TLDR: Financial institutions across Asia are rapidly enhancing their defenses against a new wave of AI-enabled scams and cyberattacks. Strategies include advanced AI-powered fraud detection, multi-layered authentication, and strengthened public-private partnerships. Experts highlight that human behavior remains the primary vulnerability, with fraudsters increasingly targeting customers directly through hyper-personalized and convincing schemes. The industry is moving towards ‘pre-KYC’ risk assessment and emphasizing ecosystem-wide collaboration to combat these evolving threats.
Financial institutions throughout Asia are confronting an unprecedented surge in AI-enabled scams and sophisticated cyberattacks, necessitating a fundamental shift in their defensive strategies. The response involves a multi-pronged approach, integrating layered authentication, cutting-edge AI-powered fraud detection systems, and robust public-private partnerships aimed at preserving trust in the increasingly digital financial landscape.
According to Tobias Gondrom, Chief Information Security Officer at UOB, the evolution of customer interaction, from PCs to mobile phones and potentially even watches, has amplified reliance on the digital world. This shift has inadvertently created new vulnerabilities. Gondrom notes, “Customers have moved from a PC to their mobile phone only, and maybe in the future, to only a watch… you rely even more on this digital world.” He further explains that while banks have significantly bolstered their internal security, making them “very hard to hack,” attackers are now exploiting weaker links within the broader financial ecosystem, targeting merchants and customers directly.
Matthew DeLauro, President of SEON, highlights that the relentless pursuit of digital convenience has inadvertently expanded these vulnerabilities. He observes, “Big companies are trying to act small, and small companies are trying to act big… everyone’s racing towards the middle ground… high-velocity digital surfaces.” The proliferation of AI-enabled fraud networks operating across platforms like Telegram and the dark web has led to attacks that are “hyper personalised and more convincing, and the money moves a lot faster.” DeLauro emphasizes that customers, who often manage funds across dozens of applications, have become “the softest target.”
Pieter Franken, Co-founder of the Global Finance & Technology Network, illustrated the rapid escalation of these threats by recounting a complex man-in-the-middle scam in the Philippines that led to account freezes and a temporary bank run. He stated, “It shows how these things can play up really, really fast,” underscoring the domino effect of misinformation in a digitized ecosystem.
In response, financial institutions are innovating their fraud prevention mechanisms. DeLauro described a shift from traditional Know Your Customer (KYC) processes to “pre-KYC,” where risk assessment begins even before a customer formally engages with the system. This involves assessing a customer’s “digital footprint… very early on and start putting customers into risk cohorts,” making it harder for fraudsters to predict and exploit verification processes.
Mastercard is also adopting a comprehensive, layered security approach. Aditi Sawhney, Senior Vice President for Security Solutions, detailed their strategy: “We use everything, including AI, biometrics, tokenisation… and behavioral analytics all to secure the transaction.” She added that Mastercard’s Decision Intelligence Pro leverages “machine learning and now even generative AI to actually find fraud patterns before they happen.” Complementary solutions like passkeys, passwordless authentication, and dynamic CVVs are being deployed to diminish the value of stolen credentials.
Despite these technological advancements, human behavior remains the most significant vulnerability. Gondrom points out that “95% of the time it’s not really a hack. The customer was tricked to transfer the money… he thought he can make a lot of return… or he found the love of his life.” Kathleen Gan, HSBC’s Chief Risk & Compliance Officer, confirms that these scams transcend demographics, noting, “It’s not just the elderly that get scammed… people sort of attack by preying on human factors.”
The rise of deepfakes is also fueling an expansion of company-level fraud. Some markets have resorted to implementing significant friction in transactions to counteract this. Franken cited Japan’s long-standing “It’s me” impersonation scams, which led to ATMs requiring multiple confirmation prompts, such as “Is there somebody behind you? Did somebody call you to do this?” While effective, such measures highlight the inherent tension between stringent security and seamless customer experience.
Industry leaders unanimously agree that no single entity can tackle these complex risks in isolation. Sawhney emphasized, “There is no one solution or one party who can solve the problem, and you’re only as secure as your weakest link.” Gan further stressed the critical need for international data-sharing and proactive cooperation with upstream platforms like telecom and social media, where many scams originate. She concluded, “Resiliency in the ecosystem is what we really need to focus [on]… across the value chain.”
Also Read:
- Regulators Urge Vigilance Against AI-Driven Financial Scams in Nigeria
- Financial Sector Accelerates AI Agent Deployment for Fraud Prevention and Application Processing, New Supervisory Roles Emerge
Looking ahead, the financial sector anticipates new challenges from AI-driven impersonation and autonomous agents. Gondrom warns, “You can’t trust the voice anymore. You can’t trust the video anymore. The only thing you can trust is an authenticated channel,” underscoring the imperative for secure, verified communication channels in the future.
