Contactless and online banking have pulled cash out of the pockets of most people, and while there are those that believe cash will always be a vital part of the international economy, there are some parts of the world that are borderline cashless. Below Shane Leahy, CEO of Tola Mobile, elves into the possibilities of cashless countries around the world.

With more digital payment options now readily available to consumers than ever before, the depreciation in use of traditional forms of payment, such as bank notes and the humble coin, has been inevitable. When we would once delve into our pockets for some cash, consumers today are now increasingly reaching for their mobile devices to complete purchases quickly and conveniently.

The rise of mobile payments technology over the last few years has played a particularly huge hand in enabling both merchants and customers worldwide to facilitate more cashless transactions. With the global mobile payment transaction market forecast to reach US$2.89 trillion in revenue by 2020, the rapid uptake of mobile-centric methods and the resulting shift towards a more cashless consumer culture is showing no signs of slowing.

Yet, not only have these technologies made fast digital payments accessible for smartphone owners in the more technologically advanced areas of the world; it has also empowered consumers in many emerging markets around the world to undertake instant and secure payments through their mobiles, without the need for physical cash or a registered bank accounts. In fact, it is these same developing regions in which we are now seeing the most widespread and advanced adoptions of mobile payment solutions, which are rapidly eliminating cash as a dominant form of payment amongst consumers within these markets.

One particular area of the world in which cashless payments have broken down many of the previous barriers to entry for both merchants and consumers is Sub-Saharan Africa. It has been demonstrating a rapid mass-market adoption of mobile money services of late and has so far outstripped the rest of the world in terms of its approach to cashless payments. So much so that it now accounts for more than half of the total 277 mobile money deployments worldwide.

One of the biggest driving forces behind this development has been mPesa, the mobile phone based money transfer service which now boasts over 30 million subscribers across various African countries, including Kenya, Congo, Tanzania, Mozambique and Ghana. Unlike apps such as Paypal and NFC-based mobile enabled credit card methods like Apple Pay and Samsung Pay which have been gaining traction in Western regions, the sheer simplicity of the technology required to conduct cashless payments across Africa has contributed to its growing uptake of mobile money options.

In contrast to these methods, which require users to invest in a modern and more expensive smartphones to utilise the technology, mobile money transactions across Africa can be carried out using the most basic handset and without needing an internet or data connection. By leveraging a low-level service menu provided on every GSM phone, this technology is widely accessible and therefore able to support the region’s current technological infrastructure.

What’s more, services such as Apple Pay and Paypal still also require users to link a bank account in order to complete mobile payments, making these methods largely inaccessible for the millions of unbanked consumers in developing regions. These factors also have an impact on merchants as they will have to pay more to process transactions conducted through a linked bank account, than they would if it was made directly through a physical credit or debit card.

With this and the growing preference towards cashless payment methods globally combined, it is unsurprising that the rate at which Sub-Saharan Africa is adopting mobile money is much faster than that of any other region. At the end of 2016, there were over 500m registered mobile money accounts in the region alone, a figure which has undoubtedly now significantly increased.

The establishment of mobile money across Sub-Saharan Africa is now giving much of its previously unbanked population unprecedented levels of financial inclusion and freedom to make purchases anywhere, at any time, a move which has undoubtedly played a significant role in the growth of cashless transactions and gradual decline in other payment methods. What’s more, these services have significantly reduced the concerns over carrying physical cash for consumers within these countries and have replaced them with a simple and secure means for them to instantly access funds and pay for goods and services.

Not only has this rise in mobile money use facilitated an increase in consumer empowerment; it has also paved way for merchants who have previously combatted against the region’s developing infrastructure, in which periods of downtime and network outages cause huge disruption and can often lead to lost funds when payments are made via credit cards. By ensuring a seamless and instant digital transfer of funds from customers to the merchants, the appeal of cashless options has increased dramatically, providing merchants with more business continuity and offering these countries an opportunity to drive economic growth.

While there is still some way to go before cash is rendered expendable globally, there are various countries Sub-Saharan Africa, such as Kenya and Tanzania which are currently leading the way in terms of changing consumer behaviour and quickly adopting a cashless approach. For now, cash still remains king across most Western and other countries. However, as consumers continue to seek convenience and security, it is certain that we will see a growing shift towards digital payment methods and a continued demise of physical cash worldwide.

Customers’ everyday interactions with banking and insurance companies have been undergoing a steady process of transformation for some time, but the process still has far to go, both in terms of direct communication with customers and collaboration with third parties. Below Tony Rich, Head of Propositions at Unify, discusses the current banking environment and its ongoing interactions with a fast-evolving digital world.

Far fewer people now regularly visit or phone the local branch of their bank than even a decade ago, assuming there is one close by. I can pay money into my account at an ATM and arrange transactions just using my mobile app and a thumb print as security.

But bigger change is still to come. Today, when I interact with someone at my bank or insurer, I can choose to make a phone call or have a web chat, but as soon as I need a document or to speak to someone else, that conversation stops. Interactions can still be fragmented and time consuming. If I need to sign or check something, even if the document is held for me on a secure portal as some insurance companies now do, the process is very disjointed.

Let’s roll the clock forward a little to a time when cloud-based collaboration technology will make things much more seamless. Imagine I want to apply for a mortgage, or file a complaint, or make an insurance claim. My initial contact will start in the same way as now (say, a phone call) because it’s the one I am most comfortable with. But from there, things look very different.

I am immediately sent a link to a secure digital space where all interactions, conversations, documents and transactions about this particular process (my mortgage, complaint or claim) are stored and instantly accessible. Now, at any point, I can switch to a voice call, or a chat box, or a video call with two or more people. All this is done within the same secure online space, accessible through my mobile, tablet or PC. Here, at any time, I can hear a recording of the original call, see any documents I need to review and sign, talk to other relevant contacts, and so on. And when my case is complete, it can be archived to meet all auditing and compliance requirements.

This is a leaner procedure, with less to-ing and fro-ing, and document distribution and version control is easier. For customers and staff alike, it’s a more joined up, better and faster experience. For the company, a streamlined, friction-free process increases efficiency and drives down costs.

Multiple benefits

Given the challenges that all banks and insurers face – getting costs under control, protecting their brand, retaining and attracting customers and staff, achieving leaner agile operations while meeting regulatory requirements and compliance – it’s easy to see how this kind of immersive omni-channel experience could help address every single one. So, what’s needed for online communication and collaboration to be the norm?

The airline industry has already blazed a trail in creating more joined up omni-channel customer experiences. When I fly, part of my journey now is my ability to print or download my own travel documents, choose my seat, check myself in online or at a kiosk, and so on. I feel more empowered and in control – and the airline has enhanced its brand and achieved major efficiencies at the same time.

Key differentiator

In financial services, perhaps, things are in a state of transition. Internally, delivering more immersive customer experiences requires organisational and cultural change to think, connect and collaborate digitally by default. As far as customers are concerned, success depends on making sure the experience is easy and available to them in whatever channel is right for them. Older people, for example, might prefer phone calls and printable web pages. Digital natives, on the other hand, are savvy at reading and absorbing information direct from the screen and are more likely to initiate any communication digitally, including via social media.

Omni-channel communication and collaboration platforms are already in use at banks and insurance companies and new applications of this technology is being tested and developed every day. Extending platforms out into the customer space is a logical next step as the world becomes ever more connected. And in a fast-changing market and with the arrival of Open Banking driving new services, unified omni-channel experiences could be a key differentiator for any player looking to compete.

PSD2 had been previously described as a game changer for the financial industry, that was set to have a substantial impact on how mobile payments are conducted and authorised. Along with the challenges that face the mobile payments industry, there are also sizeable advantages to the new payment services directive that offer increased security for its users and a level playing field for payment providers. Shane Leahy, CEO of Tola Mobile, explains for Finance Monthly.

Since its inception in January 2018, many businesses which already operate within this space have argued that PSD2 hasn’t made an immediate and significant impact within their processes like they thought it would. Having said that, it is clear that PSD2 has bought a whole host of benefits and opportunities for new players to enter the market and produce a strong, customer-centric offering.

Whilst it was initially reported to be disruptive, the new regulation update has allowed for a real opportunity to move out of digital services and into a new era of payment services. PSD2 is helping to standardise and improve payment efficiency across the EU fintech industry, all whilst promoting innovation and competition between banks and new payment service providers.

PSD2 not only encourages the emergence of new payment methods in the market, it also creates a level playing field for new and existing service providers to innovate, create and ultimately give customers increased choice and availability. It puts the customer back in charge and offers a secure protection of data regulations that merchants will have to abide by.

One of the biggest impacts for mobile payment providers has been the imposition of spending limits on the Mobile Phone Network Operators (MNOs). For them, and companies who are operating under the PSD2 exemption, the maximum transaction amount a subscriber can be charged is £240 per month. This is all for voice, SMS, data and third party products either offered and available to the subscriber.

Another impact has been the requirement for a two-factor authentication process on every payment, and the restriction on the ‘billing identifier’ being taken by the payment provider from the network. In this instance, the billing identifier is the mobile phone number, and this has to be provided by the subscriber during the discovery phase of the acquisition of the mobile payment. This aligns the process more closely to credit card payment acquisition. By having a two-factor authentication, a new level of payment authorisation and transparency not previously seen in mobile payments has been discovered. This brings new levels of trust that is more commonly associated with credit cards, but with more ease of use and convenience of using your mobile phone number to make purchases for goods and services.

Some banks within the industry have grasped PSD2 with both hands, including Dutch client bank, RaboBank. RaboBank is creating its own mobile ecosystem around mobile payments with a rich choice of value-added services, as it looks to move its customers from a SIM-based mobile payments model into the cloud - and becomes one of the first banks to tap into what PSD2 allows banks to do.

Recent reports from MobileSquared have seen that ticketing could be one of the biggest industries to be affected by PSD2, with a third of customers in the UK being keen to start using charge to mobile to buy low-value tickets such as bus fares and train tickets. PSD2 opens up the market to a full transformation that will allow big ticket items to be sold using direct carrier billing. This brings a whole host of benefits for ticketing merchants and its customers, that can benefit from a seamless payment system, quicker processing times and easily accessible.

With the continued effects of the new directive set to be felt across the next 24 months, payment providers in the European Union must ensure they are compliant with the regulations of this well anticipated update.

The customer is at the core of PSD2, and banks, merchants and new payment providers will be looking to become completely compliant with the changes to suit a more customer-centric offering. Payments via any IoT devices will become a more popular method for customers and merchants will look to push more mobile payments due to lower processing fees, subsequently empowering the customer even more. As the industry sets to move towards a more open and intelligent banking ecosystem, financial institutions and fintech companies should embrace the impact PSD2 is having and understand that it will continue to have an ongoing significant impact on their offering throughout 2018.

Andrius Sutas, CEO and Co-founder of AimBrain looks at the limitations of secrets-based authentication and the three simple steps that banks can take to enhance security and facilitate innovation.

In this digital world, security is more challenging and demands more resources than ever before. Customer centricity – remote onboarding and eKYC, faster payments, greater interconnectivity between FS providers and any other customer-first initiative – offers unprecedented convenience for the consumer, but places immense pressure on banks and FS providers to offer such services quickly, cost-effectively and, most importantly, securely.

Mobile banking, for example, is undoubtedly one of the greatest things to have happened to the sector. Reducing branch spends, rapidly enabling new products and greater segmentation, remote onboarding…it has been a pivotal step for the industry. But never failing to miss an opportunity are the criminals that seek to dupe, coerce and attack. Mobile banking is particularly susceptible to fraud; Trojan attacks doubled in volume last year against 2016 and increased 17-fold compared to 2015. McAfee also said that it had detected 16 million mobile malware infestations in Q3 2017; double the number of the same period in 2016. Supplement these attacks with omnipresent, large-scale data breaches and you’ve got one marathon migraine coming on.

So, it is no wonder that banks now find themselves in a position of having to pool resources just to defend against mobile account fraud; and that is a single channel in the customer engagement journey. On-device biometric authentication is a patch fix for a problem that is only going to grow; the fact is that the only way to be utterly certain of an individual’s authenticity is by verifying the person, not the device.

Passwords don’t work. It’s not rocket science. Anything that can be intercepted, guessed, hacked, teased out – does not work, and the more enterprises continue to rely on passwords and secrets, the more resources they will find themselves throwing at the problem. What’s left? Hardware is antiquated, OTPs via SMS have proven themselves to be dangerously easy to intercept, and push notifications rely on the physical proximity of a device.

So how can banks truly secure customer data, act compliantly and have the freedom and flexibility to innovate? We believe that the strength lies in layering on security, in a simple and easy-to-configure model that is fit for both today’s fraud and the challenges of tomorrow.

Biometrics (how someone behaves, looks or sounds) can fulfil these requirements, and more. Unlike securing the authenticity of a device, biometrics assure the authenticity of the person themselves. And better still – unlike passwords – they are not secrets. They are everywhere! We leave fingerprints wherever we go, our faces are on show, we talk into devices all day long.

This might seem counterintuitive, but it’s not the data, but the way in which biometric data is treated that creates the security. We’re not just talking about templating it using algorithms – pretty standard methodology across the industry – but about how to keep it secure.

If someone has your password, they have your password. It’s black and white. If they have a video of you, or a recording of your voice, this might be enough to beat some authentication gateways. So, the key is to continually add challenges to beat the fraudsters and make it impossible for someone to pretend to be the customer, whilst keeping it simple for the customer.

How? We think it boils down to three steps.

• Passive bot detection: feeding industry or enterprise-specific annotated fraud data into a passive anomaly detection module that provides an early warning for behaviours that could signal fraud, as early as at the onboarding stage, whether manual or synthetic.
• Configuring multiple biometrics: combine and layer biometric challenges; behaviour, bot detection, voice, face and any blend thereof, to create unique combinations of step-up/step-down security rules and weightings on specific outcomes. Use in-session risk-based assessments rather than the binary yes/no of passwords to ascertain a user’s authenticity in an ongoing way.
• Combining simple and smart tests: use the latest stringent anti-spoof and liveliness detection (that it is a user and not a representation of a user) that marry simple user challenges with time-sensitive outcomes underpinned by artificial intelligence, such as combining facial authentication with an in-session audio prompt. Simple and secure, and a strong indicator that even though biometrics are public, technology can render them worthless to fraudsters.

These steps will keep banks ahead of the capabilities of even the most sophisticated presentation attacks. We recently launched AimFace//LipSync, which combines facial authentication with a voice challenge and lip synchronisation analysis. A customer can enrol or access simply by taking a selfie and simultaneously reading a randomised number. Nothing exertive. Pretty simple really. But – we think – impossible to spoof by any method available today. It’s about staying one step ahead of fraud, in a way that minimises inconvenience to the user, and your biometrics partner should have a solid roadmap in place that demonstrates consideration for the fraud we haven’t yet seen.

The password is not fit for purpose. Secrets are dangerous. Biometrics are a simple yet secure way of authenticating the person and keeping their valuable data and assets safe.

AimBrain is a BIDaaS (Biometric Identity as-a-Service) platform for global B2C and B2B2C organisations that need to be sure that their users are who they say they are.

It has emerged that TSB could be facing £16 million in fines for the catastrophic meltdown of its online banking software which prevented customers from accessing their bank accounts and using their debit cards. On the back of our Your Thoughts this week, Yaron Morgenstern, CEO at Glassbox Digital, discusses the important lessons we can learn from this ordeal.

Almost a month after the crisis emerged, mortgage account holders are still unable to access accounts online, while business customers continue to face problems making online payments.

TSB’s response to its customers’ fury is more revealing, with customers unable to get through to customer service teams, even after fraudsters have drained their accounts. Any financial organisation that truly values its customers can learn a number of lessons from this meltdown. Providing a positive and consistent customer experience is vital in today’s digital environment – and this is likely to get even more important as your clients move away from human interactions, such as in bank branches and via call centres.

In the aftermath of TSB’s IT disaster, the question is: how can organisations create digital engagements that are responsive to clients’ needs and at least as successful as human engagements?

Be ethical

A digital footprint is the only way to understand the issues your clients are experiencing, whether they are on a similar scale to the TSB crisis, or as tiny as a minor frustration. However, the Cambridge Analytica scandal has reminded business of the importance of considering ethical data collection when measuring your customer’s experiences.

These recent events, and the distrust that surrounds tech giants and data collection, have showed that financial organisations must inform their online users how their data is collected, stored and used. More importantly, it must be remembered that customer data is on loan to businesses for a given period of time and not owned by the organisation. As such the data collected must be relevant to the individual customer and be able to offer them a distinct advantage in the customer experience.

Be helpful

In light of this mistrust it’s more important than ever that you demonstrate the advantage your processes offer to customers and clients. We are now in a world where there are all kinds of service users, devices and operating systems operating in the financial services environment. This landscape will only become more complicated as the amount of IoT-enabled devices continues to increase. How organisations connect with customers will also evolve in line with these technological advances.

Digital mapping allows businesses to know precisely what browser, device and operating system each online user is operating on, and therefore to know more about the experiences users are having than ever before. The upshot for customers is that these organisations can offer an improved digital journey at every touchpoint in return.

Be responsive

In this digitally-enabled world, organisations should be more capable of staying in touch with their customers. Digital processes need to identify customer pain-points and solve these problems before they begin to mount up like they did at TSB. And instead of operating in complete silos, IT and customer service teams must work together. When considering the TSB disaster, you cannot help but wonder how prepared other parts of the business were for the back office switch.

How can you react immediately to any issues that emerge? Customisable alerts can be set up that go out to IT, customer service, marketing and web development departments that warn about problems on the website and app. With these alerts in place, all teams have full visibility of digital problems and there are no nasty surprises. Similarly, if a user then approaches a customer service representative with a problem, the handler of this complaint should be able to effortlessly tap into the online session data and identify what the issue is and where it lies.

Be pre-emptive

The TSB fire was stoked by Sabadell’s development team, who before the IT crash were publicly toasting what they thought was a successful migration of customers to a new platform. Whilst this is a PR disaster, it also demonstrates how little they understood about the potential pitfalls they were facing. With such a heavy reliance on online experiences, it’s important your teams consistently prepare for failures, in order to best react.

Financial services firms must put in place processes that prevent online glitches (however small these may be). If they do so, businesses will enjoy increased customer loyalty and retention. Rather than simply employing digital mapping when moving legacy systems over or updating a customer portal, it should be engaged day-to-day.

Can you do it?

The finance industry is more reliant on the online experience to retain and win customers than ever before. Despite this, not all banks and insurers are doing it well. Making sure that your IT and business processes are ethical, ongoing and integrated will help guarantee customer loyalty and retention. This approach will insulate businesses from IT disasters like the TSB fiasco – or at least allow them to respond properly in the event of a crisis.

With a rise in workplace-related stress, illnesses and mental health issues, half (50%) of working adults in the banking and financial services industries believe that businesses are not doing enough to support the physical and mental wellbeing of their employees, according to a new study.

Current treatments such as health check-ups, cognitive behavioural therapy and chiropractic treatment are provided by the NHS, through National Insurance contributions, but 70% of those surveyed by Westfield Health stated that the NHS does not have the budget to provide wellbeing services like these.

So is National Insurance becoming unfit for purpose? Employees in the banking and financial industries don’t seem to know, with 17% of employees knowing how much National Insurance they pay and 35% saying they do not know how much of the contribution goes where, be it the NHS, social security or their state pension.

With an ageing workforce and more hours spent in the office than ever, should the NHS’s frontline resources continue to be used for wellbeing services? The research found that over half (59%) of workers in the banking and financial services industries would like to see the Government do more to promote their physical and mental wellbeing. And the vast majority (74%) believe their employer is specifically not doing enough to help employees deal with work-related stress, anxiety and other mental health issues.

Similar to the recent rollout of the workplace pension opt-out, could a government-backed auto-enrolment scheme for wellbeing programmes - funded by employers and by a portion of employees’ National Insurance contributions – be one of the solutions to address the NHS’s long-term financial needs?

Certainly the appetite is there in the banking and financial services industries with employees particularly prone to sedentary behaviour, poor nutrition and sleep deprivation, impacting on their overall health and productivity. As a result, over two thirds (68%) of employees stated they’d use wellbeing services if their employer provided them.

The top things they would like to be offered are:

1. Health check-ups (45%)
2. Emotional wellness (42%)
3. Exercise (35%)

David Capper, Commercial Director of Westfield Health, said: “The total number of UK working days lost to stress, anxiety and depression resulting from long working hours is 12.5million days. Therefore, it makes sense for employers to relieve some of the pressure through wellbeing initiatives. Not only would they be supporting our economy, they’ll make huge cost savings by looking after their staff’s health, with presenteeism now costing businesses up to three times more than absenteeism**.

“From sleep to nutrition and mental health to physical fitness, there are so many elements that contribute to your overall wellness, happiness and healthiness. In the banking and financial services industries, staff are particularly prone to being sedentary for long periods of time without a break at work, which puts them at serious risk of developing health problems such as heart problems, diabetes, cancer and weight gain.

“It’s more than free fruit in the office and discounted gym memberships. As business leaders, we need to create a culture where our people’s health and wellbeing is prioritised to drive confidence, capability, inspiration and ultimately prosperity.”

(Source: Westfield Health)

The ongoing TSB IT meltdown has been strong evidence of the risks and challenges financial institutions face daily. It has caused mass uproar from customers and severely tarnished the bank’s overall reputation.

TSB started a long-planned move of 1.3 billion customer records from its former parent company, Lloyds Banking Group, to Proteo4, a platform built by TSB’s Spanish owner, Banco Sabadell. The change-over, which started on Friday 20 April, was supposed to be completed over the weekend by 18:00 on Sunday. But on Monday morning millions of customers were unable to use online or mobile banking or had been given access to other people’s accounts.

Error messages and glitches meant paydays and company salaries were turned upside down across the UK. This has understandably caused a chain of problems across many sectors. TSB’s overall response has not been appreciated by the public and its customer service methods have been hugely questioned.

Below Finance Monthly lists some of Your Thoughts on TSB’s IT failure and its customer service approach.

Mark Hipperson, CTO, Centtrip:

Looking more closely at what happened and how the events evolved, it appears that some key IT best practices might have been omitted, such as:

1. Production system access: it appears developers had access and were making live fixes to production. This is a big no-no in software development even in an ultra-agile DevOps environment.
2. Rollback plan: when it all went wrong, it appeared there was no contingency plan or option to revert back.
3. Incremental proving: it would have been more appropriate to first validate each change to ensure it was successful before moving to the next.
4. Testing: It is pivotal to confirm all changes have been implemented successfully and work well. There are many different types of testing: user, operational, data migration, technical, unit and functional, which would have helped identify any issues before customers did.
5. Early Live Support: it is crucial to make sure sufficient highly skilled staff are available immediately after the release in case things still go wrong.

And last but not least is proof of concepts (PoCs), which would have revealed any tech and planning errors. TSB should have run PoCs on test accounts, or even staff accounts, before the full release.

Alastair Graham, spokesperson, PIF:

Small business customers have reached a nadir in their relationship with traditional banking partners. Branch closures and the move of services online have meant that few now receive any active guidance or support from their bank in helping to grow their business.

At the same time, many feel that even basic banking services aren’t meeting their expectations. Even without issues such as the recent TSB banking crisis, businesses would like improvements to be made.Whether that is quicker account opening processes, simple lending or transparent and fair charges, the demand for alternatives is growing.

Tech innovations, combined with legislative changes such as Open Banking, mean that more products and services are being launched, designed specifically to meet the needs of small business customers. SMEs have already shown they will trust other providers when their banks fail to provide adequate services. This has been particularly evident where prepaid platforms offer more versatility, while still being a safe, secure and flexible method to transfer money.

Yaron Morgenstern, CEO, Glassbox Digital:

In today’s digital age, customer experience is more important than ever. This banking app drama has revealed how important it is to measure your consumer’s experience with complete visibility of any problems. This should really be an ongoing effort, and not just when you plan large scale back office migration. There are three fundamental tenets to an effective customer experience: observation of the customer journey via touchpoints, reshaping customer interactions, and rewiring the company’s services to align with customer expectations.

It is only through advanced digital analytics and AI technology that organisations can understand what is going through their customers’ minds. These are powerful tools for mapping out customers’ digital journeys from the moment they visit a website. This all goes to the heart of improving conversion in the digital customer journey.

Fabian Libeau, EMEA VP. RiskIQ:

The fact that TSB’s IT meltdown dragged on for such a long time, meant that customers were locked out of their accounts for extended periods. It also made them vulnerable to digital fraud in the form of phishing. TSB itself has warned more than five million customers that fraudsters have been attempting to take advantage of its IT breakdown to trick people into handing over information that could enable them to steal their money. Criminals exploiting brands to defraud stakeholders in this way is nothing new, and we know that financial institutions are a much-loved target for hackers, given the highly-sensitive and valuable information they’ve been entrusted with – it is therefore no wonder that cybercriminals are queuing up for an opportunity to impersonate the bank online.

Andy Barratt, UK Managing Director, Coalfire:

In the grand scheme of things, the TSB incident is perhaps not as significant an event as a nation-state hack like last year's WannaCry. But it has still left many, including the ICO, concerned that a major 'data breach' occurred just weeks away from the implementation of the EU’s General Data Protection Regulation.

The power to hand out major fines that GDPR affords the regulator means that the price of poor data protection is about to become far easier to quantify. When the regulation comes into force at the end of the month, a breach like TSB’s would certainly require a Data Protection Impact Assessment and measures put in place to ensure a similar incident doesn’t happen in the future. At the very least, TSB will have put themselves on the ICO’s radar as ‘one to watch’ when GDPR comes into effect.

While the share price of Banco Sabadell, TSB's Spanish parent, wasn’t overly affected by the incident, there could still be a significant financial consequence for the bank. We now know that a large number of customers are affected so the cost of rolling back any mistaken transactions as well as offering support, and potentially refunds, is likely to eat up a lot of operational resource. This event should be a reminder that data protection and the safeguarding of personal information has to be to priority for financial institutions.

Andy Barr, Founder, www.10Yetis.co.uk:

The best thing you can say about the TSB approach to public relations throughout its issues is that it is going to become the modern benchmark for university lecturers on how not to approach crisis communications.

From the very outset, TSB has failed in its approach to handling this ongoing crisis. Its messages have been wrong, even from its highest-level member of staff, the CEO. He has repeatedly issued statements that have been incorrect and that he has had to retract and apologise for.

TSB’s brand reputation is now circling the plughole and its Spanish owners could very well be forced down the route of a re-brand in the mid to longer term in order to try and recover their reputation. I fully expect a classic crisis communications recovery plan 101 to be rolled out, once this all dies down. Step one; apologise (usually full page ads), step two; announce an independent investigation, step three; a member of the C-Suite gets the Spanish Archer (El-bow), and then step four; another apology before trying to move on.

Whatever the final outcome, this has been a public relations disaster for TSB and they are very lucky that at the time that it happened there was so much other “hard news” going on such as Brexit, rail company re-nationalisation and, of course, Big Don, over the pond, constantly feeding the 24-hour news agenda.

Danny Bluestone, Founder & CEO, Cyber-Duck:

The TSB fiasco shows that many organisations vastly underestimate data migrations. Moving data on such a scale from an incumbent system to a different one is an inherently complex task. There are several steps to follow for a successful migration.

First and foremost, it begins with a considered strategy for structural changes that ensures no legacy data is made unusable and new functionality is accounted for. Banks like Monzo test new features within alpha and beta modes, so new pieces of functionality are tried and tested before a mass general public release. TSB would have been wise to utilise test scripts and automated testing to auto-test thousands of permutations from login to usage of the system. Relevant applications that monitor errors could have then detected issues early on.

TSB could have also used a run-book for deployment so all steps of deployment are documented. When an error was detected, TSB could have rolled back without data loss. Problems could also have arisen if TSB failed to use a testing environment that was identical to the production environment. As if there is even a slight difference, the user experience can break.

With regards to the application hosting, TSB should have an active engineering team monitoring performance 24/7. In our experience at Cyber-Duck – from working with numerous institutions including redesigning the Bank of England’s digital website – there really is no excuse for users to suffer. Complex data migrations can be dealt with in a secure and efficient manner if best practice methodology is followed.

Adam Alton, Senior Developer, Potato:

Software is difficult; Microsoft still hasn't finished Windows. Trying to write a new piece of software or create a new system, and then migrate everything over to it in one go is likely to go badly. The chances of it working are incredibly slim. Instead, a migration in several parts would be better. Release small, release often. When Mark Zuckerberg said "move fast and break things", you could interpret that as "you're going to break things, so do frequent and small releases in order that you break as little as possible before you get a chance to fix it". The problems with TSB's migration appear to be multiple and disparate; error messages, slowness and capacity problems, users shown the wrong data. It seems unlikely that these stem from a single cause or single bug, so it would seem that they tried to do too much at once.

Coerced optimism: when under pressure to get something to work, it's easy for a team of developers to wishfully believe that something is finished and working because they can't see any problems, even though their experience tells them that the complexity of the system and the rushed job they've done means that it's extremely unlikely to be free of issues. I wouldn't be surprised if IT workers at TSB fell into this trap, leading to the premature announcements that the problems were resolved.

Denying that you have a problem is always a bad idea. Amazon Web Services (AWS) provide a detailed status dashboard giving a continuous and transparent view of any issues on their systems. They don't deny that they occasionally hit problems but instead have a process in place for actively updating their customers with as much information as possible. This transparency and openness clearly win them a huge amount of customer trust.

Senthil Ravindran, EVP & Global Head, xLabs, Virtusa:

Fortunately for all involved, it seems as if the worst of TSB’s IT debacle is now behind it. But its botched migration led to more than 40,000 customer complaints in what was arguably the most high-profile banking error we’ve seen this year. Worse still, the technology itself isn’t to blame here – both previous owner Lloyd’s and the Proteo4UK system used by new owner Banco Sabadell have a good record in handling data. Instead, the responsibility here rests solely with TSB.

It mostly boils down to a lack of proper preparation on TSB’s part. Banks carry out small data migrations regularly, but a large-scale migration such as this typically calls for months of preparation. Actually moving the data isn’t the tricky bit; drawing the data from the siloes it’s stored in across the business and knowing how it’ll fit within the target system is the real challenge. This is why banks are increasingly looking to ‘sandbox’ the testing process; creating a synthetic environment with the data they hold to gauge how it’s likely to fit within a new system of record. Granted, this approach to testing doesn’t happen overnight, but when applied properly, it reassures banks that the actual migration will run smoothly.

This method would likely have spared TSB the disaster it has faced. Yet in reality, we’ll likely see similar high-profile stories appear over the coming months thanks to the combined pressures of GDPR and open banking. The former is forcing banks to bolster their data handling practices in order to avoid hefty financial penalties, while the latter is forcing banks to expose their data to all manner of third parties. Both initiatives are incredibly difficult for banks reliant on decades-old legacy IT systems to manage (indeed, it’s likely that the GDPR deadline this month may have added pressure on TSB to rush the migration through), and as the reality of this new banking environment begins to set in, expect to see other examples along the same lines as TSB’s.

We would also love to hear more of Your Thoughts on this, so feel free to comment below and tell us what you think!

HSBC UK has created the first live use case of open banking for credit applications using the InterConnect platform from Equifax, the consumer and business insights expert. The solution will facilitate quick affordability assessments by allowing individuals to submit their bank transaction information electronically, in less than five minutes, during an application for credit.

Each submission is presented directly to HSBC UK Underwriting in real-time, providing the bank with a fast and informed view of a customer’s affordability and facilitating faster lending decisions.

The Equifax InterConnect platform is a flexible cloud-based decision management platform, which consolidates insight on credit applicants and streamlines the risk decision process. The Equifax platform collates consumer current account transaction information from its third party fintech partners, classified according to FCA guideline categories; committed spend, basic quality of living, essential spend, and discretionary spend.

Jake Ranson, Banking and Financial Institution expert and CMO at Equifax Ltd, said: “This work with HSBC reflects our ongoing commitment to the open banking initiative and our drive to deliver to our banking and financial services clients the best solutions for their customers in this new world of open data.

“We’ve produced a next level data service that helps the industry make the most of new data sharing, and empowers customers with more control over their own financial information. Part of the open banking challenge is educating consumers on what it means in a real life context, and a streamlined credit application process that helps them get a faster decision is a great example.”

(Source: Equifax)

Online research from Equifax reveals over half (51%) of Brits under 45 years old would be interested in banking products or services from technology giants like Apple, Amazon or Google. Of those, 45% said that products or services like loans, credit cards or current account from these technology companies would only appeal to them if they offered better value than their existing bank.

Across all age groups, the level of interest in banking products from leading technology firms falls to 40%, with over a quarter (27%) of Brits stating they would rather use their existing bank as they’re more familiar with them.

Jake Ranson, Banking and Financial Institution expert and CMO at Equifax Ltd, said, said: “The recent announcement that Apple is joining forces with Goldman Sachs to launch a consumer credit card highlights how tech companies plan to shake up the banking industry, creating products and services to compete against the big high street banking names as well as newer digital entrants.

“Although a sense of brand familiarity pins many people to their current bank, there’s an appetite for new products and a desire for alternatives that can offer something genuinely different. The tech giants have a loyal brand following in their own right, if they can combine this with a competitive product offering we’ll see an interesting shift in dynamics as the fight to attract customers heats up.”

(Source: Equifax)

Following the Bank of England’s (BoE) decision not to raise interest rates last week, Finance Monthly has heard from a few sources who have provided expert commentary.

Richard Haymes, Head of Financial Difficulties at TDX Group:

The decision is good news for those living in debt or teetering on the edge of financial difficulty. We expect the level of monthly Individual Voluntary Arrangements (IVAs) and Trust Deeds to grow by around 17% this year; a rise in interest rates would have a significant impact on the ability of these individuals to meet repayments and ultimately stay within the strict requirements of these debt solutions.

Figures from Creditfix, the largest provider of personal insolvencies in the UK show that 20.2% of its customer base holds a mortgage. It’s likely, due to their credit position, that most of these customers will have a variable mortgage that would have left them particularly vulnerable to an interest rate rise. A 0.25% hike would have left holders of £250,000 mortgages with a monthly repayment increase of £31*. This may appear a modest rise but for people trying to manage debts through IVAs or Debt Management Plans it could have a detrimental impact, rendering debt solutions unviable or in need of renegotiation.

While a continuation of the low interest environment is bad news for people holding pensions, investments and living on savings – reducing their earning potential compared to periods of ‘normal’ monetary policy, a static interest rate provides relief and stability for those in financial difficulty or on the brink of difficulties.

Stuart Law, CEO, Assetz Capital:

This change in thinking for the Bank of England following an expected rate rise is hardly surprising given the economic uncertainty and poor GDP growth figures. We expect that any increases that do happen over the next year would simply be a short-term measure ahead of Brexit, in case there is a need to drop rates again next year.

Even if interest rates do rise slightly later this year, it’s likely to only be by a small amount. Despite the predicted drop in inflation, this announcement is likely to receive a less than warm reception from high-street savers, who are seeing the value of their hard-earned money decreasing each day through inflation – and of course, many banks will not pass all or any of this rise on to savers.

Angus Dent, CEO, ArchOver:

With Britain’s GDP growth at just 0.1%, it’s no surprise that the Bank of England has kept interest rates stagnating at 0.5%.

Just last month a rate rise seemed a foregone conclusion. Today’s decision is yet another result of the uncertainty surrounding the UK’s financial health. And keeping rates so low means savers lose out once again.

Savers leaving their cash languishing in savings accounts in the vain hope of a rate rise will be sorely disappointed. With the economy in the doldrums, it’s time for a serious rethink – crossing your fingers and hoping for the best does not equal a productive savings strategy.

The news that the majority of banks didn’t pass November’s rate rise on to their customers adds more fuel to the fire, showing that even an historic rise didn’t have the desired effect on savers’ pockets.

Savings accounts are no longer a safe bet for decent ROI. Consider alternative financing options that can offer higher yield without compromising on security. Optimism is all well and good – but we all need a healthy dose of realism if we’re going to make our money work harder.

A rapid ramp-up of European banks' bail-in buffers is critical because the authorities' ability to support failing banks is now heavily constrained, S&P Global Ratings said in a new report, "The Resolution Story For Europe's Banks: The Clock Is Ticking."

"The UK, Switzerland, and Germany aside, European banking systems today typically lack the sizable buffers of subordinated bail-in instruments that could avoid bailing-in senior unsecured instruments if a systemically important bank fails," said S&P Global Ratings credit analyst Giles Edwards.

Three years since bank resolution regimes were created in most European countries, banks in the region continue their long march from bail-out to bail-in—and many will still be on this road for years to come. After all, making large, complex banks truly resolvable is no mean feat, particularly for those that start with minimal bail-in buffers.

Furthermore, the EU's resolution authorities have a tougher task than most--whereas the U.S. and Swiss authorities are acting on only the most systemic banks, their EU counterparts must set MREL (minimum requirement for own funds and eligible liabilities, which is the regulatory bail-in buffer) for all banks and lay the complex groundwork to enable a bail-in resolution for even midsize banks.

In S&P Global Ratings' view, the EU has achieved much in a short time by strengthening its crisis management framework for the financial sector. And the framework has had a positive impact on our ratings on European banks. Under regulatory requirements, European banks that are not global systemically important banks still have plenty of time to build their buffers, though these may start to look less comfortable as we progress through 2019.

Resolvability cannot be achieved overnight, and we do not underestimate the scale and complexity of the task in the European banking union in particular.

"Yet looking back at 2017, we saw more limited progress in some areas than we had expected, notably in the setting of banks' MREL," Mr. Edwards said.

Bail-in buffers aside, we also note that bank resolution actions could still be undermined if solvent banks cannot access sufficient liquidity in resolution--a topic that has become an imperative to address.

(Source: S&P Global)

Despite a well-developed electronic payment infrastructure, cash remains a dominant payment instrument in Singapore with 58.7% of transaction volume made at POS terminals in 2017, according to leading data and analytics company GlobalData.

In addition, more than 75% of transactions made at hawkers and wet markets are carried out in cash. This can be primarily attributed to the limited acceptance of electronic payments among small-sized merchants such as street vendors, food stalls and hawkers due to the high cost associated with POS terminals.

Singapore has for a long time been at the forefront of the payments innovation. Acceleration of electronic payments in the country has been one of the key objectives of the government’s Smart Nation Vision and in this regard, the country has invested substantially in building long-term infrastructure for cashless payments. Overall, the POS terminal penetration (number of POS terminals per thousand inhabitants) in Singapore stands at 35, compared to its Asian peers: Australia (39), Hong Kong (22), Japan (18), China (21), Indonesia (4) and India (2). In Singapore, card-based payments accounted for 32.8% of total payment transaction volume in 2017, increasing from 24% in 2013.

Singapore has a very high concentration of small and medium-sized enterprises (SMEs). According to the Department of Statistics, Singapore, there were 220,100 business enterprises in the country in 2017, with 99% of them being SMEs. To encourage adoption of electronic payments among SMEs in particular, the government along with other payment participants is increasingly considering QR-based payments as a viable alternative for cash.

Kartik Challa, Payments Analyst at GlobalData, comments: “The economic rationale for QR codes is stemmed from the difficulty banks had in persuading smaller merchants to begin accepting payment cards. The QR-code based payment acceptance eliminates the need for a significant expenditure, as merchants can now either display a printed QR code on their stall or download the merchant app on their mobile phones to accept electronic payments.”

In November 2017, the Singapore Payments Council announced the development of a common standard for Singapore Quick Response Code (SG QR) payments, designed to work across all schemes, e-wallets and banks. Unlike the existing NETS QR system, which focuses on domestic market, the new system will accept electronic payments through both domestic and international payments. The SG QR, developed by an industry taskforce co-led by the Monetary Authority of Singapore (MAS) and Infocomm Media Development Authority, will be deployed throughout 2018. Furthermore, as part of the process, the existing NETS QR will also be integrated into the new system and will be replaced with SG QR at all merchant locations.

Singapore's banks have also agreed to update their mobile payment apps/wallets to support SG QR. To expand the scope for SG QR, the Association of Banks in Singapore agreed to bring in banking P2P service –PayNow under the purview of SG QR. All seven participating banks of PayNow service, Citibank Singapore, DBS Bank, HSBC, Maybank, OCBC Bank, Standard Chartered Bank, and United Overseas Bank – enable their customers to transfer funds via SG QR.

Challa concludes: “The SG QR system is an important milestone, and to win over merchants, payment solution providers need to support the large number of e-wallets, offer quick payment settlement process and pricing benefits. Similarly, incentivizing consumers is a key factor to pique consumers’ interest in the new payment system. With the SG QR making a good headway, cash payments in Singapore are likely to soon become passé. Once again Singapore is at the forefront of innovation in payments, and other markets in Asia and globally are likely to follow the suit.”

(Source: GlobalData)