.png)
FOLLOWING the announcement by Bank Negara Malaysia governor Tan Sri Nor Shamsiah Mohd Yunus at the launch of the Financial Crime Exhibition on measures to combat financial scams, we would like to provide some details in relation to the five key measures that were announced:
1. Migrating from SMS one-time passwords (OTP) to a more secure authentication method, e.g. secure multi-factor authentication software or hardware tokens for certain transactions. These transactions include fund transfers and payments, change of personal information (e.g. mobile numbers, postal, and email addresses) and account settings (e.g. limits for withdrawals or transfers). Some banks have already largely migrated away from SMS OTP or offer secure alternative authentication methods as recommended by Bank Negara Malaysia since 2019, while other banks are expediting efforts to comply with the latest requirements.
2. Tightening the banks’ fraud detection rules and triggers for the blocking of suspicious transactions.This may result in the banks sending prompts/notifications to customers on unusual activities. The banks may also contact their customers to confirm/ authenticate certain transactions that are flagged as unusual activities.
3. Verification and cooling-off period for first-time enrollment of e-banking services or secure devices. During this cooling-off period, customers will not be able to perform any online banking transactions.
4. Restricting authentication of electronic banking transactions to one mobile device or secure device per account holder. This means that the banks will allow each account holder to register only one mobile device or secure device for the purpose of authentication of online banking transactions. Alongside this, the banks will strengthen processes to enhance changes to the single-device process, such as additional verifications, to ensure that such requests have genuinely been made by the account holder.
5. Banks will also have a 24/7 dedicated complaint channel/hotline for customers to report incidents or suspicions of scam/fraud. A list of Association of Banks in Malaysia (ABM) member banks’ contact numbers for reporting scam/fraud can be obtained from ABM’s website.
In addition, the banks will make available a convenient way for customers to temporarily suspend banking activities for their own bank accounts swiftly if they suspect that their accounts have been compromised, i.e. in the event of a suspected fraud.
Customers will also be able to resume service of their accounts after a reasonable timeframe upon validation. This will enable customers to take immediate action to safeguard their own bank accounts should the need arise.
The banking industry acknowledges that the implementation of these measures may lead to changes in customers’ online banking experiences and expectations, whereby online banking transactions could potentially take a slightly longer duration due to added security measures and checks.
In view of this, we humbly seek customers’ patience and understanding of the expected delays and inconvenience that they may face once these measures are implemented. These measures however are crucial for the added safety and security of the banks’ customers.
The member banks of ABM, Association of Islamic Banking and Financial Institutions Malaysia (Aibim), and Association of Development Finance Institutions Malaysia (Adfim) are committed to ensure proper communication with customers in relation to the above measures, including the implementation dates for the various measures, any changes to processes and action required on the part of the customers, contact details to seek assistance, etc.
Customers are reminded to remain vigilant at all times when transacting online, including following online banking safety tips such as:
1. Do not download any installation files (APK files) on their devices, and only download applications (apps) from genuine app stores
2. Ensure that your online banking security image and/or phrase are correctly displayed on screen before logging in
3. Avoid clicking on links sent via chat messages such as SMS, WhatsApp, Messenger or other similar services.
The banks and industry associations have actively been promoting scam awareness and online banking safety tutorials through various channels. This will be amplified via a public awareness campaign to enhance the messaging in order to equip and educate customers on online safety. The public may also refer to the individual banks’ websites, social media pages, ABM’s website and Instagram page, AIBIM’s website and social media, as well as Bank Negara Malaysia’s Amaran Scam Facebook page for updates on the latest scam tactics and important cyber-hygiene practices to protect themselves against scams.
Account holders who encounter suspicious transactions involving their bank accounts should immediately:
1. Notify their banks
2. Contact the Commercial Crime Investigation Department Scam Response Centre at 03-2610 1559/1599
3. Lodge a police report to facilitate the investigation.
ABM, Aibim, and Adfim also welcome the measures to further elevate the Royal Malaysia Police’s CCID Scam Response Centre as a more systematic information sharing platform that will enable quicker action to prevent further losses. – The Vibes, September 27, 2022
This statement was jointly issued by the Association of Banks in Malaysia, Association of Islamic Banking and Financial Institutions Malaysia, and Association of Development Finance Institutions Malaysia