4 ms·
> Not only do you need 1 (or more) BO or Senior BO PINs to verify the send That doesn't sound impressive at all by modern standards. At the very least they sho
by Tabular-Iceberg 5y ago
> Not only do you need 1 (or more) BO or Senior BO PINs to verify the send
That doesn't sound impressive at all by modern standards. At the very least they should have some kind of challenge-response scheme.
- atdrummond 5y agoThat would be easily implementable in a bank's SWIFT gpi software as that system gains traction. Probably doesn't add any value in the current system as the recipient as no way to confirm the challenge-response scheme was actually completed as would be implied (beyond, perhaps, coordination between sending and receiving institutions outside SWIFT proper). Although I could be simply not sufficiently creative enough. The bigger point I should have made is that most send fraud doesn't actually occur on SWIFT and is conducted using falsified documents to give the impression of a correct send, typically to get funds released before the fraud is revealed. It relies much more on social engineering than any kind of actual systems hacking skill.