AI Takes On ATO: OneSpan Risk Analytics

Feb 14, 2019 | Data, Security, Social Media

Featured article by Peter Kelley, the Kelley Group Two

Cybersecurity

Account Takeover (ATO) and New Account Fraud (NAF) are the top two types of fraud challenging financial institutions and the financial/merchant ecosystem. In the U.S. alone, ID fraud accounted for $16.8 billion dollars in fraud losses in 2017.

“Account takeover continues to grow rapidly and directly impact both financial institutions and their customers. The industry has to focus on neutralizing these bad actors quickly and effectively, and must have the ability to detect fraud in real-time,” said Julie Conroy, Research Director with the Aite Group.

It’s important to implement a fraud management solution that leverages machine learning-based risk analysis to identify suspicious activities and inconsistent customer behavior, she notes, both to strengthen customer relationships and reduce losses from ATO and NAF.

OneSpan has just launched its open AI-based Risk Analytics to help financial institutions thwart ATO and NAF.

During transactions, the cloud-based solution collects and analyzes data from devices, user behavior, transactions, digital channels and business applications, and creates a score that determines the risk associated with that transaction.

Risk Analytics is then able to take immediate action to either allow, review or block the transaction, based on intelligent workflows incorporating bank-defined security policies and rules.

According to the Javelin Strategy and Research 2018 Identity Fraud Study, ATO losses accounted for $5.1 billion dollars, a 120 percent increase from 2016, and 1.5 million consumers of existing account fraud had an intermediary account opened in their name first – a 200 percent increase as directly compared to the previous year.

“Wherever money and data flows, fraud will certainly follow,” said OneSpan CEO, Scott Clements. “While stopping fraud has become increasingly challenging because today’s threats keep evolving, it’s critical for financial institutions to take proactive measures and a layered approach to security to monitor, detect and block fraudulent transactions from happening before they occur.”

OneSpan was recently named 2018 Mobile Biometrics Platform Awards Leader by Javelin Strategy & Research. Its solutions are used by half of the top 100 global banks.

 

 

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more