Sunday World (South Africa)

- Staff Reporter

TELECOMMS company MTN has has gone on an all-out drive to put systems in place in a bid to improve security.

This follows reports from customers who had complained about losing money from their bank accounts.

The mobile phone company said it constantly reassessed the applicabil­ity of security controls.

It said new and different controls were developed and implemente­d if existing measures were breached.

But, as with any security and control system, those measures remained under threat from individual­s who explored ways of defeating it.

The company said the process of tightening its security was endless, citing criminals always finding ways to improve their fraudulent methods as a reason.

Since 2009, the company has implemente­d and made available to the banking environmen­t a feature called Subscriber Identity for Third Parties (Sift).

It gives banks real-time alerts on Sim card changes.

The company’s view is that if implemente­d by a bank, Sift (available to the banking sector at a nominal cost) would mitigate fraud risk. MTN hoped the solution, now zero-rated, would be widely used by the banking industry to address the challenges it faced.

It also implemente­d other security interventi­ons for the Sim-swap process. These measures include improved Sim swap verificati­on and a double opt-in to activate the Sim swap, giving control to customers.

Another solution within the Simswap verificati­on process introduced was a one-hour SMS notificati­on, to ensure the legitimate customer had time to confirm the request.

The company said it was investigat­ing a solution that would allow customers to be contacted on a secondary number or an e-mail address to verify their Sim card swaps.

But this would be dependent on customers giving the company such details. If successful, the Sim swap would be activated only after the customer had given consent via an alternate contact detail.

MTN urged customers to safeguard their internet and telephone banking log-in details against social engineerin­g (phishing) schemes to safeguard their accounts.

Where fraudulent activity had taken place, the company was working with the South African Police Services and the South African Banking Risk Informatio­n Centre to help in investigat­ion so perpetrato­rs could be brought to book.

 ??  ??
 ??  ??

Newspapers in English

Newspapers from South Africa