Post-login fraud prevention for UAE mobile banking
Protectt.ai has warned banks that a successful customer login does not necessarily mean a mobile banking session remains safe. The warning applies as financial institutions across the UAE expand mobile-first services, instant payments and connected financial experiences.
Protectt.ai is a mobile application security, fraud prevention and digital trust company. Its Mobile App Security Platform combines Runtime Application Self-Protection, threat intelligence, device intelligence and identity-led controls to help organisations detect and respond to threats affecting applications, users and transactions.
Continuous assessment during the session
Fraudsters can work around authentication by manipulating customers or compromising their devices after access has been granted. Warning signals can include remote-control or screen-sharing tools operating during a banking session, rooted or jailbroken devices, screen overlays, application cloning, runtime hooking and attempts to tamper with application behaviour.
Newsletter
The corridor, every morning.
Funding rounds and cross-border capital moves, one email, five minutes.
Protectt.ai recommends that financial institutions treat device integrity as part of transaction risk and connect application-level security signals with fraud and transaction-monitoring systems. Institutions can decide whether to allow an action, request further verification, pause a transaction or suspend a session.
Manish Mimani, Founder and CEO of Protectt.ai, said: “Authentication confirms that a recognised customer has entered the application. It cannot, on its own, confirm that the device and the session remain safe throughout the transaction.”
More in Market Move
