{"id":4420,"date":"2021-11-18T06:44:00","date_gmt":"2021-11-18T06:44:00","guid":{"rendered":"https:\/\/wibmo.com\/what-is-risk-based-authentication-and-why-banks-should-implement-it\/"},"modified":"2024-08-07T09:33:56","modified_gmt":"2024-08-07T09:33:56","slug":"what-is-risk-based-authentication-and-why-banks-should-implement-it","status":"publish","type":"post","link":"https:\/\/wibmo.com\/blogs\/what-is-risk-based-authentication-and-why-banks-should-implement-it\/","title":{"rendered":"What is Risk-Based Authentication and why banks should implement it?"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Driven by the trifecta of smartphone penetration, low-cost data rates, and higher incomes, the Indian e-commerce market was expected to grow to US$ 200 billion by 2026. Covid-19 has caused an inflection point for the e-commerce market in India. A Bain & Company-PRICE survey of 3000 households across income groups and geographies which was conducted between April and June, revealed about 13% of respondents buying online for the first time, while about 40% buying more online. An NRF survey showed that nearly 6 in 10 consumers say they are worried about going to the store due to fear of being infected.<\/p>\n

\n
\n
\"\"<\/picture><\/div>\n<\/div>\n
Figure 1: Growth of credit cards in India<\/strong> (Source: RBI database, Bank-wise ATM\/POS\/Card Statistics various years)<\/figcaption>\n<\/figure>\n

The majority of the growth is from online shoppers in Tier 2 tier 3 cities. The pandemic has also seen a surge in UPI transactions. While credit cards did a total of 185 million transactions delivering a value of INR 805K million, UPI delivered a staggering 3654 million transactions with a value of INR 6543K million as per RBI and NPCI statistics for Sep 2021.<\/p>\n

Key Challenges and Solutions:<\/strong><\/p>\n

With the spectacular growth in the eCommerce market sophisticated online payment frauds and threats have mushroomed too. An e-commerce transaction involves multiple entities at various stages, such as the marketplace, merchants, payment gateways, financial institutions, apart from the end consumers, and each of them can act as a vulnerability or attack point for malicious actors. For example:<\/p>\n

The end customer fraud<\/strong> making fraudulent claims, chargebacks, fake buyer accounts, promotion\/coupon abuse.<\/p>\n

Malicious fraudsters<\/strong> involved in account takeover, identity theft, card detail theft, etc. Data leaks compromise millions of consumer details every year contributing to digital fraud through impersonation globally.<\/p>\n

Fraudulent merchants<\/strong> who could deploy \u201cbust out\u201d merchant fraud and transaction laundering mechanisms to defraud acquirers.<\/p>\n

However, transactional and identity security is not the only concern of financial institutions. This must be balanced with customer experience. Customer loyalties now lie with merchants and banks that offer the best experience in terms of convenience, speed, and security. With the myriad of devices, payment authentication options, and processes every digital bank faces the ultimate challenge of balancing optimal security and a seamless customer payment experience.<\/p>\n

This is where <\/em>Wibmo\u2019s Trident FRM<\/em><\/strong> <\/em>makes a difference. Trident FRM<\/em> is a comprehensive, omni-channel, risk-based authentication (RBA) solution that identifies and manages fraud in real time. It does so by building a holistic customer profile from diverse data points.<\/p>\n

\n
\"\"<\/picture><\/div>\n
Figure 2: Risk-Based Authentication<\/strong><\/figcaption>\n<\/figure>\n

A customer\u2019s transaction journey begins on a checkout page or a bill payment action or when a customer does a fund transfer (wire transfer). These actions result in the customer connecting to the bank\u2019s server and the bank\u2019s server is an integration point for Trident to evaluate the risk of every transaction done by the user in real-time. Trident uses the data it receives from multiple channels and devices.<\/p>\n

Data comes in various forms, like:<\/p>\n

Transactional data:<\/strong> Card number\/account number\/phone number, amount, currency, merchant or payee information, billing, and shipping addresses.<\/p>\n

Location data<\/strong>: Terminal id, IP address, approximate latitude and longitude, ISP data.<\/p>\n

Device data:<\/strong> (SDK App ID, Browser information, proprietary device-fingerprinting)<\/p>\n

User information:<\/strong> Time of the day for this transaction and any deviations from past customer behavior using historical data.<\/p>\n

With more than 100 data points (in the case of online e-commerce), and a powerful set of operators Trident can write rules for almost every fraud scenario using an intuitive rule builder screen. In addition, Trident employs advanced analytics and machine learning algorithms to generate a real-time score and decisions for every transaction. The decision can be one of the following:<\/p>\n

Low Risk:<\/strong> These are transactions that can be ALLOWED to proceed without challenging for OTP thereby delivering a seamless customer experience. In Wibmo\u2019s experience, more than 90% of the transactions fall under this category.<\/p>\n

Medium Risk:<\/strong> Transactions that are suspected are risky enough to challenge using a multi-factor authentication method.<\/p>\n

High Risk:<\/strong> Transactions that are suspected to be very high risk and suggested to be declined.<\/p>\n

Any suspected fraudulent transaction is marked as a case for automated action or manual investigation and closure in the Case Management portal.<\/p>\n

An efficient case management portal drives both proactive and reactive fraud cases using consolidated data across channels. It also generates various reports that are required for regulatory and compliance purposes.<\/p>\n

Benefits of RBA are:<\/strong><\/p>\n

Reduced financial losses due to fraud.<\/p>\n

Customer delight due to seamless payment experience.<\/p>\n

Improved compliance with local and global regulatory requirements.<\/p>\n

Reduced total cost of operations by managing fraud cases efficiently and limiting the number of cases routed for manual review.<\/p>\n

Impact Analysis:<\/strong><\/p>\n

So, a frequently asked question is: What is the impact of doing risk-based authentication? For a credit card online purchase (card not present) scenario, RBA using Trident <\/em>delivers almost 6\u20138% improvement in success rates for banks and almost 40% reduction in latency for completing the transaction for the end customers.<\/p>\n

To put this in perspective, as of Dec 2020 with an average ticket size of credit cards was Rs 3,653 and with 20 lakhs transactions per month for online transactions, for a given bank and assuming a 1% MDR, this is an additional uptick of 43 lakhs every month.<\/p>\n

Wibmo processes cards not present transactions for many of India\u2019s largest banks. For a large bank with more than 150 lakh transactions, we were able to save close to Rs 5 lakhs in a month.<\/p>\n

Conclusion:<\/strong><\/p>\n

As transaction volumes are set to grow in double digits year on year, and as customers expect to transact from anywhere using multiple devices, the threat of increased online fraud becomes more real. Customers want speed and convenience balanced with security, therefore, banks that deliver the most optimized services will win customer loyalty. Hence, it becomes imperative for issuers to be integrated with robust, omnichannel fraud detection and prevention risk engines. RBA solutions such as TRIDENT FRM<\/em> is a cost-effective solution that empowers banks to stay one step ahead of fraudsters and deliver delightful customer experiences which they have come to expect in today\u2019s digital world.<\/p>\n

Author:<\/strong><\/p>\n

Ajit Nair<\/a>, Director Product, and Programs<\/p>\n

Wibmo<\/a> A PayU\/Naspers FinTech Company<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t