Skip to Content

Preventing fraud in a real-time world

People making instant payments with their phones

When the New Payments Platform (NPP) arrives, it will position Australia as a global leader in real-time payments. As exciting as that is, as a financial institution there are an array of practical considerations that you need to take into account. Key among them is managing the potential for fraud.

While fraud prevention may seem like a daunting task, in Australia we are well positioned to do so. Our existing services, such as “pay anyone,” are already well established, and we lead the world in smartphone adoption. That’s significant because smartphones offer greater opportunity for security and identification, including in-app messaging and biometrics.

We also have the benefit of being able to draw on key learnings from those who have gone before us in real-time payments. By studying the experiences of countries like the UK, for example, we can glean important insights and apply them here.

In this paper, we will outline the key considerations that you need to be aware of around fraud and explain what the NPP and Cuscal are doing to help prepare.

The reality is that although the NPP isn’t inherently riskier than our current payments system, you still need to be vigilant. Fraudsters are always looking for new opportunities to make money, so they could be waiting for the NPP to go live to try to test how secure it is.

To minimise that potential risk, it’s essential that you are ready when the NPP goes live.

Contents of the whitepaper:

  1. Lessons learned from the UK’s Faster Payments Service
  2. Understanding the threat
  3. Addressing the problem of fraud and real-time payments
  4. Spotlight on artificial intelligence and fraud prevention
  5. Moving ahead with the NPP with confidence

Payments insights from Money 20/20 in Europe

map of Europe with flags

I recently returned from a study tour to the world’s largest fintech event, the Money 20/20 conference in Copenhagen. We also met with major banks in Poland, which has one of the fastest growing economies in Europe and a payments industry with similar challenges to those in Australia. I was joined on the trip by my colleagues Bianca Bates, Head of Client Services and Rob Bell, General Manager, Product & Service.

Here are my reflections on how financial institutions are responding to the changing payments sector in Europe.

The dual threats to European payments: global tech giants & fintechs
Traditional banks are facing significant challenges in Europe. On the one side, global tech giants such as Alibaba, Amazon, Apple, Google and Facebook are capitalising on their significant scale and consumer trust to grow their share of the finance value chain, particularly the relationship with the customer. On the other side, small fintechs are able to innovate much more quickly than banks.

The threat posed by global tech giants and small fintechs is growing with Payments Service Directive 2 (PSD2) coming into force in 2018. PSD2 mandates for financial institutions to make cardholder data accessible to third-parties. It will mean that the end-user will own their transaction data and be able to choose who sees and uses the information. This open data directive will promote competition and innovation in the payments sector, meaning it will be much easier for tech giants and fintechs to take market share from traditional banks.

The threats to large financial institutions presented by PSD2 in Europe could soon be seen in Australia, with the Australian Productivity Commission’s recent report on data availability and use favouring open data, and the resulting transformation of our financial system and economy. This makes the insights on how European banks are responding to the directive particularly pertinent to Australian banks.
European financial institutions are responding to these threats in four main ways:

1. Collaborate to fend off competition
We saw examples of strong collaboration in both Poland and Denmark in response to these emerging competitors.

Danish banks, through aggregator company Nets, launched a very successful real time payments system, RealTime24/7, in the domestic market in 2014. This is the equivalent of the New Payments Platform (NPP), launching in Australia later this year.

The faster payments platform implementation in Denmark saw strong collaboration across the industry – they did not compete on their front end applications or by customising the solution for each bank. All Danish banks share the real time payments app, MobilePay, which uses its faster payments platform. The system has 4 million users (out of a population of 5.5 million), and 7 out of 8 transactions are originated by the app, largely replacing cash transactions.

Danish banks have also enabled Bluetooth at POS terminals so customers can use their mobile to pay via the faster payments platform.

Collaborating to make the most of the faster payments platform and making its use easy for consumers has helped financial institutions in Denmark to retain market share.

2. Invest in innovation hubs outside of financial institutions
Many banks have responded to the threat posed by fintech innovation by creating their own ‘incubators’, but generally they are still unable to move as quickly as nimbler, smaller fintech companies. Many speakers at Money 20/20 believe that partnering with smaller fintechs, or buying them, is a more successful strategy for innovation than trying to replicate them within a financial institution.

We saw a different approach in Poland, where a group of Visa clients from across Europe established an innovation hub with €20m budget in order to drive innovation across the payments ecosystem.

3. Innovate fast to compete directly with tech giants
PKO Bank Polski, the market-leading bank in Poland, developed an app to allow POS and P2P payments. The app lets customers generate a code for paying at POS terminals, or withdrawing cash at ATMs (similar to cardless cash in Australia). They sold the app into a joint venture with some of their competitors to get 60-70% of the market share. This is an example of a financial institution seizing an opportunity for technology to disrupt the payments market before the entrance of international competitors.

4. Focus on customer experience
A major theme emerging from our meetings and the Money 20/20 conference was the importance of the customer journey experience. This is an area that the global tech giants excel at, and something that financial institutions are increasingly concentrating on.

We heard that removing friction from the customer experience was critical for engagement. The slightest friction in a transaction can result in it being abandoned. Tech giants like Apple and Alibaba are very good at reducing friction for consumers, and banks are playing catch up to stay competitive.

Overall it was a valuable trip to learn about the challenges facing European financial institutions and the varying success of strategies to respond to those challenges, with many learnings for the Australian payments industry.

By Lauren McCormack, Senior Manager, EFT & rediATMs

Real-time payments gets real with brands unveiled

A group of people sitting around a table making a faster payment

Real-time payments just got a whole lot realer with the two public-facing brands of the New Payments Platform announced today. Adrian Lovney, CEO of NPP Australia Limited, revealed in a recent interview that the first thing consumers are likely to notice when the service goes live is their bank inviting them to register for a PayID. The other new financial brand consumers can expect to see from October is Osko. With this combined public release of the Osko and PayID brands, financial institutions participating in the New Payments Platform can begin to think of the ways Australian consumers will soon interact with these affiliated brands via their personal banking experience.

The announcement of Osko and PayID raises a number of questions important to both the industry and, in time, the end user. In particular, I was curious to know how PayID and Osko relate to one another and, perhaps more importantly, why do we need both brands in the first place?

NPP infographic explaining PayID and Osko

Well, the industry has known for some time that BPAY’s overlay service was chosen as the first to be used in the New Payments Platform. It was identified as the initial way to showcase the New Payments Platform’s capabilities in as early as October 2015. The service’s brand promise has been well articulated from the outset: to provide businesses and consumers with an immediate, versatile and data-rich service to complete their everyday payments. The difference now is we know its public name: Osko.

How then does PayID fit within this scheme – how does it feature and what does it do that Osko cannot? Put simply, PayID is the brand name of the centralised addressing service that will enable direct funds transfer in an unprecedentedly personal and convenient, yet secure way. But this still leaves some wondering, how will it all work? PayID will work by linking financial accounts with recognisable and memorable pieces of information such as your phone number or email address. This will eliminate the need to select or re-enter bank account numbers without putting the security of your banking details and other information at risk.

Where then does PayID sit within the brand hierarchy of the New Payments Platform? There’s an easy way to conceive this, which is that PayID is the brand for the addressing service that can and will be used to power Osko (and other overlay services down the track too). In other words, PayID will store smart addresses for payments but Osko is the hero brand, for the first overlay service anyway, which everyone is going to use to make real-time P2P payments conveniently and securely.

It’s early days yet but I wonder what can be made of the two brand names. In particular, the first time I heard Osko, it struck me as slightly unusual. Then I considered the names of other leading brands and how they were first received when they launched in the market. Google and Uber, for example, are two brands that have achieved universal resonance, yet they probably didn’t mean anything to you at first. They certainly didn’t for me. Now, however, we find that in our thirst for knowledge in a digital age, we no longer search for something – instead, we Google it. Equally, rather than riding in a hired vehicle to get us from A to B, we simply Uber it.

While my predictive powers are not strong enough to pinpoint the ways (or precisely when) Australian consumers will begin to use Osko and PayID synonymously with making an instant payment, I think we’ve lived through enough examples which show how this might happen. When BPAY developed the Osko brand in conjunction with brand and marketing specialists, feedback from the test groups was very positive. In the time that I have used the new name in conversation, which has been for a little while now, it has really grown on me. It seems to be hitting the mark with others too.

What will really work in Osko’s favour is the open invitation it has created for BPAY and financial institutions to collaboratively shape its meaning. This reflects BPAY’s intention for Osko to be a blank canvas that allows industry participants to co-create the meaning of the new brand in the lead up to its launch.

I expect that this approach to building its brand identity will increase buzz and drive discussion around the new value it creates for Australian consumers. When I consider the New Payments Platform in its broadest context, I am mindful that up until now it has often been talked about in terms which highlight the revolutionary nature of its service.

While this is not misleading, there is another, simpler lens through which we can understand the New Payments Platform and its two public brands now that they have been released, which is that they will collectively close a current gap in the Australian payments ecosystem – the gap being our lack of a simple, convenient service available 24/7 for individuals and businesses to request and receive payments without having to disclose their personal banking details.

By Nathan Churchward, Senior Manager, Payments  

Six brilliant payment lessons from Europe

Departures board with capital cities on it and times

We recently took some of our clients on a whirlwind payments tour of London, Dublin, Stockholm and Edinburgh. Accompanying me were my colleagues Rachael Brigham and Zac Andrew and we also took some of our clients Matt Lobdell (Head of Strategy, CUA), Craig McMahon (COO, Teachers Mutual Bank), Chris Thornton (GM Product & Marketing, My State) and Kevin Kehoe (CFO, QTMB) along for the ride.

We learnt a lot about payments and about ourselves on the six-day tour (more than I can share in one blog!) but here are some of our highlights:

1.Incentivising customers to switch
While Australian FIs work to entice new customers, UK institutions are aggressively grabbing customers. Nationwide is attracting new customers by offering a GBP200 bonus payment to bank with them as well as high interest rates (5% on balances up to GBP 2500). Nationwide isn’t the only one snagging customers – Spanish-owned Santander not only offers high interest rates but gives 3% cashback to customers on household bills.

2. Europe’s open data laws could come to Australia
Australia’s recent Productivity Commission report on data access shows that we could be heading down the same path as Europe where 2018 will see the introduction of the Payments Service Directive 2 (PSD2). PSD2 mandates financial institutions to make cardholder data accessible to third-parties. It will mean that the end-user will own their own data and be able to choose who sees and uses this information. This move could be the first in a global shift.

3. Sweden’s cashless society is the way of the future
Sweden is incredibly ahead of the game when it comes to being cashless. Sweden’s average card usage per person puts them ahead of the rest of the world (with an average of 269 transactions per annum per person). A reflection of this shift is Sweden’s minimum age for debit card holders at just seven years of age! With cash payments making up just 20% of retail payments in Sweden compared to the European average of 71% this trend is only likely to continue. Visa Europe’s contactless payments trial at this year’s Eurovision Contest in Stockholm is definitely a sign of things to come.
Nordea, one of Sweden’s big four banks, is using an app-based loyalty program called Wrapp which has an impressive number of registered customers. Sweden also has its own answer to our New Payments Platform (NPP) called Swish. As of May 2016 half the Swedish population were ‘Swishers’. It’s a very useful case study for real-time payments in Australia.

4. Open loop’s potential to reduce cash usage
While the use of contactless is low in the UK compared to Australia, figures for commuters with an Oyster card on Transport for London’s (TfL) Underground paint a different picture. When 33% of Oyster PAYG users have already switched to contactless and over 1 million Visa journeys are conducted every weekday on TfL services, the potential for increasing contactless (and therefore cashless) travel is definitely there. In Australia, as cities move to open loop transport, opportunities for FIs to tap into this pool of contactless commuters means the possibilities to continue to reduce cash usage is huge. For example, could NSW’s Opal card become the next Octopus in Hong Kong? Watch this space.

5. Charities go cashless for spare change
If you’re anything like me you get this creeping sense of guilt when you see a charity collector shaking their tin and you don’t have any change. That’s now been solved. Visa, in conjunction with Save the Children, has developed a contactless handheld donation ‘tin’ in various forms including a face-to-face handheld terminal, a semi-attended desktop terminal and an unattended donation switch.

In Sweden Swish users can ‘swish’ a payment to their preferred charity all without reaching into their pockets.

6. Would you like a home loan with that?
Starting as a joint venture with the Royal Bank of Scotland (RBS) in 1997, Tesco Group bought out RBS in 2008 and today serves more than 7 million customer accounts and had an operating profit of over GBP 160M for 2015-2016.

As of August this year, Tesco Bank now offers its own mobile wallet – PayQwiq. It’s available in London and Edinburgh (so far) and enables users to earn loyalty points with their purchases (5 points for every GBP 4 spent). PayQwiq is in direct competition with leading mobile wallets by allowing shoppers to store their Tesco Clubcard and debit card information and pay up to GBP 250 in a single transaction (AUD$420). Tesco Bank’s formula is clearly working so keep an eye out for Coles and Woolworths replicating its model!

This trip was a whirlwind of four countries and eight flights, and it provided an enormous wealth of information.

It showed me that the Australian market can learn a lot from our European and British counterparts. It also taught me that while our population may be smaller, Australia definitely punches above its weight in terms of payments and should be proud of having one of the largest contactless markets in the world.

The idea that we must be willing to embrace change and payments technology was also reinforced during the trip. While the NPP may not happen overnight it will fundamentally change the way we make payments so we should be ready for it. Also using Sweden’s cashless model as an example we need to take technology in our stride. Change is, after all, as good as a holiday.

By Aaron Blackwell, Account Manager

Cuscal joins Hyperledger Project

Hyperledger Project logo
Sydney, 20 May 2016:
Cuscal was yesterday announced as one of eight new members to join the Hyperledger Project, the collaborative blockchain effort being led by the Linux Foundation. The Project has grown 70% in membership since February this year.

The Hyperledger Project aims to build a core blockchain that can be used in a variety of industry solutions including financial services, Internet of Things, supply chains, manufacturing and technology. Companies like IBM, Accenture, J.P. Morgan, Digital Asset, Intel and ANZ are already part of Hyperledger. R3, the company which leads a consortium of financial service businesses researching potential uses of blockchain, has a seat on Hyperledger’s board.

Commenting on the announcement, Brian Parker, General Manager, Emerging Business at Cuscal said:

“We’re very pleased to join the Hyperledger Project and be able to contribute our expertise in payments and real-time processing to an exciting project.

Blockchain feels a bit like the internet felt in its earliest days. It’s a genuinely new technology, with exciting potential and clear underlying value, but we don’t yet know exactly how that value will be realised. Distributed ledger technology has the potential to greatly improve legacy systems and processes and we believe that working collaboratively is the best way to achieve this goal.”

Read more about the Hyperledger Project.

Media contact
Jake Waddell  jwaddell@cuscal.com.au  0417 312 902

Economic benefits of NPP for financial institutions

This video explains the potential benefits to financial institutions that adopt the New Payments Platform (NPP).

Launching in Australia in 2017, the NPP will allow fast, versatile and data-rich payments between Australian financial institutions, consumers and businesses. The infrastructure will also support ‘overlay’ services that can be independently developed to offer consumers innovative and ground-breaking payment experiences.