- Australia Scams Prevention FrameworkAustralia's Scams Prevention Framework spreads responsibility across designated sectors involved in scams. Governance and sector-code controls connect prevention, detection and disruption with intelligence sharing, reporting and response, including resolution of consumer disputes.
- EU Strong Customer Authentication RTSThe EU Strong Customer Authentication RTS translate PSD2 security duties into technical requirements. Two-factor authentication, dynamic linking and secure communication apply alongside defined exemptions and transaction-risk analysis, with fraud and exemption performance monitored.
- EU Verification of Payee RequirementEU Verification of Payee requirements call for account-name and identifier matching before a euro credit transfer is authorised. Providers return match outcomes and offer the payer the service free of charge, helping expose discrepancies in recipient details before payment approval.
- FFIEC Authentication and Access GuidanceFFIEC authentication and access guidance addresses risk assessment, layered security, MFA and monitoring in US digital banking. Access controls respond to the assessed risk, with testing, anomaly review, incident records and remediation providing evidence of how protections operate.
- RBI Digital Payment Security ControlsRBI Digital Payment Security Controls address the security of payment products, authentication and fraud management. Governance and development join reconciliation, user safeguards and incident monitoring, placing technical and operational controls around digital-payment delivery.
- Singapore Shared Responsibility FrameworkSingapore's Shared Responsibility Framework allocates anti-scam duties to institutions and telecom operators for defined phishing scams. Controls link duty breaches with compensation for qualifying victims, supported by claim investigation, compliance and communication of outcomes.
- UK APP Scams Reimbursement RequirementThe UK APP Scams Reimbursement Requirement makes sending and receiving firms responsible for reimbursing most in-scope authorised push-payment scam victims. Loss allocation sits alongside prevention and investigation, connecting scam handling with outcomes for affected customers.
- UK Confirmation of Payee RequirementsThe UK's Confirmation of Payee rules introduce name checking to reduce misdirected payments and APP fraud. Providers implement the service, respond accurately and present match outcomes before payment, with reporting on implementation and performance where directed by the regulator.
- US Red Flags RuleThe US Red Flags Rule requires an identity-theft programme for covered accounts at institutions and creditors with foreseeable risk. Detection, response and control updates sit alongside provider oversight and address-change validation, with risk assessments and governance records.