Protect Customer Identities and Reduce Security Risk
Financial institutions face a growing range of fraud and cybersecurity threats, from account takeover and identity fraud to scams and data breaches. Javelin helps organizations identify emerging risks, evaluate evolving attack methods, and develop strategies to protect customer accounts, identities, and data. Our research also provides guidance on fraud prevention, cybersecurity best practices, customer education, and building trust in an increasingly complex threat landscape.
Recent Fraud Management and Cybersecurity Research
Reports
‘GDPR Lite’ California Privacy Act Mandates Modern Privacy Practices
In the wake of the Cambridge Analytica scandal that impacted roughly 87 million Facebook users, California lawmakers have quickly pushed through privacy legislation that could become a standard for how U.S. banks handle customer information.1 Th...
Securing Emerging Channels: Virtual Assistants, the Internet of Things, and Beyond
Connected cars, light bulbs, voice assistants, chatbots, and more! The “Internet of things” (IoT) is expanding swiftly with new types of devices, many of them carrying potential to support banking and payment services. These emerging channels of...
2018 Trust in Banking
This report ranks seventeen of the largest financial institutions in the US according to their level of trust among accountholders and considers the factors that can engender or undermine trust in a financial institution.
Hacking Back: Playing with Fire
Despite warnings from academics, former intelligence community officials, and federal law enforcement, some security professionals at financial services companies harbor a willingness to attack their adversaries. Not necessarily to destroy outsi...
The Rebirth of Identity Protection in Financial Services
This original report, sponsored by EZShield, examines the opportunity for financial institutions to offer identity protection services to their accountholders, in light of the fraud threats faced by digital-first consumers. With consumers facing...
WebAuthn
In April 2018, the World Wide Web Consortium (W3C) advanced the Web Authentication (WebAuthn) standard to the Candidate Recommendation stage.
This standard defines an application programming interface (API) that can be incorporated into browser...
The Chargeback Triangle
This original report, sponsored by Verifi, Inc., examines the near- and long-term effects that chargebacks have on each party to a retail transaction, along with the opportunities that exist to streamline the chargeback process or even avoid c...
The Fraud Trap: Optimizing Digital Payment Controls From Day One
This original report, sponsored by ACI, examines how the recent evolution of payments has influenced the choices that institutions make when managing for fraud, the implications of those choices, and opportunities to more effectively get ahead...
Uber’s Extortion Incident: Avoiding Future Missteps and Misunderstandings
In late November 2017, Uber announced a previously undisclosed theft of data affecting roughly 57 million riders and drivers that had taken place roughly a year earlier. The ride-sharing startup said it had arranged $100,000 payment a year earli...
Bug Bounties: Overcoming Fears, Finding Solutions
This report examines the interest, trust, and doubts FIs have in bug bounty programs (initiatives that incentive vulnerability disclosure) and, more generally, vulnerability disclosure.