As fraudsters get smarter, our defense must be faster, smarter, and more unified than ever.
The MEF CONNECTS Anti-Fraud event held on September 10, 2024 in Brussels, brought together industry leaders, fraud prevention experts, and key stakeholders to discuss the ever-evolving landscape of digital fraud. With fraudsters deploying increasingly complex and deceptive techniques, the event underscored the urgent need for an integrated, cross-border approach to combating fraud.
Hosted by the Mobile Ecosystem Forum, the event covered a wide range of topics, from biometric fraud and RCS authentication challenges to the role of artificial intelligence in future fraud prevention efforts. Here’s a look at some of the key takeaways from the event.
Fraud Tactics are Becoming More Sophisticated and Diverse
One of the clearest messages from the event is that fraudsters are no longer relying on a single method or platform to carry out their attacks. Instead, they are employing a wide array of techniques across different channels, often using legitimate tools to deceive victims.
Biometric attacks are on the rise, with criminals using deepfake technology and digital video injection to impersonate individuals. As shared by Andrew Bud from Iproov, these attacks will soon be undetectable, making video-based authentication methods vulnerable.
Fraudsters are also exploiting everyday security features, such as password resets, to build credibility with their victims. A notable example involved criminals tricking users into thinking they were receiving an SMS from a legitimate bank, using a password reset feature to verify their identity.
The takeaway here is clear: as fraudsters evolve so must our defensive strategies. This includes developing more robust systems to detect increasingly sophisticated attacks.
Cross-Border and Cross-Industry Collaboration is Essential
Fraud knows no borders, and neither should fraud prevention efforts. A consistent theme throughout the event was the need for collaboration across industries and regions to better understand and combat fraud.
Several panelists emphasized the importance of sharing threat intelligence across organizations and borders, especially given the global nature of fraud networks. From the telecom sector to financial services, every industry is impacted, and working in silos is no longer an option.
Collaboration was identified as crucial, particularly in combating fraud in the RCS and rich business messaging space, where onboarding processes are being tightened to deter bad actors. Yet, maintaining a balance between security and usability for enterprises remains a significant challenge.
Artificially Inflated Traffic (AIT) is a Growing Concern
A pressing issue that emerged from the discussions was AIT, where rogue actors inflate message traffic for financial gain. AIT has become a serious problem, driven by the substantial revenue opportunities it presents for fraudsters. The industry is struggling with exclusive contracts and termination fees that feed this fraudulent activity.
Panelists, including Katia Gonzalez from BICS, expressed frustration over the lack of industry-wide action. While companies like Sinch are renegotiating contracts and refusing to pay termination fees associated with AIT, this approach is expensive and time-consuming. However, it may be one of the few effective methods to combat this issue. The industry must address AIT before it undermines credibility in billing and settlement across networks.
The Balancing Act Between RCS Growth and Fraud Mitigation
As RCS and rich business messaging channels expand, so does the challenge of authenticating enterprises in a way that deters bad actors while maintaining simplicity for legitimate businesses. With hundreds of millions of enterprises – many of which have never had a digital presence – entering the ecosystem, proper verification is essential. For RCS to gain credibility as a trusted business messaging solution, brands must undergo a rigorous authentication process. This includes verifying their identity, attaching their logo, and providing a ‘blue tick’ equivalent to ensure message recipients can trust that the communication is genuinely from that brand.
This agent verification process, which must be done manually for each business, was a key discussion point. Too much friction in onboarding risks alienating legitimate enterprises, while too little creates vulnerabilities for fraudsters. Panelists emphasized improvements like collaborations between Google, MNOs, and regulators to streamline and secure brand authentication. However, as more enterprises enter digital channels, maintaining this balance will remain a significant challenge. Innovative solutions like Know Your Brand (KYB) technologies are being explored to make authentication faster and more secure, without compromising the user experience.
Technology is Crucial, but it’s Not Enough
The role of AI and machine learning in fraud detection continues to grow, but the event highlighted that technology alone cannot solve the problem. While AI can help identify anomalies and patterns in real time, it requires human oversight and industry collaboration to truly be effective. Fraudsters are quick to exploit any gaps, and the use of automated systems needs to be complemented by broader, integrated efforts across the ecosystem.
Practical approaches were also discussed, such as refusing to pay rogue actors in delivery chains and renegotiating contracts to prevent fraud. These strategies are expensive but could offer more immediate relief than solely relying on emerging technologies.
Regulation and Policy Will Shape the Future of Fraud Prevention
Governments are increasingly taking a proactive role in fraud prevention, as highlighted by the UK’s recent introduction of a comprehensive reimbursement policy for victims of Authorized Push Payment (APP) scams. Under this policy, telecom operators may be held responsible for helping to curb fraud, given that many scams originate through telecom channels like SMS or robocalls. In fact, the Payment Systems Regulator (PSR) in the UK has confirmed that telcos could be brought into the reimbursement process, potentially sharing the financial burden with payment service providers to incentivize stronger fraud prevention controls.
Similarly, in the United States, regulators are exploring comparable legislation, with law enforcement officials, such as Matthew Noyes from the US Secret Service, acknowledging the role of telecoms in the fraud ecosystem. These developments signal a significant shift towards holding industries accountable for the fraud facilitated through their networks. It was highlighted that while significant challenges remain, there are encouraging signs that money is being recovered and fraudsters are facing consequences. As regulations evolve, particularly with initiatives like EU eIDAS for digital identity, the role of government in fraud prevention will only increase.
Conclusion: The Battle Against Fraud is Far From Over
The event concluded that fraud prevention is going to be an on-going battle. New technologies will bring new opportunities for criminals, and the industry must remain vigilant. However, the progress being made—through cross-sector collaboration, technological advancements, brand verification and evolving regulations—offers hope that the industry can stay one step ahead.
It’s clear that the MEF CONNECTS Anti-Fraud event is vital for aligning stakeholders across sectors and geographies. With fraud tactics growing more sophisticated, events like this are essential to ensure that industries are coordinated in their efforts to protect consumers, enterprises, and communications networks.
To learn more about the topics covered in this article, or to discuss how Openmind Networks can help you protect your network from messaging fraud, please get in touch or contact our team of messaging experts online here.
