NEED FOR URGENT SECOND LEVEL AUTHENTICATION IN CARD BUSINESS TRANSACTION IN NIGERIA
In the recent time, there has been serious wave of card and ATM fraud that has swept across the nation in different dimension and shapes. The reasons are many and vary coupled with our business environment. The continued use of Magnetic Stripe in Nigeria has not helped matters because the security around it is far less than desired.
Other reasons for the wide spread card fraud includes but not limited to:
Lack of Awareness
Ignorance on the side of some of the card users
Security issues associated with magnetic stripe.
Poor professionalism on the issuance of the card product
Lack of requisite skill by the switching company.
It is important to state here that Magnetic Stripe has encouraged some common e-business frauds like card cloning/skimming, phishing, shoulder surfing etc which is almost eroding the confidence of the card holders and the entire banking public.
The ATMIA Security Conference in London exposed some of the flaws associated with our current magnetic stripe in Nigeria and set the road map for the more secured and globally accepted CHIP+PIN EMV compliant cards.
WAY FORWARD
The implementation of CHIP+PIN card is the way forward as the control flaws in Magnetic stripe and coupled with risk associated with our business environment is quite enormous and no stop gap measure now can offer any relief.
The implementation of the CHIP+PIN card must be very robust and futuristic as any control lapse will leave us in the hands of intelligent and more powerful cartel coming as fraudsters.
Having reviewed all the option open to us and considering the future of e-banking in Nigeria, we recommend that the bank should adopt:
· Biometrics as second level authentication for ATM and POS.
· TOKEN as second level authentication for WEB transactions.
Our recommendation is premised on the following:
COMPETITIVE EDGE: Second level authentication will give our card the needed security to survive in Nigeria market. It will become a marketing tip for banks as our card will be more secured than that of our competitors in other African countries. The informed banking public will find good reason to drop other banks cards for ours and the patronage of our secured ATM will hit its peak.
ENHANCED SECURITY: Globally biometrics offers the best form of security for card authentication and it is a known fact that common card frauds like cloning/skimming, phishing or shoulder surfing etc will completely be eliminated. Finger Print or Vein has become adaptable for the recently manufactured ATMs like the ones in our country and offers a more robust security that will be almost be impossible to crack. Presently, Japan has achieved 80% compliance from the ATM of Banks on BIOMETRICS as second level authentication for their cards.
INCREASED BUSINESS: If we successfully implement this second level authentication, we will be the first in Africa and Nigeria cardholders will benefit immensely from it. Our idea is that with the successful implementation of the strong second level authentication, the daily limit of the cardholders using secured ATMs all over the country will be enhanced. This will increase the traffic on our ATMs and in effect increase our retail income and importantly restore the confidence of our card holders. It is also important to add that the Nigerian banks with increasing number of ATMs and a secured Platform, will take the leadership position and begin to determine the market.
REDUCTION OF OUR CARD BUSINESS RISK: Our Card Business risk will be reduced to the minimum as there is no way any customer will repudiate any transaction consummated on our secured platform and in effect our associated business risk in card transaction would have been eliminated. This will in effect improve our position with international ratings agents and more genuine customers locally and internationally will take us very serious.
FRAUD REDUCTION: Biometrics will be set on our card (the Chip has memory to the biometrics) and this will authenticate the transactions immediately accepting it or declining as the case may be. This will drastically reduce if not eliminate card related fraud while restoring the needed confidence to our card holders.
Hello Oluchukwu.
ReplyDeleteI have to commend you on this research work. Its a good start. I particularly am very much interested in the use of Biometrics in ATM control as a second level check on Chip and PIN.We have to be a step ahead of these fraudsters. What of Audit trails? what are the technicals behind its use? what are TOKENs for web transactions? i really dont understand what you meant?