Even if the convenience of financial services through the internet is enhanced, it is meaningless unless security is ensured. It is necessary for the public and private sectors to reconstruct safety measures so that customers can utilize online financial services with peace of mind.
The number of cases in which malicious third parties illegally withdraw customers' money through online financial services has been increasing.
At SBI Securities Co., a major online securities firm, about 100 million yen were illegally withdrawn from the securities accounts of six customers.
It was a sophisticated scheme in which a third party acquired the identification number and password of securities account owners, illegally logged in to the account to sell stocks and get money, opened a bank account falsely using the name of the real securities account owners and then transferred the money from the stock sale into it.
If such crimes continue, the credibility of online financial services could be shaken. Investigative authorities are urged to do their best to uncover the criminal methods and detect the perpetrators.
About 190 cases of unauthorized withdrawals of money from bank accounts by abusing NTT Docomo Inc.'s e-money payment service have been confirmed at 11 banks as of Wednesday, with the damage totaling about 28 million yen.
At Japan Post Bank, where the damage accounts for many of that total, bank accounts have also been used to illegally withdraw money by abusing services provided by payment service providers other than NTT Docomo. Seven companies, including PayPay Corp., were confirmed to have suffered damage. An illegal money remittance using a debit card with Japan Post Bank's prepaid function was also found.
To remove the anxiety of users, it is indispensable to take drastic preventive measures.
What cannot be overlooked is the fact that the fraudulent actions have exploited the gap between payment service providers and banks in their cross-industry partnerships. It could be that each side totally relied on the assumption that the other party was taking measures.
To confirm someone's identity when linking a bank account to an online payment service, two-step authentication is effective. This means users are asked to reenter a confirmation number sent via mobile phone short messages service or other means. However, many of the banks hit by the fraudulent actions have not introduced the system.
Japan Post Bank said that it had strongly urged payment service providers to adopt two-step authentication, but the operators stated to the contrary that they did not hear such a message from the bank.
At a press conference, Bank of Japan Gov. Haruhiko Kuroda urged banks and their business partners to practice proper risk management. The entire industry, which is tasked with online financial services, should tackle the problem.
There are many points that need to be reviewed in dealing with the problem after the fraudulent actions were uncovered. It is said that in some cases, Docomo shops initially did not respond appropriately to inquiries from victims, saying that they could not disclose information.
It took a week for Docomo to hold a press conference after it received the first report from a bank about the damage. Japan Post Bank was also late in disclosing the facts.
Every possible effort must be taken to minimize the damage by disclosing specific information promptly.
-- The original Japanese article appeared in The Yomiuri Shimbun on Sept. 25, 2020.
Read more from The Japan News at https://japannews.yomiuri.co.jp/
