News

Press Release

INCREASES IN MOBILE FRAUD AND ID THEFT COULD HAMPER MOBILE PAYMENT / BANKING INITIATIVES



New TowerGroup Research Explores Growing Issues Surrounding Mobile Malware


Needham, MA, January 22, 2007 - When it comes to fraud and identity theft, one rule remains constant - fraudsters will follow the money. As mobile devices are ramping up incidents of mobile virus and mobile malware are likewise on the upswing.

New research from TowerGroup finds that 2007 will be the year that new banking and payment initiatives in the mobile channel will be increasingly targeted by those engaged in fraud and identity theft, with the goal of infecting or otherwise compromising mobile devices. These targets will include deployments where a mobile device acts as a credit or debit card.

Like malicious software (or "malware") in the wired world, mobile viruses are small programs that infect a host device. While most mobile phones are potential targets, smart phones and wireless PDAs as particularly attractive to fraudsters given their advanced capabilities to support PC-like applications including Web browsing and instant messaging.-TowerGroup believes that current mobile commerce initiatives emerging from the financial services industry lack a reasonable and justifiable focus on mobile malware.

"The success mobile banking and payments, as well as the concept of the mobile wallet, will be measured against the industry's ability to effectively contain the malware problems to a level that is at least on par with that of the existing Internet channel," said Bob Egan, Chief Analyst at TowerGroup and author of the research. "Over 200 mobile viruses have already been identified, a number that is doubling nearly every six months. Now is the time for IT managers and line of business heads within institutions to take action to protect both their companies and customers from mobile malware."

Highlights from the findings include:

  • TowerGroup estimates that employees within 80% of U.S. financial institutions are already using smart phones, including the BlackBerry, in a mix of professional and personal capacities.
  • As the mobile channel continues its rapid growth, the complexities surrounding security, including identity theft, consumer privacy and fraud, are exponentially increasing.
  • TowerGroup recommends that financial services institution CIOs and IT managers take the following steps to protect against virus attacks on mobile devices, and infiltration of these viruses into institutional computer networks and databases:

    • Create enforceable policies regarding mobile usage that are communicated to employees, including what type of mobile downloads are safe and allowable
    • Require wireless carriers serving an institution on an enterprise level to install and monitor mobile safeguards
    • Restrict the use of personal mobile phones that can be used for corporate activities, mirroring the security and protocols now in place for PCs
    • Evaluate which combinations of network and device based security solutions represent the right fit for the institution - and prioritize their deployment

"IT managers must examine extending their existing malware and virus security initiatives to include mobile phones," said Egan. "Likewise, the mobile commerce industry beyond financial services players must step up to take more aggressive and immediate actions to circumvent the potential of fraud and theft. We're currently in the lull before the true storm. To ensure that the mobile banking and payments channel will ultimately thrive, there is no time to waste in getting ahead of the malware challenge."

The new TowerGroup report titled "Fraud, Virus and ID Theft: Mobile Malware Stands to Create a New Beginning" authored by Egan is available for review by qualified members of the press. To request a copy or arrange an interview with Egan, please contact Lisette Kwong at +1.212.642.7753 or Lisette.kwong@edelman.com.

At TowerGroup, Mr. Egan's research covers new technologies and IT solutions that are actionable, relevant, and transforming to business. Other topics in his research area include: Web-based services, emerging payments and wireless solutions, and advancements in throughput, resilience and security.

Those interested in subscribing to a TowerGroup research service may call +1.781.292.5200 or email service-info@towergroup.com.

About TowerGroup: TowerGroup is the leading research and advisory services firm focused exclusively on the financial services industry. A respected source for trusted information and advice, TowerGroup brings many of the world's leading financial institutions, technology companies, and professional services firms a deeper understanding of the business and technology issues impacting their organizations. Headquartered near Boston in Needham, Massachusetts, and with offices in North America and Europe, TowerGroup serves a global client base. Visit www.towergroup.com for more information.

What's New

Listen to the Podcast
Karen Pauli, Research Director in TowerGroup's Insurance Practice was recently featured in a podcast interview with the Editor in Chief of Tech Decisions, titled, "Growing the Business: Ensuring No Dollar Is Left Behind."

What's New

Follow Us on Twitter
Connect with TowerGroup Analysts by following us on Twitter: @TheTowerGroup