Banking the unbanked comes with security risks

Issue 2/3 2023 Financial (Industry), Security Services & Risk Management

As grim as it was, the pandemic of recent years and its resultant global economic crisis were a prime catalyst for record number of first-time bank users, the previously unbanked. This global phenomenon has been covered extensively, with banks reporting significantly higher growth rates for new entry level bank accounts by first time bank users. Trellix South Africa, County Lead, Carlo Bolzonello, urges financial institutions to consider the cybersecurity threat these novices are likely to face.

The World Bank’s Global Findex Database 2021 Financial Inclusion, Digital Payments, and Resilience in the Age of Covid-19 report found that 84% of South Africans over 15 years old have bank accounts, an improvement from 54% in 2021.

Urban, semi-urban, and rural areas are home to many first-time bank customers. Financial organisations now offering innovations like mobile money have significantly changed trade and commerce in these areas by enabling people to transact instantly over long distances without the need for cash.

These new customers to financial institutions often live in urban areas, and typically have better access to a wider range of digitally enabled financial services, including investment dashboards, budgeting apps, investment portals, and daily cashless transactions like buying a stick of gum or a house. They have long become accustomed to the concept of the enormous information portal.

South Africa’s banking organisation customers in lower income brackets have largely continued to use feature phones, which are primarily used for communication. Mobile computer program development has given businesses capabilities to extract value and wealth, and build advanced machines. But for those new to the buzzing world of cool apps, this evolution presents many traps that lay waiting to ambush the unsuspecting.

Many new financial institution customers have reluctantly embraced digital banking and all that it has to offer. Business leaders must be aware that when a new user is not trained in the proper use of the user interface and system tools, technical issues, downed networks, and identity theft are very real threats.

Seeing the potential in this long under-served segment, developers will be looking to build their programs (even more) creatively to be more intuitive and seamless for first time users of digital technology entirely, not just their particular system. An artificially intelligent digital assistant could automatically determine a user's prior navigational experience and offer voice or voiceless suggestions along the way, as well as additional security and warnings against various online threats.

Financial institutions will want to guarantee the safety of each and every one of their customers as the data repository expands exponentially and more users enter the quickly changing financial sector, which is increasingly being driven by fintech innovation. Depending on whether the participants were on the fence about joining, whether from superstition, a fear of technology, or just a general resistance to change, banks may find the experiences of their new consumers to be encouraging or discouraging.

Individuals are every organisation's greatest vulnerabilities because of the rapidly growing universe of online threats and threat actors, which has made South Africa a clear target for numerous attacks. There are few people with the specialised skills needed to operate legacy cybersecurity solutions, not just in developing countries but also abroad.

Fortunately, the emergence of the extended detection and response (XDR) framework is offering much-needed breathing room for business leaders perplexed by the world of cybersecurity and largely unaware of the extent to which South African businesses, public institutions and even individuals are being targeted by hackers.

Running artificial intelligence generated scripts, the connected ecosystem pulls data from a wide and comprehensive pool of existing stand-alone solutions, updating new attacks in real time to give subscribers the most effective protection against an evolving threat landscape.

Providing a more complete, but simpler picture of active threats across the entire connected world in real-time, XDR delivers this information to centralised security operations for a quicker response that benefits a larger network of people also subscribed to the remotely operated and monitored XDR tool, covering even the least tech-savvy, first time digital tech user.

As a result, all system managers in the financial industry—on whom significant economic growth depends—will feel less stress when users from this previously underserved market start using their services because they will be able to manage each new user effectively by covering all the necessary ground for knowledge and vigilance while logged in.

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Convergence of cyber and physical security
Integrated Solutions Security Services & Risk Management
The overlap between cybersecurity and physical security will necessitate the integration of cyber and physical security in order to enable the sharing of events to the same security operations centre.

Sustainability School opens for enrolment
Education (Industry) News Security Services & Risk Management
Three-part programme, first developed for Schneider Electric employees, is now available for free for companies worldwide. Attendees learn how to future-proof their businesses and accelerate their decarbonisation journeys.

Success in business process best practices
Technews Publishing Kleyn Change Management Editor's Choice Integrated Solutions Security Services & Risk Management
This month we commandeer time with the woman who is spearheading our national conversation on Women in Security, Lesley-Anne Kleyn, to get to know the lady herself a little better.

Security awareness training
Training & Education Security Services & Risk Management
It is critically important to have a security awareness solution that uses the limited time available to train effectively, and one that provides targeted education that is relevant to users.

Technology to thwart solar panel thieves
Asset Management, EAS, RFID Security Services & Risk Management Products
A highly efficient industrial network is coming to the rescue of the solar industry, as solar panels, inverters and batteries are being targeted by thieves and threaten to destabilise the industry.

Vulnerabilities in industrial cellular routers’ cloud management platforms
Industrial (Industry) Cyber Security Security Services & Risk Management
Research from OTORIO, a provider of operational technology cyber and digital risk management solutions, unveils cyber risks in M2M protocols and asset registration that expose hundreds of thousands of devices and OT networks to attack

SAFPS to launch a platform to combat fraud
Editor's Choice News Security Services & Risk Management
In response to the growing need for a proactive approach to fraud prevention, the SAFPS is developing a product called Yima, which will be a one-stop-shop for South Africans to report scams, secure their identity, and scan any website for vulnerabilities.

End the scourge of solar panel theft
Guardian Eye IT infrastructure Security Services & Risk Management
Modern solar installations are designed so they can be put together very quickly, but this means they can also be dismantled very quickly, and so there has been a massive spike in the theft of solar panels from roofs.

Troye and Arctic Wolf join forces
News Cyber Security Security Services & Risk Management
Troye has announced a strategic partnership with Arctic Wolf to enable Troye to provide customers with enhanced cybersecurity solutions and services that help protect their businesses from advanced cyber threats.

Citadel launches Fortress Solutions
Asset Management, EAS, RFID News Security Services & Risk Management
Citadel House of Technologies recently launched Fortress Solutions, a cost-effective digital project and asset management solution, which addresses the critical need for practitioners to manage projects and assets over the entire lifecycle.