Singapore to remove One-Time Passwords from Bank Accounts
By MYBRANDBOOK
According to the Monetary Authority of Singapore, clients who utilise secure digital tokens for identity authentication would no longer need to provide a one-time password to access their bank accounts for the next three months. It is highly recommended that online banking users activate digital tokens for their banking accounts so that they can access their bank accounts via a web browser or mobile app without having to rely on automatically generated, one-time passwords.
The announcement followed the Singapore Police issuing a warning about the reemergence of phishing scams that involved scammers impersonating banks to make victims divulge their banking account usernames, passwords and one-time passwords. In December, scammers defrauded 103 people in Singapore out of at least S$161,000.
The problem appears to be growing. In the first two weeks of January, scammers defrauded 219 people out of at least S$446,000. Many of these attacks involved scammers impersonating banks in SMS messages in which they directed users to click on links to verify their identities or cancel phony transactions.
President of Singapore Tharman Shanmugaratnam, who served as the chairman of the Monetary Authority of Singapore till July 2023, told Parliament shortly before stepping down from the post last year that the financial authority would set a deadline for phasing out one-time passwords as a sole authentication factor for high-risk transactions.
He said Singapore banks had already started phasing out SMS-based authentication for banking activities such as adding payees or changing fund transfer limits. Shanmugaratnam, however, ruled out giving banking users the option to opt out of SMS OTPs, warning that such a move could dilute banks' multilayered security for protecting customers.
The monetary authority in its announcement said that unlike one-time passwords, scammers cannot phish for customers' digital tokens by setting up fake bank websites, nor can they access a bank account or funds without the customer's explicit authorization.
Home Ministry cracks down on PoS agents in digital arrest scam
Digital arrest scams are a growing cybercrime where victims are coerced or ...
ISM and Tata sign Fiscal Support Agreement for chip fab
India Semiconductor Mission (ISM), Tata Electronics Pvt Ltd (TEPL)...
New Malware StilachiRAT Targets Credentials and Crypto Wallets
With increasing reliance on digital assets, malicious actors continue to...
Microsoft set to unveil Xbox handheld console, new Xbox series
Insiders suggest the device will feature a hybrid system, combining Xbox OS...
ICONS OF INDIA : SANJAY NAYAR
Sanjay Nayar is a senior finance professional in the Indian private in...
Icons Of India : Anil Kumar Lahoti
Anil Kumar Lahoti, Chairman, Telecom Regulatory Authority of India (TR...
Icons Of India : Harsh Jain
Harsh Jain, the co-founder of Dream 11, the largest fantasy sports web...
EESL - Energy Efficiency Services Limited Â
EESL is uniquely positioned in India’s energy sector to address ener...
C-DAC - Centre for Development of Advanced Computing Â
C-DAC is uniquely positioned in the field of advanced computing...
CERT-IN - Indian Computer Emergency Response Team
CERT-In is a national nodal agency for responding to computer security...
Indian Tech Talent Excelling The Tech World - George Kurian, CEO, Netapp
George Kurian, the CEO of global data storage and management services ...
Indian Tech Talent Excelling The Tech World - Aneel Bhusri, CEO, Workday
Aneel Bhusri, Co-Founder and Executive Chair at Workday, has been a le...
Indian Tech Talent Excelling The Tech World - REVATHI ADVAITHI, CEO- Flex
Revathi Advaithi, the CEO of Flex, is a dynamic leader driving growth ...