Privacy Intrusiveness in Financial-Banking Fraud Detection

Abstract

Specialty literature and solutions in the market have been focusing in the last decade on collecting and aggregating significant amounts of data about transactions (and user behavior) and on refining the algorithms used to identify fraud. At the same time, legislation in the European Union has been adopted in the same direction (e.g., PSD2) in order to impose obligations on stakeholders to identify fraud. However, on the one hand, the legislation provides a high-level description of this legal obligation, and on the other hand, the solutions in the market are diversifying in terms of data collected and, especially, attempts to aggregate data in order to generate more accurate results. This leads to an issue that has not been analyzed yet deeply in specialty literature or by legislators, respectively, the privacy concerns in case of profile building and aggregation of data for fraud identification purposes and responsibility of stakeholders in the identification of frauds in the context of their obligations under data protection legislation. This article comes as a building block in this direction of research, as it contains (i) an analysis of existing fraud detection methods and approaches, together with their impact from a data protection legislation perspective and (ii) an analysis of respondents’ views toward privacy in case of fraud identification in transactions based on a questionnaire in this respect having 425 respondents. Consequently, this article assists in bridging the gap between data protection legislation and implementation of fraud detection obligations under the law, as it provides recommendations for compliance with the latter legal obligation while also complying with data protection aspects.

Integrating Individual Factors to Construct Recognition Models of Consumer Fraud Victimization

“…Referring to our recognition models, the accuracy of fraud detection may be improved. Notably, similar to fraud detection, our recognition models also rely on consumers’ demographic data and financial data, so privacy intrusiveness should be considered when collecting information [ 61 ].…”

The Role of Blockchain in Finance Beyond Cryptocurrency: Trust, Data Management, and Automation

“…For instance, banking transactions, investment-related information, and personal credit histories contain a significant set of private information that is not supposed to be publicly disclosed. If this private information is compromised, this can lead to significant security threats, such as identity thefts [86], fraudulent activities [87], or unauthorized access to the systems that will affect the data security of the financial ecosystems. In addition, regulatory compliance [88] and adherence to the personal data protection standards become a primary requirement for financial institutions to secure client confidentiality.…”

Cybercrime: A systematic review of the literature

“…Usurpation: [15], [25], [29], [40], [42], [70], [72; Sabotage: [16], [18], [20]; Cyber harassment [21], [49], [57]; Fraud: [23], [24], [27], [39], [48], [51], [53], [9], [64]; Scam: [23], [26], [28], [46], [52], [64]; Identity theft: [25], [37], [55], [56], [58]; Money laundering: [30], [31];…”