Pub. 9 2019-2020 Issue 1

O V E R A C E N T U R Y : B U I L D I N G B E T T E R B A N K S - H E L P I N G C O L O R A D A N S R E A L I Z E D R E A M S July • August 2019 5 Travelers is committed to managing and mitigating risks and exposures, and does so backed by financial stability and a dedicated team – from underwriters to claim professionals – whose mission is to insure and protect a company’s assets. For more information, visit www.travelers.com or talk to your independent insurance agent about social engineering coverage. BY TRAVELERS O ne increasing claim trend we’ve seen at Travelers among financial institutions is a form of social engi - neering referred to as fraudulent instructions. In a bank’s case, fraudulent instruction occurs when an employee is tricked into transferring money from a customer’s account to somewhere else because a fraudster steals the customer’s identity and convinces the bank through emails or phone calls to move the funds. With the benefit of seeing multiple claim scenarios, we would like to share some of the best practices that can be used to prevent fraudsters frommaking your bank a victim. • Train your staff. The number one way to prevent fraudu- lent instructions is to have a well-trained staff that follows procedures, verifies a customer’s instructions by calling the customer at a pre-determined number, and questions things when they don’t look right. Your staff should not only under - stand the procedures but also why they are important. Train your staff not to deviate fromprocedures by taking shortcuts. • Deliver good customer service, butmake the custom- er prove who they are. Don’t hand the customer answers. In a recorded call we listened to, a bank employee was trying very hard to give the member excellent customer service but did so at the expense of the real customer. To questions such as “Are you still at 123Main Street?” and “Is your phone number still 555-5555?” the crook simply had to acknowledge that the information was correct. Staff should require the customer to authenticate their personally identifiable information rather than acknowledge what is on file. • Know your customer. If a bank employee thinks a wire request is unusual for a certain customer, they should be empowered to dig further. We had one claim where an 80-year-old customer requested a $750,000 draw from his home equity line of credit to be wired to Australia. When asked what the transfer was for, the purported customer said he was buying a rock quarry. Unusual requests should spark increased due diligence. • Escalate suspicion. Train your people that if they get a call that sounds suspicious, they should share it with others on the team. Just because one customer service representative wouldn’t complete a transaction doesn’tmean another attempt won’t be made. It is important to talk amongst yourselves. These fraudsters are diligent, so bank employees must be, too. A consistent pattern exists: Crooks don’t stop at just one attempt. They will keep calling back until they either get caught or there is no more money. • If a customer says they can’t be reached at the phone number on file, call it anyway. • Beware of urgency, poor grammar, the word “kindly,” and sentences that don’t make sense or use improper words. When these steps are taken and a socially engineered fraud - ulent instruction attempt fails, celebrate that success. If an employee prevents a fraudulent transaction, spread the news. Share the emailed instructions, discuss what was suspicious about it and post examples of fraudulent instructions. This helps the front-line team remember that attempts at fraudulent transactions are real and are constant. Bank employees must remain vigilant. n Fraudulent Instructions: Claims Are Increasing