ING Direct Forays into Facebook Banking, Biometric Security

ING Direct Canada tends to be ahead of the curve on customer-facing technology — witness its pioneering BlackBerry 10 and Windows 8 apps released earlier this year. This week, the $40 billion-asset online bank revealed several new digital innovations, including one that lets its 1.8 million customers log in to their online banking account through Facebook, and another that allows customers to see certain account information from their mobile devices without logging in at all.

ING Direct is letting customers who opt in view account balances, history and pending transactions and receive real-time account alerts within Facebook, all in read-only mode. It plans to expand this application further to include transactions such as transfers, bill payments and email money transfers.

U.S. banks have not ventured to let customers bank through Facebook, due partly to concerns about the FFIEC's proposed rules about banks' use of social media and security questions.

But Charaka Kithulegoda, CIO of ING Direct Canada, says such concerns are overblown.

"We tend to look at everything in a simple manner," he told BTN in an interview Wednesday. "We looked at this and said, how can we do this without taking a different approach to how we do web banking?" The solution: to host ING's online banking site within Facebook, using an IFrame, (an HTML document embedded inside another HTML document on a website) that gives the customer the feeling that he is still on Facebook, when he is in fact entering the bank's website. The customer logs in with his Facebook credentials first, then logs into online banking with his usual ING Direct user name and password. Nothing really changes about the online banking technology, except the way it looks to the customer; security and compliance technology is the same.

"We looked at all the implications of doing this," Kithulegoda says. "The thing we needed to deal with was, how to deal with the stigma of being on Facebook [which has its own security issues]? How do you go through an education process to say it is as secure as online banking, and you're not doing anything differently?"

Some other non-U.S. banks are letting customers access account data through Facebook, such as Commonwealth Bank of Australia, which actually allows banking transactions through Facebook.

ING also launched this week a login-free entree to its mobile banking apps called Orange Snapshot. "We realized two years ago — which is a long time in the mobile world — that people were using mobile devices very differently from being seated in front of their screen at work or on their computer at home," Kithulegoda says. "They're using this on the move."

Using the Snapshot feature, customers who have opted in and registered their device can check balances and make email money transfers and bill payments without logging in.

"We focus on making things simple, especially on mobile devices," he says. "We're a strong believer that it's not about content, it's about context, and it's not about the transaction but the experience. How to make the experience simple and relevant on a mobile device, is the biggest challenge of people who get this right."

To add another security layer to its mobile banking apps, ING is piloting facial and voice recognition technology from CSC with a small number of employees and customers. This would complete the traditional security trifecta: something you have (the mobile device), something you know (a PIN), and something you are (your face or your voice). Somewhere you are — geolocation — may come later.

"We're learning that with biometrics, the technology is a big thing, but making it simple and seamless to use is bigger," Kithulegoda says. "Everybody wants top security, but nobody wants to go through the hassle of going through extra steps. They still want it to be simple. We see this as an opportunity to bridge those two conflicting demands."

He couldn't share recognition rates, but Kithulegoda says the voice and facial recognition technology has been "extremely accurate and extremely impressive. For people to use these things, it has to make sense and it has to be simple. The coolness wears off quickly." ING hopes to roll out voice and facial recognition for authentication by the end of the year.

ING is also piloting voice recognition for transactional banking, so that a customer who is driving, for instance, can hear options and answer verbally rather than risk lives by looking at a mobile screen. The bank hopes to launch this, too, by year's end.

The bank recently became the first to offer mobile deposit capture in Canada. And it is testing video chat, starting with Skype, to ease the onboarding process for customers.

IBM consultants assist ING with its mobile and social media initiatives. The bank also uses IBM's Websphere application server and Rational application delivery platform. ING built its own mobile banking framework based on such IBM technology.

"About two years ago, we looked at tools like Worklight and Kony," he says. "We decided that to be competitive and agile, given type of organization we are, these tools were not for us. We built a simple, agile framework that we can leverage and re-use and go to market very quickly." This is why the bank was able to launch apps for the BlackBerry 10 in six weeks. The app has had several thousand downloads so far, he says.

For reprint and licensing requests for this article, click here.
Bank technology
MORE FROM AMERICAN BANKER