UK APP Fraud Reimbursement Rules Bring New Challenges for Banks
Summary
The article examines how the UK’s APP fraud reimbursement scheme could affect banks and customers, including false claims, account and device takeovers, and gaps in fraud detection. It recommends coordinated teams and stronger technology deployment.
Key points
- The PSR’s reimbursement scheme is intended to support victims of authorised push payment (APP) fraud and clarify payment-industry liability.
- The article warns that banks may need stronger systems to identify first-party fraud, in which individuals make false reimbursement claims.
- It says fraud can begin before a payment through account takeover or device takeover, including access via banking malware or remote access tools.
- Attackers with device access may steal credentials and two-factor authentication tokens or execute fraudulent transactions.
- The article argues that transaction monitoring alone may miss attacks staged before the payment, and discusses AI and machine learning as possible detection tools.
- It recommends cross-functional teams, dedicated technical resources, clear measures for assessing AI tools, and secure development and release practices.
- The article notes possible reimbursement costs, more investigations, regulatory workload, and challenges establishing liability.
Article Details
- Event Type
- UK Payment Systems Regulator (PSR) APP fraud reimbursement scheme and its anticipated implications for banks, customers, and fraud prevention.
- Impact
- The scheme is intended to reimburse eligible victims and strengthen accountability, but the article warns it may increase false claims, first-party fraud, operating and compliance costs, and pressure on banks to improve fraud detection. It highlights risks from account and device takeover, banking malware, and Remote Access Tools (RATs), and the need for stronger transaction monitoring, identity verification, and technology deployment.