Kathleen Peters, Chief Innovation Officer, Decision Analytics for Experian, was recently featured on the Eliances Heroes podcast as part of the new weekly segment, the “Experian Identity Report.” In the introductory show, podcast host David Cogan, spoke with Kathleen about why identity is so important to our society. Listen to the podcast for the full discussion and see the transcript below. Learn more about Experian Identity David Cogan: How critical is it? Well, I’ll tell you. Payment fraud will exceed $206 billion in the next five years and let’s face it. Managing one’s personal identity is very complicated on its own and if the business enterprise managing customer identities in a strategic and secure way and scale across countless interaction is extremely complicated. And it’s only going to get more complex with the future from what I understand and all the technology that’s coming out if not by the day, by the hour. And that’s why we’re bringing this to you. Interviews with the world’s leading experts on the game changing impact of identity and the need to use reliable data to make confident decisions that securely accelerate customer engagement and that’s why we’re honored here today to have with us Kathleen Peters, Chief Innovation Officer, Experian Decision Analytics North America. Kathleen Peters: Thanks so much David, it’s great to be here with you. DC: $206 billion of payment fraud in the next five years? I mean who’s going to want to turn on their computer after this. That is a serious number. What do we do? KP: It’s really important that we get our arms around this both as consumers as well as businesses because we want to engage online. So much of what we’re doing is digital. It especially started in COVID when we were having our groceries delivered and everything else and even our grandparents are having to do their banking transactions online. The world is changing, and fraudsters take notice of that as well. Fraudsters are opportunistic and when they see a bunch of folks doing stuff online that they’ve never done before, they’re seeing that as an opportunity too. DC: You know the days of people horseback riding and overtaking trains are long gone and now it’s all digital. KP: It’s a lot easier these days. DC: Why is identity so important to our daily digital lives and in business? KP: It’s a great question, David. And as a consumer myself, you, and I when we transact online whether that’s to have food delivered, or I’m buying something for my kids or I’m even paying a bill, I want to be able to trust that my information will be safe, that my privacy will be protected and that my experience will be as smooth as possible. I think that’s what we all want. So as consumers and as businesses, how do we enable all the opportunities this new digital world is presenting to us in a way that we are safe and also businesses can transact with us securely and have confidence on who’s engaging with them online. DC: Let’s talk about identity. What really makes identity so challenging to manage at a business enterprise level especially with how complex the business portion is? KP: Absolutely. It really comes down to there are so many elements that comprise our identity. It’s multidimensional. So historically, when we think about identity, we probably think about the things that were on our DL or passport the kind of information that’s pretty static – name, address, SSN, date of birth – those kinds of things. Once we get online, that identity becomes a little more challenging. We’re not necessarily physically in front of the business that we’re engaging with so the business needs to determine if the person is who we say we are. There’s a famous Far Side comic from years ago where a dog is sitting in front of the computer and he says “On the internet, no one knows you’re a dog.” And that still rings true in that you need to be able to ensure that the customer that’s coming to your business online is a real person and not a bot, is a person with good intent and not a fraudster. You need to look no farther than some of the recent controversies around Twitter and Elon Musk’s on-again, off-again, on-again intent to buy the company. A few months ago he had pulled back because he wanted to know definitively how many users on Twitter are humans versus bots and sometimes determining that can be really hard. And that comes down to managing all these new definitions of identity. DC: That’s very important. The thing is businesses and consumers want to know really what to be able to do. So, what kinds of things is Experian able to offer to help with all of that? KP: We’re in a great position as Experian because we have such a depth and breadth of identity data. We have the analytics horsepower and really touchpoints that are really unique when it comes to thinking about identity. So we’ve been talking about these traditional identity elements and digital, online identity. When you think about it, Experian also really understands your financial identity. So when you bring those things together and a consumer is looking to maybe understand what their financial identity means, their credit score or even how to improve their credit score, Experian’s there. We’ve got a robust direct to consumer business, we’ve got offerings like Boost and Go that help people establish and build their credit. We’ve got marketplaces for cards, insurance, etc. And then when consumers want to open a new account at a financial institution, or a fintech, or a retailer, or even maybe buy some crypto or log into a business, Experian can bring that wealth of capability to help our clients, help businesses, separate those good consumers with good intent from the fraudsters and do that very quickly and efficiently so that consumers can have a great experience and build that trust with who they’re engaging with. DC: Kathleen, that’s really amazing. Alright, now with all of that going on, what is Experian doing now with innovating for the identity space? KP: This is a real passion of mine David and this is where I spend a lot of my time. We’re always looking ahead to see what is the new data, new capabilities that can help us improve that consumer experience and engagement, help clients find the right consumers online to engage and target, and really allow our clients to grow their businesses safely. So, we’re building some products in house, where we’re connecting new pieces that might be new to Experian like linking some of that traditional identity data with particular payment instruments. Is this Kathleen’s credit card? Is this my bank account? When I come and try to do transactions online. But we’re also partnering with new companies. There are a number of startups that are being formed that have been in business looking at new ways to stop fraud and new ways to help identify and authenticate users online. So, as we innovate, we’re building some things in house, we’re partnering, we’re investing in young companies, and sometimes we’re even acquiring. So, bringing together that breadth of data, analytics, really trying to think about what will be the next way that we’ll think about identifying ourselves online is some of the ways we’re innovating. DC: Well, we’re very fortunate to have you and your company here to be able to do that because it’s growing by leaps and bounds. I’m amazed by the number $206 billion which is probably going to go higher, so we’re very fortunate that Experian is around and really identifying this issue and trying to do something now. What do you think our audience will learn about these weekly, critical chats about identity with Experian experts? KP: These are going to be great conversations that we’re going to be able to share and talk about how rapidly things are changing and evolving and how this really relates to our daily lives and the things that are going on in this very dynamic economic climate, digital climate, the way things are changing the way we’re engaging. I think people are also going to learn a lot about Experian’s mission around financial inclusion and opportunity creation. We’re a very mission driven company and we’re the consumer’s bureau, so we want to do this journey in partnership with consumers so that you can take an active part in protecting yourself, understanding what’s going on, helping us fight fraud, but also just really be able to take advantage of all of these new opportunities in a safe way.
Reports of romance scams have spiked in the past two years, partly due to the rise in popularity of online dating and social apps while Americans were isolated at home. With more consumers looking for love online, fraudsters have jumped on the chance to build intimate, trusted relationships without the immediate pressure to meet in person. And these shams seemingly paid off: from January 1 to July 31, 2021, the Federal Bureau of Investigation (FBI) Internet Crime Complaint Center received over 1,800 complaints related to an online romance scam, resulting in losses of approximately $133 million. These romance scams carry financial and security risks that impact both the targets of the fraud and the businesses with which they interact. Experian predicts that romance scams will continue to rise in 2022, leaving consumers and businesses vulnerable to attacks and theft. What is a romance scam? According to the FBI, a romance scam occurs when “a criminal adopts a fake online identity to gain a victim's affection and trust." Typically, fraudsters seek out their marks in dating or socializing settings, such as online apps, and strive to build intimacy and trust as quickly as possible. To avoid suspicion, they may claim that they travel frequently for work or give other excuses about why they can't meet in person. Their attentions are in the context of love and dating, so it's not uncommon for romance scammers to offer marriage proposals or other commitments to intensify the relationship, but the whole point of this fraud is to get their targets to send money. Sometimes fraudsters simply ask for a “loan" to cover medical expenses, an unforeseen shortfall or even travel costs to see the victim in person. Other times, they might ask for gifts or gift cards. Requests for money – whether through direct deposit, gift cards or credit card payments – are all red flags. Increasingly, romance scammers have tried to lure people into investment deals, including cryptocurrency. Romance scams predate the internet by centuries, but the emergence of digital technologies has made them easier to accomplish – and easier to get away with, too. Romance scams are increasing In 2020, there were around 44 million users of online dating services in the United States and this increased to 49 million users in 2021, according to Statista Research Department. By 2022, two years into the COVID-19 pandemic, that number jumped to more than 50 million, and it's projected to rise to 53.3 million by 2025. More users mean more potential targets. According to the Federal Trade Commission (FTC), romance scams hit a record high in 2021, with consumers reporting $547 million in losses that year – up 80 percent from 2020. The median individual loss reported to the FTC from romance scams was $2,400. With the help of modern technologies, romance scammers have added new tactics to their grift. For example, in addition to usual requests for money, a target might be asked to participate in bogus investment schemes involving cryptocurrency. In these cases, the median loss was $10,000. According to the FTC, romance scammers have conned Americans out of an estimated $1.3 billion over the past five years. Worryingly, romance scams also present a serious data risk. Damage could spread beyond financial losses into even more hazardous territory if the scammer can gain access to a target's personally identifiable information (PII) or financial data. In these cases, fraudsters might engage in identity theft to create new accounts or take over existing ones. Breaking up with romance scammers Businesses may not be susceptible to the lure of love, but they're still vulnerable when it comes to the fallout from romance scams. Companies must ensure they have a layered solution that seamlessly recognizes returning customers, while monitoring for indicators that the user presenting an identity is not actually the owner of that identity. Some warning signs include logins from a new IP address nowhere near the user's registered physical address; unusual types or frequencies of transactions; and the addition of a suspicious new authorized user to a credit card account. Businesses also have access to fraud prevention help. Using vast data resources, decades of identity and credit risk management, consumer-permissioned data and industry-leading analytics, Experian enables businesses to detect and prevent fraud by identifying credible customers. This empowers businesses to apply the appropriate amount of friction to each interaction to protect their customers, their data and themselves. To learn more about how Experian is assisting businesses with their fraud prevention efforts, visit us or request a call. And keep an eye out for additional in-depth explorations of our Future of Fraud Forecast. Future of Fraud Forecast Fraud Prevention
Across all levels of government, we are seeing a surge in digital modernization — transforming the delivery of traditional services into a contactless, digital environment. Whether it is with the Social Security Administration’s digital modernization effort, the state of California’s Vision 2023, or even at the local level with counties modernizing digital access to records for their citizens. This comes at a time when identity fraud in government services is growing at an alarming rate, with an increase of over 2,900 percent related to government benefits or document fraud in 2020 according to the FTC. A key challenge for any agency planning digital modernization is balancing access with security. This is particularly critical in an environment where over 1 billion records were exposed over a recent five-year span. Given the U.S. population is currently about 330 million, that means each citizen had an average of three breach exposures. Therefore, identity proofing must be a critical part of any agency modernization effort. National Institute of Standards and Technology Special Publication (NIST SP) 800-63 revision 3 lays out a risk assessment to help organizations determine the appropriate level of security to apply based on six areas of impact. However, identity proofing a new citizen through digital channels requires significant friction at levels above Identity Assurance Level 1 (IAL1). The stringent requirement for a biometric match in this standard at IAL2 presents a real challenge to the balance mentioned above, which has led agencies to seek alternatives that both combat the risk of fraud and identity theft and are operationally sound. Experian has been supporting the private sector in this endeavor for years, helping them effectively manage identity theft and fraud concerns while allowing seamless access to services for the vast majority of their consumers. This risk-based approach through our CrossCore® platform and multitude of options to identify and combat fraud allows agencies to deliver the security and accessibility expected by their citizens. CrossCore allows agencies to verify and identify citizens using multiple data points: Traditional personally identifiable information (name, address, Social Security number, date of birth) Email Phone number Device identification Biometrics CrossCore can instantly take the risk information from these risk signals above and initiate additional verification where there is a higher risk of identity theft or fraud, including knowledge-based verification (KBV), one-time passcode (OTP) to a trusted phone number linked to the identity being presented, or even remotely verifying identity documents (e.g., driver’s license, passport, etc.) through our new CrossCore Doc Capture solution. Just recently, Experian helped a state lottery agency implement an efficient identity proofing system to enable digital redemption of winning tickets, saving both the government and the citizens time and money. Experian’s identity, verification, and fraud solutions can help government agencies of all sizes on their journey to digital modernization. To learn more about the options available to your agency, visit us or request a call. CrossCore Doc Capture
Experian recently announced Experian Identity and published an advertorial in American Banker outlining the integrated approach to identity that recognizes the full breadth of the company’s authoritative data solutions that help businesses better connect with their consumers in more personalized, meaningful and secure ways. The efforts address the rapidly changing definition and landscape of identity and take on the importance and needs for identity which span across the entire customer journey. From marketing to a specific consumer’s needs, to facilitating a friction-right customer experience, to protecting personal information. As such, there’s a gap for single-partner providers to help businesses navigate this change, while also putting the needs of the consumer first. “Identity data sets are constantly growing with inputs from new interactions. Many future sources of data have yet to be even conceived or developed,” said Kathleen Peters, Chief Innovation Officer, Experian Decision Analytics. “Staying ahead of the identity market curve is vital, and it requires building and continually evolving an enterprise-scale identity solution that interconnects with your own unique data and systems to create attribute-rich profiles of your customers that work across any identity application. That’s Experian Identity.” Experian Identity underscores the need businesses have to respond to increasing identity needs with interconnected, scalable technology, products and services that optimize the consumer experience. While the integrated approach announcement is new, the capability is not. Experian has been trusted for decades to secure individuals’ identity around the most important decisions in their lives – think purchasing a car or home, being identified at the doctor’s office, and more. As such, consumers remain at the center of every action. Experian Identity offers identity resolution, verification, authentication and protection, and fraud management solutions that include first- and third-party fraud, account takeover, credit card verification, identity resolution and restoration, risk-based authentication, synthetic identity protection and more. Additionally, we’ve included a special blog post introducing Experian’s identity capabilities from Kathleen Peters on the Experian Global News Blog and additional coverage. Stay tuned for more updates. Experian Global News Blog - Making Identities Personal: Experian Helps Businesses Build Consumer Trust American Banker – Making Identities Personal: Building Trust and Differentiating Your Brand Experian White Paper - Making Identities Personal For more information about Experian Identity, visit www.experian.com/identity-solutions.
Rewards are among the most appealing features of any credit card. While upfront benefits, like sign-up bonuses and cashback, are most influential in card acquisition, ancillary benefits, like fraud and identity protection, can amplify a card’s overall value.1 Credit card fraud ranked as the second most common form of identity theft in 2021,2 and is expected to become even more frequent as consumers continue to bank and shop online.3 42% of consumers are concerned for the safety of their banking and shopping transactions. With digital identity theft and fraud on the rise, it’s no surprise that safety measures are “very” or “extremely” important to consumers when deciding between different credit cards.4 In response, many card issuers have started to market their security and protection-related benefits more frequently to better capitalize on their cards’ value to consumers. The ways they’ve highlighted these benefits include: A fraud protection campaign From spotlighting their fraud protection benefits in card welcome kits to providing privacy tips on social media, credit card issuers have crafted compelling campaigns to demonstrate their commitment to protecting their customers from fraud and identity theft. In turn, issuers can differentiate their cards from the competition and improve response rates. Reminders about their fraud prevention efforts Issuers have also sent out ongoing reminders outlining the protections their credit cards offer, such as credit monitoring services 5 that notify cardholders of suspicious activity on their credit report. By consistently promoting their efforts to keep their customers’ accounts and data safe, issuers can earn their cardholders’ trust, build loyalty and drive card usage. While benefits like cashback and travel points can help with card acquisition, fraud and identity protection benefits can help drive long-term customer relationships, especially now that card fraud is becoming a growing concern.6 To learn more about how businesses have worked to meet the consumer demand for secure interactions, check out our 2021 Global Identity and Fraud Report. Learn more 1Jonathan O'Connor. "Most Consumers Aren't Aware of Their Credit Cards' Ancillary Benefits. How Does This Impact Card Acquisition and Usage?" TSYS, January 2019 2FTC. "Consumer Sentinel Network" Data Book, 2021 3April Berthene. "Coronavirus pandemic adds $219 billion to US ecommerce sales in 2020-2021" Digital Commerce 360, March 2022 4"Consumers Consider as Many as Six Factors When Choosing Credit Card" PYMTS.com, December 2021 5David McMillin. "Identity theft is a major problem, but these 5 credit card protection programs can help keep you safe" Business Insider, June 2021 6"New FICO Survey Finds Overconfidence Could Put US Consumers at Risk From Scams" Business Wire, February 2022
Experian’s Sure Profile was selected as a Platinum winner in the “Fraud and Security Innovation” category in the sixth annual Fintech & Payments awards from Juniper Research, a firm dedicated to delivering thought leadership and analysis in the Fintech and Payment industries. An innovative service in the fight against synthetic identity fraud, Sure Profile is a comprehensive credit profile that provides a composite history of a consumer’s identification, public record, and credit information in order to detect synthetic identities. It utilizes premium data to help businesses identify potential synthetic fraud threats across credit inquiries, thus allowing lenders to transact more confidently with the vast majority of legitimate consumers. “Experian has always been a leader in delivering innovative services that both combat fraud and provide identity verification and trust to lending environments. Sure Profile delivers an industry-first fraud offering—integrated directly into the credit profile—that mitigates lender losses while protecting millions of legitimate consumers’ identities,” said Keir Breitenfeld, Senior Vice President, Portfolio Marketing, Experian Decision Analytics. “In times of rapid changes to customer interactions, growth strategies, and risk management practices, it’s particularly important to focus on building tools that can help businesses make better decisions and I’m proud that Experian has again provided an instrument to enable those decisions.” To learn more about Sure Profile and how Experian is working to solve this multibillion-dollar problem, visit us or request a call. Learn more
The Telephone Consumer Protection Act (TCPA), which regulates telemarketing calls, autodialed calls, prerecorded calls, text messages and unsolicited faxes, was originally passed in 1991. Since that time, there have been many rulings and updates that impact businesses’ ability to maintain TCPA compliance. Recent TCPA Changes On December 30, 2020, the Federal Communications Commission (FCC) updated a number of TCPA exemptions, adding call limits and opt-out requirements, and codifying exemptions for calls to residential lines. These changes, along with other industry changes, have added additional layers of complication to keeping compliant while still optimizing operations and the consumer experience. Maintaining TCPA Compliance Businesses who do not maintain TCPA compliance could be subject to a lawsuit and paying out damages, and potential hits to their reputation. With the right partner in place, businesses can maintain data hygiene and accuracy to increase right-party contact (and reduce wrong-party contact) to keep collections streamlined and improve the customer experience. Using the right technology in place, it’s easier to: Monitor and verify consumer contact information for a better customer experience while remaining compliant. Receive and monitor daily notifications about changes in phone ownership information. Maintain compliance with Regulation F by leveraging a complete and accurate database of consumer information. When searching for a partner, be sure to look for one who offers data scrubbing, phone type indicators, phone number scoring, phone number identity verification, ownership change monitoring, and who has direct access to phone carriers. To learn more about how the right technology can help your business maintain TCPA compliance, visit us or request a call. Learn more
Over the past year and a half, the development of digital identity has shifted the ways businesses interact with consumers. Companies across every industry have incorporated digital services, biometrics, and other verification tools to enhance the consumer experience without increasing risk. Changing consumer expectations A digital identity strategy is no longer a nice-to-have, it’s table stakes. Consumers expect to be recognized across platforms and have a seamless experience every time. 89% of consumers use mobile banking 80% of companies now have a customer recognition strategy in place 55% of banking customers say they plan to visit the bank branch less often moving forward Businesses are responding to these changing expectations while working to grow during the economic recovery – trying to balance consumer experience with risk appetite and bottom-line goals. The present state of digital identity Digital identity strategies require both standardization and interoperability. The first provides the ability to consistently capture data and characteristics that can be used to recognize a specific individual. The second allows businesses to resolve an identity to a specific person – recognizing a phone number, user ID and password, or a device – and use that information to determine if the user of the identity is in fact the identity owner. There are some roadblocks on the road to a seamless digital identity strategy. Issues include a lack of consumer trust and an ambiguous regulatory landscape – creating friction on both ends of the equation. Recipe for success To succeed, businesses need a framework that can reliably use different combinations of physical and digital identity data to determine that the person behind the identity is a known, verified, and unique individual. A one-size-fits-all solution doesn’t exist. However, a layered approach allows businesses to modernize identity, providing the services consumers want and expect while remaining agile in an ever-changing environment. In our newest white paper, developed in partnership with One World Identity, we explore the obstacles hindering digital identity management, and the best way to build a layered solution that is flexible, trustworthy, and inclusive. To learn more, download our “Capturing the Digital Evolution Through a Layered Approach” white paper. Download white paper
Recently, I wrote about how Experian is assisting NASWA (National Association of State Workforce Agencies) with identity verification to help mitigate the spike in fraudulent unemployment insurance claims. Because of this I was not all that surprised when I found a letter in my mailbox from the Texas Workforce Commission with a fraudulent claim using my identity, inspiring me to follow up on this topic with a focus on fraud prevention best practices. Identity theft is on the rise According to Experian data analysis and a recent study on unemployment insurance fraud, at least 25% of new claims are a result of identity theft. This is 50 times higher than what we have traditionally seen in the highest ID theft fraud use case, new credit card applications, which generally amounts to less than 0.5% of new applications. Increasing digitization of the last few years—culminating in the huge leap forward in 2020—has resulted in a massive amount of information available online. Of that information, a reported 1.03 billion records were exposed between 2016 and 2020. There are currently approximately 330 million Americans, so on average more than three records per person have been exposed, creating an environment ripe for identity theft. In fact, a complete identity consisting of name, address, date of birth, and Social Security number (SSN) can be purchased for as little as $8. This stolen data is then often leveraged by both criminal rings who are able to perpetrate fraud on a large scale and smaller scale opportunists – like the ones in Riverside, CA leveraging access to identities of prison inmates. Fraud prevention through layered identity controls In the 20 years that I have been combatting ID theft both in the private and public sectors, I’ve learned that the most effective identity proofing goes beyond traditional identity resolution, validation, and verification. To be successful, you must take advantage of all available data and incorporate it into a layered and risk-based approach that utilizes device details, user behavior, biometrics, and more. Below, I outline three key layers to design an effective process for ID proofing new unemployment insurance claims. Layer 1: Resolve and Validate Identities Traditional identity data consists of the same basic information—name, address, date of birth, telephone number, and SSN—which is now readily available to fraudsters. These have been the foundation for ID proofing in the past and are still critical to resolving the identity in question. The key is to also include additional identity elements like email address and phone number to gain a more holistic view of the applicant. Layer 2: Assess Fraud Risk Determining an identity belongs to a real-life subject is not sufficient to mitigate the risk of ID theft associated with a new unemployment insurance claim. You must go beyond identity validation to assess the risk associated with their claim. Risk assessment risk falls into two categories – identity and digital risk. Identity Risk When assessing a claim, it’s important to check the identity for: Velocity: How often have you (or other states) seen the information being presented with this application? Has the information been associated with multiple identities? Recency of change: How long has the identity been associated with the contact information (phone, email, address, etc.)? Red flags: Has the subject been a recent victim of ID theft, or are they reported as deceased? Synthetic Identity: Are there signs that the identity itself is fictitious or manipulated and does not belong to a real-life person? Digital Risk Similar to the identity risk layer above, the device itself and how the subject interacts with the device are significantly important in identifying the likelihood a new claim is fraudulent. Device risk can be assessed by utilizing geolocation and checking for inconsistent settings or high-risk browsers, while behavioral risk might check for mouse movement, typing speed, or screen pressure. Layer 3: Verify Highest Risk Subjects The final stage in this process is to require additional verification for the highest risk claims, which helps to balance the experience of your valid subjects while minimizing the impact of fraud. Additional steps might include: Document verification: Scanning a government-issued ID (driver’s license, passport, or similar), which includes assessing for document security features and biometric comparison to the applicant. One-time passcode (OTP): It is key to deploy this sparingly only to phone numbers that have been associated with the subject for a significant time frame and incorporate checks to determine if it is at high risk (e.g., recently ported or forwarded). Knowledge-based verification (KBV): Leveraging non-public information from a variety of sources. By adding additional, context-based identity elements, it becomes possible to improve the three main objectives of most agencies’ identity proofing process – get good constituents through the first time, protect the agency and citizens from fraud, and deliver a smooth and secure customer experience in online channels. While there’s no quick fix to prevent unemployment insurance fraud, a layered identity strategy can help prevent it. Finding a partner that has a single, holistic solution empowers agencies to defend against unemployment insurance fraud while minimizing friction for the end-user, and preparing for future fraud schemes. To learn more about how you can protect your constituents and your agency from unemployment insurance fraud request a call today. Contact us
For the last several months, Experian has participated as the only credit bureau in the pilot of the electronic Consent Based Social Security Number (SSN) Verification (eCBSV) service. As we move forward to general rollout and expanded availability later this year, it’s time to review the benefits of eCBSV and how it helps businesses prevent synthetic identity fraud. Service and program overview The eCBSV service combats synthetic identity fraud by comparing data provided electronically by approved financial institutions against the Social Security Administration’s (SSA) database in real time. This service helps financial institutions verify SSNs more efficiently and enables improved experiences for identifying legitimate or possibly synthetic identities applying for your products. The verification process begins with consent from the SSN holder – and with eCBSV this consent is provided electronically rather than via a wet signature. Then, the SSN is checked against the SSA database to validate the SSN, name, and date of birth combination are or are not a match. The verification will also indicate if the SSN is listed as deceased with the SSA. Together, these factors can help flag whether or not an identity is synthetic. By managing this process electronically, it is faster, more secure, and more efficient than before, offering an improved experience for consumers and the financial institutions that service them. Layering solutions While eCBSV is an excellent step forward in the fight against the rising threat of synthetic identity fraud, a layered fraud mitigation strategy is still necessary. It’s only by layering solutions that financial institutions can accurately identify different types of fraud and provide them with the correct treatment, which is especially important when it comes to rooting out fraud when it’s already embedded in a portfolio. To learn more about how Experian is helping to combat synthetic identity fraud and how eCBSV can benefit your financial institution, request a call. Request a call
2020 is finally over – been there, done that. And while it seems safe to say most everyone is all too eager to kick off a new calendar year, the reality is we’re still reeling – and will continue to reel – through the economic impacts of the COVID-19 global pandemic. As we inch closer to the one year marker of when many businesses were sent home – across all industries, including those tech-inclined and those less so – the understatement of the year is that the world has since changed as have consumer communication preferences, how businesses and customers interact, tweaked definitions of privacy, and new (heightened) expectations of evolving a positive customer experience with minimal friction and maximum security. While last year’s predictions of entering a new set of Roaring 20’s may not have panned out the way we had initially imagined, many of the trends thought to evolve over the last 365 days did. As we all look toward a post-pandemic world, here are six top trends to keep tabs on throughout 2021. 1. Data Data as a commodity and as a business differentiating factor has reached an all-time high. It’s doing more across the entire customer lifecycle and can elevate businesses to best prep for growth, especially as consumers begin to look for more financial products (whether looking for financial assistance as the CARES Act accommodation period ends, or to take advantage of the booming mortgage industry, etc.). Data can also give more insights into consumers than ever before. Far beyond just credit scores and financial data, today’s data sets can reveal consumers’ lifestyle preferences, their preferred communication channels, their rental histories, and so much more. With alternative credit data and non-traditional data (including consumer-permissioned data), businesses can get a holistic picture of their customers’ payment behaviors. That streaming media service monthly payment may seem minimal, but now could increase your credit score through Experian Boost. Experian is still making big strides in all efforts to use data for good. As of December 31, 2020, Experian Boost has “boosted” Americans’ credit scores nearly 47 million points. Additionally, throughout 2020, Experian worked with financial institutions and credit furnishers to continue to put consumers first and serve as the consumer’s bureau. Coming up in 2021? Using data for differentiation, which can ultimately drive business growth. From instant prescreens to identifying your best customers (and offering them cross-sell and upsell opportunities to increase retention and customer loyalty) to helping customers that may be on the brink of financial distress and connecting them with management solutions to help them get back on their feet, data can help businesses – and their customers – get there. 2. Fraud and Friction (And the Reduction of Both) With the pandemic, fraud saw increases across the board. Here are just some quick stats: 200% increase in first-time online banking usage immediately following shelter-in-place orders (Aite Group, “Workplace Distancing: Adapting Fraud and AML Operations to COVID-19,” April 2020) 652% year-over-year increase in records found on the dark web (Experian CyberAgent technology) 50% increase in human farming – real people being hired for purposes of fraud – month-over-month in March 2020 (Arkose Labs) And, unsurprisingly, consumer and business sentiments toward fraud are also evolving with these increasing trends. For example, according to Experian’s North America Trends Report, half of consumers continue to site security as the most important factor of their online experience. Additionally, there’s been an increase in the percentage of businesses who have recently increased or are planning to increase fraud budget from 76% in 2019 to 89% as of Sept. 2020. More complex phishing schemes and increased fraudster activity is due in part to numerous industries having to shift to online processes and business transactions overnight. Adoption for mobile wallets has jumped 11% since July 2020, according to the 2020 Global Insights Report. Systems and technology that were not ready or not armed with the necessary infrastructure left critical access points open that could be exploited by fraudsters. Fraud exists across the customer lifecycle, at every access point. And while fraud is complex, with Experian as your partner, solving it isn’t. Innovative technology enables businesses to prevent fraud by identifying credible customers and applying the correct treatment to the riskiest consumer and business accounts. We can help you develop a layered risk management strategy so you can focus resources on growing and protecting your customer relationships. 3. A New Administration – Changing of the Guards on the Regulatory Front With the new year enters the inauguration of a new president and administration. Though there is still much to be determined, certain areas are drawing a lot of attention with this changing of the guards. The highlights? The CFPB. Priorities and leadership could change. With COVID-19 top of mind, it is likely there will be aggressive agendas put forth to help protect the millions of consumers who have suffered economic distress and harm as a result of the pandemic. Data Portability. With an increased consumer appetite to port their data, questions and concerns around data security – and how to verify for a third party asking for the data – are also on the rise. There are a number of issues facing financial institutions around data portability, one of the largest being defining the line between consumer account information and proprietary data. All things privacy – state vs. national bills. The debate continues on how to move forward (whether privacy legislation will be handled by the states or at the national level), but for now it seems there is more progress at the state level. California was the first state to push through state-level privacy legislation in the form of the California Consumer Privacy Act of 2018. Twenty-four states are considering legislation that would require consent before collecting or disclosing personal information with third parties. 4. Analytics + Digitalization – Smarter, Better, Faster COVID-19 accelerated digital transformation for many. Some companies were ready, having already started making the headway in years prior, while others struggled – and some continue to struggle. The pandemic – and its corresponding recovery – is reason now, more than ever, to get some of your digital transformation priorities checked off of your list. Your customers demand it and your business needs it. Tackling analytics and digitalization not only brings your business up to speed, but improves your decisioning, enhances your offerings, and enables better platforms and data usage. In addition to digitalization, artificial intelligence for credit decisioning and personalized banking can also be expected to be a top trend, especially AI that is ethical and explainable, as will the increasing adoption and implementation of cloud computing. As consumer experience continues to reign supreme, any and all technology to enhance and improve that experience – think chatbots and virtual assistants – will also likely increase in presence. 5. Verification & Identity Identity has been a trending topic over the last few years, brought on by increasingly digital lifestyles and the intersection of personalization, frictionless transactions and adequate security. Identity verification and verification of other information such as income, employment and the like are increasingly needed in a today’s pandemic and tomorrow’s post-pandemic world. Leveraged across the lifecycle and during critical customer interactions, the need is especially heightened for insights, data accuracy, and diversification of data sets – to name a few. And while it was already established that identity verification is not just for marketing services, there are now even greater needs for financial institutions to be able to confidently know that their customers are who they say they are. Some areas to keep your eye on in 2021? Identity, income, assets and employment. 6. Redefining the Modern Mortgage As has been a common trend, spurred by the disruption caused by COVID-19, the mortgage industry is one of the many to have a magnifying glass brought to its areas for improvement. Some of those areas include operational efficiency, digital adoption and transparency. In line with the better and faster needs that lenders are continually trying to pace with, the need for speed is hitting mortgage originations, with an ideal situation outlined as closing in 30 days or less. Creating operational efficiencies through faster, fresher data can be the key for lenders to more accurately assess a borrower’s ability to pay upfront. Additionally, now, as most mortgage lenders are breaking previous origination records by a landslide (thanks pandemic), there’s new focus on other performance indicators. With such impetus, the modern mortgage is constantly evolving, incorporating customer-centric facets including a seamless digital process, providing meaningful customer experiences and leveraging the latest and greatest technology to better future-proof the industry through scalable technology, while aiming to reduce costs. For all your needs in 2021 and beyond, Experian has you covered. Learn More
Pre COVID-19, operations functions for retailers and financial institutions had not typically consisted of a remote (stay at home) workforce. Some organizations were better prepared than others, but there is a firm belief that retail and banking have changed for good as a result of the pandemic and resulting economic and workforce shifts. Market trends and implications When stay at home orders were issued, non-essential brick and mortar businesses closed unexpectedly. What were retailers to do with no traffic coming through the doors at their physical locations? The impact on big-box retailers like Best Buy, Dick’s Sporting goods, Sears, JCPenney, Nike, Starbucks, Macy’s, Neiman Marcus, Nordstrom, Kohl’s to name a few, has been unprecedented; some have had to shut their doors for good. Over the past several months global retail has seen e-commerce sales grow over 81% compared to the same period last year, according to Card Not Present. Some sectors have seen triple-digit growth year over year. Most online retailers have been ill-prepared to handle this increase in transactional volume in such a short amount of time, which has resulted in rapid fraud loss increases. A recent white paper from Aite Group reported that prior to COVID-19, a large financial institution forecasted an 8% decrease in fraud for 2020, but has since revised the projection to increase 10-15%. What does this all mean? Bad actors are taking advantage of the pandemic to exploit the online retail channel. The increased remote channel usage—online, mobile, and contact centers in particular—continues to be an area where retailers are exposed. Account takeover, through phishing and relaxed call center controls, is rising as well. Increases in phishing attacks are leading to compromised and stolen identities and synthetic identity fraud. Account takeover (ATO) fraud has increased 347% since 2019 according to PYMNTS.com. A recent survey found more than a quarter of merchants (27%) admit that they don’t have measures to prevent ATO. 24% of merchants can’t identify an ATO during a purchase. 14% of merchants say they are not even aware that an ATO has occurred unless a customer contacts them. When criminals use these compromised accounts to make fraudulent purchases, the merchant loses revenue and the value of the goods. They can also suffer from damage to brand reputation and a loss of customer confidence. A lack of account security can have lasting effects as 65% of customers surveyed say they would likely stop buying from a merchant if their account was compromised, according to that same Card Not Present study. So how can retailers start to identify bad actors with malicious intent? This will be a constant struggle for retailers. Rather than a one size fits all solution, retailers must move toward a strategy that is nimble and dynamic and can address multiple areas of exposure. A fraudster could easily slip by one verification method—for instance with a stolen credential—only to be foiled by a secondary authentication tactic like device identity. A layered fraud strategy continues to be the industry best practice, where both passive and active authentication methods are leveraged to frustrate fraudsters without applying undue friction to “good” consumers. The layered solution should also utilize device risk, identity verification and fraud analytics, with tailoring to each businesses’ needs, risk tolerance, and customer profiles. Learn more about how to build a layered fraud strategy today. Learn more
The COVID-19 pandemic and resulting rush to transition to a remote lifestyle made it clear that many businesses need a refreshed digital authentication and fraud prevention strategy that includes an investment in technology and provides consumer assurance. This is particularly important when it comes to identity, as many of the standard in-person verification methods and tools are currently unavailable. The meaning of identity is growing and shifting Technology trends are intersecting with social trends to create heightened awareness, and a whole new public conversation has emerged around customer trust and privacy. Attitudes and ideas are changing—even to the point of what we mean by “identity.” An identity is no longer just a name, date of birth, and SSN. Now, there are digital manifestations everywhere you look: screen names, email addresses, mobile phone numbers, device identifiers, and the other “exhaust” we leave behind as we travel the internet. This leads to concerns about what an identity is, who owns it, and who manages and protects it. Businesses have to be able to prove to their ability to protect their customers’ identities through investment in technology and a robust fraud strategy. Consumer attitudes are changing Several years ago, consumers were excited by all the new digital capabilities and the speed, ease, and convenience they provided. Last year, Experian found that consumers still wanted those things, with 70% willing to provide more information to businesses if there was a perceived benefit. However, they also wanted more security in the balance. In Experian’s most recent Global Identity and Fraud Report, we found that 74% of consumers say that security is the most important factor when deciding to engage with a business. Consumers are particularly more tolerant of friction during the enrollment process—as a means of building trust. But, when they return to the app or website, they want to be recognized. This means achieving a balance by using layered technologies, some of which are active and visible to the consumer, and some of which are invisibly working in the background to confirm the identity of returning consumers. Consumer attitudes vs. regulatory pressure The drivers behind the business changes are twofold: shifting consumer attitudes and regulatory changes. While regulations are becoming stricter on a national and global level, they’re not keeping pace with technology and social change. The digital world is evolving at a rapid pace, opening up more new ways for companies to collect information about consumers and use it to identify and verify, and also to target goods and services. With all of this data available, it’s important for businesses to use the tools in the market to help protect identity information. Next steps in technology The bottom line is, businesses can’t wait for regulations to dictate how best to protect information. Instead, they should be looking to technologies like physical and behavioral biometrics to help provide identity authentication and protection – layering those solutions with information from the user and from third parties to give a holistic consumer view. Businesses should adopt a platform approach for identity and fraud in order to be able to adapt quickly, whether to incorporate new kinds of technology or to prevent emerging types of fraud. By investing in technology now, even in the midst of the COVID-19 pandemic, businesses can build the flexibility needed to respond to future crises and help offset future fraud losses. In turn, those fraud-loss savings can then be used to help grow the business in the future. Learn more about Experian’s commitment to helping businesses maximize their investment in technology to safeguard against fraud. Learn more
Whenever someone checks in for a flight, airport security needs to establish their identity. Prior to boarding the plane, passengers are required to show a government-issued ID. Agents check IDs for validity and compare the ID picture to the face of the person standing in front of them. This identity proofing is about making sure that would-be flyers really are who they claim to be. But what about online identity proofing? That’s much more challenging. Online banks certainly want to make sure they know a person’s identity before giving them access to their account. But for other online services, it’s fine to remain anonymous. The amount of risk involved in the engagement directly ties to the amount of verification and assurance needed for the individual. Government agencies care very much about identity. They won’t — and shouldn’t — issue a tax refund, provide a driver’s license or allow someone to sign up for Social Security benefits before they’re certain that the claimant’s identity is verified. Since we increasingly expect the same online user experience from government service providers as from online banks, hotel websites and retailers, this poses a challenge. How do government agencies establish a sufficient level of assurance for an online identity without sending their customers to a government office for face-to-face identity verification? To answer this challenge, the National Institute of Standards and Technology (NIST) has developed Digital Identity Guidelines. In its latest publication, SP 800-63-3, NIST helps government agencies implement their digital services while still mitigating the identity risks that come with online service provision. The ability to safely sign up, transact and interact with a government agency online has many benefits. Applying for something like unemployment insurance online is faster, cheaper and more convenient than using paper and waiting in line at a government field office. And for government agencies themselves, providing online services means that they can improve customer satisfaction levels while reducing their costs and subsequent bureaucracy. CrossCore®, was recently recognized by the independent Kantara Initiative for its conformance with NIST’s Digital Identity Guidelines for Identity Assurance (IAL2). Our document verification solution combines authoritative sources, machine learning and facial recognition technology to identify people accurately using photo-based government identification like a driver’s license or passport. The best part? Users can verify their identity in about 60 seconds, at whatever location they prefer, using their personal smartphone.
Happy holidays! It’s the holiday season and a festive time of year. Colorful lights, comfort food and holiday songs – all of these things contribute to the celebratory atmosphere which causes many people to let their guards down and many businesses to focus more on service than on risk. Unfortunately, fraudsters and other criminals can make one of the busiest shopping times of the year, a miserable one for their victims. The nature of the stolen data has the potential to create long-term headaches for the organization and tens of millions of individuals. Unlike a retailer or financial breach, where stolen payment cards can be deactivated and new ones issued, the theft of permanent identity information is, well, not easily corrected. You can’t simply reissue Social Security numbers, birth dates, names and addresses. For individuals, we need to internalize this fact: our data has likely been breached, and we need to become vigilant and defend ourselves. Sign-up for a credit monitoring service to be alerted if your data or ID is being used in ways that indicate fraud. Include your children, as well. A child’s identity is far more valuable to a fraudster as they know it can be several years before their stolen identity is detected. The good news is, in addition to the credit bureau, many banks and auto clubs now offer this as a service to their customers. For organizations, the focus should be on two fronts: data protection and fraud prevention. Not just to prevent financial theft, but to preserve trust — trust between organizations and consumers, as well as widespread consumer trust. Organizations must strive to evolve data protection controls and fraud prevention skills to minimize the damage caused by stolen identity data. There are dozens of tools in the industry for identifying that a consumer is who they say they are – and these products are an important part of any anti-fraud strategy. These options may tell you that the combination of elements is the consumer, but do you know that it is the REAL consumer presenting them? The smart solution is to use a broad data set for not only identity verification, but also to check linkage and velocity of use. For example: Is the name linking to other addresses being presented in the past week? Is the phone number showing up to other addresses and names over the past 30 days? Has the SSN matched to other names over the past 90 days? Since yesterday the address matches to four phone numbers and two names – is this a problem? And it must be done in ways that reinforce the trust between consumers and organizations, enhance the customer experience, and frustrate criminals. Click here to learn more about Experian’s products and services that can help. As we go walking in the winter wonderland, remember, the holiday season is a time for cheer… and vigilance!