Authentication

Payments will melt into the wider commerce experience and create new incremental value for consumers, according to Brendan Miller, a principal analyst at Forrester.

Many companies no longer rely on static passwords alone, and use two-factor authentication to protect consumer accounts. The problem is they're using the same second factor: text messages sent to mobile devices.

Employees are typically a company’s first line of defense when it comes to most threats. As such, it is important to train them on how to identify cloud cryptojacking attacks, according to Anurag Kahol, CTO of Bitglass.

Visa, Mountain America Credit Union and Fingerprints AB were thrilled with their biometric card test, but also faced the grim realization that real world infrastructure may not be as accommodating.

This European regulation means fraud detection will inevitably need to evolve as the fraudsters find new ways to exploit new loopholes, according to Catherine Tong, vice president and general manager for Accertify.

By combining different types of structured and unstructured online data with the traditional offline data and applying data science to it, we can much more reliably discern whether a person's identity is real, according to Sunil Madhu, founder and chief strategy officer of Socure.

The World Wide Web Consortium (W3C) is sending a message to the payments industry that it might not be wise to wait on the card networks to solve the growing problem of mobile and online payments fraud.

Multifactor authentication is table stakes in today's breach-heavy environment. Falling short of that standard creates a dangerously high threat, according to David Vergara, head of security product marketing for OneSpan.

All service providers, even those with a strong security posture, are only as secure as the Home Depots, LinkedIns and Equifaxes of the world, argues George Avetisov, chief executive of HYPR.

By intelligently applying friction, where the entry of a PIN or a swipe of the screen can be used to correlate against known data, we can better prove that the correct user made the transaction and avoid the costs and disruption associated with fraud and disputed claims, writes Zia Hayat, CEO of Callsign.

Once companies can recognize their customers without constantly asking security questions, they can shower them with benefits to enhance the shopping experience while bolstering their brand, writes Robert Capps, vice president at NuData Security, a Mastercard company.

From regulations such as GDPR and PSD2 to conversations at major conferences, financial services and payment companies are coming to grips with how vital it is to step up ID protection, according to Lina Andolf-Orup, global product marketing manager at Fingerprints.

The Dixons Carphone hack shows again that merchants and payment companies need to do more to make data unattractive to thieves, according to Robert Capps, vice president of NuData Security, a Mastercard Company.

There is a growing fraud problem encompassing much more than the direct value of lost merchandise. There is also manual order review, opportunity costs from false positives and the massive overhead of implementing fraud-fighting best practices, writes Ryan Breslow, CEO of Bolt.

Unless near zero-friction identity security is embraced, connected devices cannot be used for payments in a substantial way, according to Xavier Larduinat, manager for innovation at Gemalto.

The recent outcry over government use of Amazon's facial recognition software will force TD Bank, USAA and others to confront flaws in the technology that make it harder for women and minorities than white men to use mobile banking.

A multilayered approach that allows one type of fraud tool to pick up the slack when another layer fails, according to Robert Capps, a vice president at NuData Security.

With new data breaches becoming public on an almost routine basis, it’s no surprise that our findings revealed that consumers are starting to favor safety over speed and ease of checkout, writes Joseph Daly, COO of Paysafe Payment Processing in North America.

WebAuthn could eventually mean passwords are replaced with fingerprints and facial recognition. But how hard will it be to implement?