SDBA eNews

SEPTEMBER 26, 2024

ABA Banking Journal: Nichols Shares ABA Resources for Banks to Help Fight Fraud

September 24, 2024


To all bank CEOs: I wanted to connect with you about an issue facing every bank in the country — the increased threat of fraud.

As all of you know too well, fraudsters and criminals are relentlessly targeting bank customers right now, employing both novel tactics like crypto payment scams as well as one of the oldest forms of financial crime that has, unfortunately, exploded in recent years: check fraud.

As the only trade association representing banks of all sizes, ABA is working tirelessly to provide the entire industry with resources banks can use to help protect and educate their customers and fight back against all types of fraud. I am writing to provide you with an important update on some of these key initiatives.

ABA Fraud Contact Directory. In 2023, ABA launched a Check Fraud Claims Directory to address a crucial pain point in the fight against check fraud: the amount of time it takes for a bank to process a check fraud warranty breach claim with another institution. Our goal was to provide a one-stop destination for banks to access the information needed to file these claims with another bank and achieve quicker resolutions for their customers.

Banks tell us the directory is making a difference in the fraud fight. One example: a community bank in Mississippi was able to quickly identify the correct fraud contact at one of the nation’s largest banks using the directory, which led to the timely recovery of $71,000 for a customer on a fraudulent wire.

This is not a unique story, but it underscores the importance of having this central repository of contact information. I am proud of the ABA team for leading the way and creating this resource.

I am also excited to announce that ABA has expanded the directory to include contact information for unauthorized or fraudulent transfers for wires, ACH, RTP or FedNow in addition to check warranty breach claims. The improved ABA Fraud Contact Directory is searchable by bank name, city, state or FDIC number, and is free and accessible to any bank that provides their own fraud contacts. With more than 2,000 banks now participating — including all the nation’s largest financial institutions — the ABA Fraud Contact Directory gives the industry a central hub where banks can resolve their fraud claims more efficiently.

If you have not yet added your bank’s contact information, I encourage you to do so today. The more banks that join, the more effective this resource will become for our industry.

Consumer-facing anti-phishing and fraud campaigns. Ideally, we would like to stop fraud before it ever triggers a claim. To do that, we need to educate consumers on how to spot scams before they do damage. This fall, ABA is launching not one but two industrywide public awareness campaigns with that purpose.

We’re bringing back our award-winning #BanksNeverAskThat anti-phishing campaign — and we’re adding a new companion campaign specifically designed to educate consumers on how to reduce the risk of check fraud.

Like #BanksNeverAskThat, the #PracticeSafeChecks campaign will provide all banks — regardless of ABA membership status — with easy access to a campaign toolkit that includes free social media posts, shareable graphics and videos in both English and Spanish that educate bank customers on how to use checks safely. Both campaigns will officially launch October 1, in conjunction with Cybersecurity Awareness Month. We encourage every bank in the nation to join us in these two campaigns and help demonstrate the industry’s commitment to protecting consumers. To access the toolkit and all of the free resources, all your bank has to do is register at aba.com/BanksNeverAskThat.

Government partnerships. While banks have long been on the frontline of innovation and deploying advanced capabilities to protect their customers, the fight against fraud is not one that the private sector can win on its own — it requires strategic collaboration with the public sector. Here again, ABA is leading the way, engaging with government agencies where possible to address challenges and develop workable solutions.

Just one recent example: ABA was asked to brief the leadership of the Treasury Fraud Taskforce, which includes Assistant Secretary Dave Lebryk, FinCEN Director Andrea Gacki and Deputy Assistant Secretary Todd Conklin. During that briefing, we raised several existing challenges around Treasury check fraud, including shortfalls in the Treasury Check Verification System and the lack of a payee confirmation feature, urging them to accelerate deployment of this capability.

Additionally, ABA has been pressing the FCC for the past 18 months, including three different comment letters, to hold telecoms accountable for the spoofed texts and CallerID messages that help criminals scam your customers. Just last week, the FCC announced two pending rule changes first suggested by ABA that will significantly limit the amount of scam texts customers will receive.

In recent days, the ABA Foundation has also partnered with the FBI, the CFTC, the Department of Justice and other federal agencies to develop a new infographic providing education on crypto investment scams, which are increasingly being used to target consumers to get them to invest in phony apps and websites. We urge you to consider sharing this infographic with your customers.

Finally, we‘re providing policymakers, including members of Congress, with information about our campaigns and how they can support our consumer education efforts.

Media engagement. The ABA communications team continues to work with national and local media outlets to explain everything banks are doing to protect customers — in fact, we have fielded more inquiries related to fraud this year than any other banking topic. We want to remind reporters that the fraudsters are the bad guys in this fight, not banks, and that we can’t win this battle on our own. We need law enforcement, government and other industries engaged as well.

Fraud continues to pose a serious challenge to banks of all sizes, and ABA remains committed to giving banks the tools they need to fight back. In addition to everything highlighted in this email, we will be unveiling additional resources for banks in the coming weeks to help banks and your customers stay a step ahead of the scammers and fraudsters. Look for more details at the ABA Annual Convention in October. As you work to fight fraud at your own bank, know that you have a partner in ABA. I encourage you to take full advantage of the many free resources we have to offer, and don’t hesitate to contact us if there is anything else we can do to support you as you work to protect your customers.

Best,
Rob Nichols
President and CEO American Bankers Association
A Certified Great Place to Work ®
Tel: 202-663-7512 | @BankersPrez

Full Article


CISA News: Kevin Mandia’s 5 Question Confidence Test for CISOs

September 20, 2024

CISA

For most organizations, cyberthreats are too imposing to get bogged down in low-impact exercises. Mandiant’s founder advises executives to look for a security mindset above all else.

CEOs and company boards often ask Kevin Mandia, founder and former CEO of Mandiant, how to determine the strength of their CISOs. Above all else, Mandia advises executives to assess their CISO’s disposition. “Do you have a CISO with a security mindset?” “If they don’t have that, you’re probably not going to have a great security program,” Mandia said Wednesday during his opening keynote at the Mandiant Worldwide Information Security Exchange conference in Denver.

Because organizations encounter cyberthreats in an asymmetric landscape, executives and boards rarely have the luxury of digging deep into their security leader’s management skills or technical acumen. For most organizations, cyberthreats are too imposing to get bogged down in low-impact exercises.

“There’s very little deterrence in the cyber domain. We are all just playing goalie, and the attackers are in safe harbors with unlimited penalty kicks against us. It’s a disadvantage,” Mandia said.

Private organizations typically don’t have the means to invest in offense, he said. “You have to constantly think about defense and how do we withstand the constant onslaught that’s up against us.”

Over the past couple decades Mandia’s crafted a series of five questions designed to help executives and board members test their confidence in a CISO’s ability to excel in their job.

The questions on Mandia’s CISO confidence test include:

  • How would you break into us? What is our weak spot?
  • What is our worst-case scenario?
  • What would you do if the worst-case scenario occurred?
  • How resilient are we? How long would it take to recover our systems and applications?
  • What do you need?

Mandia, who now serves in a strategic security advisor role at Google Cloud, said CEOs should focus on their CISO’s response to these questions as a measure of their demeanor.

“I tell CEOs, you don’t even care what the answer is to these questions as long as your CISO actually has one, because at least that means you have the mindset,” Mandia said.

Full Article

SDBA slim

Banks Never Ask That: 2024 Anti-phishing & Check Fraud Campaign Preview

banks never ask that

#BanksNeverAskThat is back. And, great news, we're adding a new check fraud campaign - including a website, social media posts and videos - to educate your customers about using checks safely and paying digitally whenever possible.

The websites and all the toolkit assets will be available in English and Spanish.

We'll also have new #BanksNeverAskThat antiphishing materials, including videos and social media posts, to help you protect your customers from phishing scams. And to make it easy, when you register, all the assets for both campaigns will be available in one toolkit.

New to #BanksNeverAskThat? Registration is free for all banks regardless of ABA membership status. Upon registering, you'll receive a link to the participant toolkit so you can begin preparing for the October 1 kick off.

 SDBA EVENTS

2024 SDBA NEXT STEP: Emerging Leaders Summit

Tuesday, October 29, 2024
Holiday Inn City Centre| Downtown Sioux Falls, SD

ELPlan to attend the 2024 SDBA NEXT STEP: Emerging Leaders Summit in downtown Sioux Falls, South Dakota, on Tuesday, October 29, 2024. This year's agenda is another good one, with guest speaker and emcee kicking things off, Jack Stahlmann, the Don't Flinch Guy. Jack’s presentation, The Intangible It, examines the "it" quality movie stars possess that you can't quite put your finger on… or can you? Also on the agenda: former South Dakota Governor and Lt. Governor, Dennis Daugaard and Matt Michels; Marissa Brinkman; Sioux Falls Mayor, Paul Ten Haken; Janet Kittams with The Helpline Center; and South Dakota native, Andrew Kightlinger, film director and writer. Register for last year's registration rate through September 1st!

A small block of rooms has been held at the Holiday Inn, available through September 28. Make your reservation now!

Information & Registration


WBA Section1071 Workshop

October 18, 2024 | 9am-3pm CDT | Madison, WI and Virtual

This 1071 Workshop is designed to provide attendees with an understanding of the 1071 final rule and how they can start implementing it in their organizations. The workshop will start out with an overview of the 1071 rule, helping attendees understand the larger framework that will be required. After this, we will walk through select aspects of the new rule, including institutional coverage, transactional coverage, implementation deadlines, and a review of the data points that will need to be collected and reported. The program will conclude with a discussion on creating an implementation plan, including a review of steps financial institutions can consider for rolling out the new small business data collection and reporting rule.

Information and Registration 


  Compliance Alliance logo

Question of the Week

Q: Under the Regulation Z advertising rules, when is APR considered to be a “triggering term”?  

A: The annual percentage rate (APR) is a triggering term for open-end credit product advertisements, but not for closed-end credit product advertisements. Under § 1026.16(b), terms that are required to be disclosed under § 1026.6 (including the corresponding annual percentage rate) trigger additional disclosures if set forth affirmatively (or negatively) in such an advertisement. However, under § 1026.24(d)(1), while certain “triggering terms” presented in an advertisement for a closed-end loan will required the disclosure of additional terms, APR is not one of them (for reference, for close-end loans the “triggering terms” are the amount or percentage of any downpayment, the number of payments or period of repayment, the amount of any payment, or the amount of any finance charge.)

Learn how to put compliance management solutions from Compliance Alliance to work for your bank, by contacting (888) 353-3933 or [email protected] and ask for our Membership Team.

For timely compliance updates, subscribe to Bankers Alliance’s email newsletters.


 UBB

SDBA eNews Archive
View past issues of the SDBA eNews

Advertising Opportunity
Learn more about sponsoring the SDBA eNews

Questions/Comments
Contact the SDBA at 605.224.1653 or via email