Ave NW
Washington, DC 20036
1-800-BANKERS (800-226-5377)
www.aba.com
About ABA
Privacy Policy
Contact ABA

ABA Banking Journal
About ABA Banking Journal
Media Kit
Advertising
Subscribe

© 2025 American Bankers Association. All rights reserved.

No Result
View All Result
  • Topics
    • Ag Banking
    • Commercial Lending
    • Community Banking
    • Compliance and Risk
    • Cybersecurity
    • Economy
    • Human Resources
    • Insurance
    • Legal
    • Mortgage
    • Mutual Funds
    • Payments
    • Policy
    • Retail and Marketing
    • Tax and Accounting
    • Technology
    • Wealth Management
  • Newsbytes
  • Podcasts
  • Magazine
    • Subscribe
    • Advertise
    • Magazine Archive
    • Newsletter Archive
    • Podcast Archive
    • Sponsored Content Archive

© 2025 American Bankers Association. All rights reserved.