article thumbnail

Data Breaches 101: What They Are And How To Prevent Them

VISTA InfoSec

User Account Details Usernames, passwords, security questions, login timestamps, failed login attempt logs, password reset tokens, multifactor authentication details, and session IDs. You may face legal/regulatory penalties for violating disclosure laws.

article thumbnail

FinCEN Files Show Banks’ ‘Whack-a-Mole’ Battle Against KYC/AML

PYMNTS

As BuzzFeed reported, “laws that were meant to stop financial crime have instead allowed it to flourish. And in one recent edition of PYMNTS’ KYC/AML Tracker details, the rise of open banking is likely to spur a “fast track” for new AML efforts, including multifactor authentication (MFA) and strong customer authentication (SCA) processes.

Fincen 139
article thumbnail

Deep Dive: How Biometrics Help Telecommunication Companies Fight Onboarding Challenges, SIM Swap Fraud

PYMNTS

This negative experience is due to a number of factors, including ineffective communication, unclear directions on how to access their devices, and tedious processes when setting up their accounts that often require multiple password entries and multifactor authentication (MFA) setup.

article thumbnail

New York Bolsters Cybersecurity Requirements

Global Fintech & Digital Assets

Under Section 41 of the Banking Law, the DFS superintendent can remove an officer or director for violating “any law or duly enacted regulation of the superintendent” relating to a regulated banking institution. By November 1, 2025, covered entities must comply with multifactor authentication and asset inventory requirements.

article thumbnail

GDPR & PSD2: A Silver Lining For Fraudsters?

PYMNTS

An organization should only process personal data for the lawful reasons set out in the GDPR; they can’t collect it “just because.”. PSD2 sets out the requirements for SCA, an identity verification procedure that leverages multifactor authentication. SCA pulls in factors such as ownership (i.e.,

article thumbnail

What’s Behind The Rise Of Behavioral Biometrics?

PYMNTS

PSD2 rules also include requirements for SCA, an identity verification procedure that leverages multifactor authentication. So far, few countries have any laws about how to collect and use data captured by behavioral biometric authentication technology, according to The New York Times. Security, though, is another goal.

article thumbnail

Fighting Scams and Authorized Push Payment Fraud in the US

FICO

The law today holds that consumers are not liable for “unauthorized” electronic funds transfers. Enable multifactor authentication (MFA), avoiding text or email for one-time passcode sharing whenever possible. That idea of authorization is where deep divisions start to appear.

Scams 52