Barclays claims card-reader has eliminated fraud

By Matthew Broersma, ZDNet UK
Monday, July 21, 2008 10:25 AM

Barclays claims to have reduced online fraud to zero among users of its two-factor authentication system, PINsentry.

The United Kingdom's third-largest bank said this week that it has distributed the card reader, made by Amsterdam-based Gemalto, to more than one million customers, and that none have been hit by fraud.

Takeup of the devices has been higher than expected, exceeding 30 percent of the online user base, Barclays said.

The bank chose PINsentry because of its similarity to chip and PIN, rolled out in 2006 across U.K. retailers.

Barclays began distributing the authentication devices in the second half of last year, initially sending out 500,000 units, becoming the first U.K. bank to distribute end-user chip and PIN terminals. Any user wishing to set up an online transfer to a new third-party account, other than a standard supplier such as a utility company, is required to use the system.

Barnaby Davis, director of electronic banking at Barclays, said last year that the arrangement was intended to limit the damage that could be caused by someone using stolen bank details. Barclays digital banking director Sean Gilchrist said the system was designed to be easy to use and highly secure. "Adoption of the PINsentry reader by one million cardholders in one year is a clear demonstration that we made the right choice," he stated.

Not everyone agrees that PINsentry is as secure as Barclays claims. The devices are still vulnerable to sophisticated man-in-the-middle attacks, said Sophos senior technology consultant Graham Cluley at the time of the rollout. "These chip and PIN devices do not prevent all identity theft--hackers can still steal screenshots of what you are doing on your PC, and find out information about you and your account which could potentially be used for fraudulent purposes," he said.

Some users have also complained about the necessity of carrying the device with them, leading one user to hack PINsentry to send new access codes to his mobile phone via SMS.

Earlier this month Barclays offered all its online customers free Kaspersky security software, including parental controls as well as protection from spam, adware, spyware and viruses.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Windows Server 2008 iSCSI multiple connected session modes

Enterprise Servers & Storage

For administrators using Windows Server 2008's iSCSI initiator, selecting the right connection policy is critical. Rick Vanover explains the options for the ease-of-entry storage protocol.


Read more »


 
Virtualize your way to cost savings
Build an infrastructure that is flexible, scalable, and economical, as you strive to become a truly agile business.

Red Hat Outlines Its Virtualization Strategy and Roadmap for 2009
» Watch the video




NUS Enterprise: An 'incubator without walls'

Blog thumbnail

Almost everyone has had dreams of owning their own shop, but most of us know also that it takes a fair amount of resources to open a new business, and..... by Eileen Yu

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web