Online Fraud Is A British Security Nightmare

Fraud in Britain has risen to a level where it poses a “national security threat”, according to the banking industry, with £754m stolen from bank customers during the first half of this year, a 30% rise on the same period in 2020.  

UK MPs are calling on the Government to legislate on mandatory reimbursement by banks to victims of authorised push payment fraud and new rules to bring the technology industry exert control over social media scams. A new report by the parliamentary Treasury Select Committee is calling on the Government to "push harder and act faster on the growing fraud epidemic".

The Royal United Services Institute (RUSI) has now reported that fraud should now be seen as a national security issue and is costing £190b a year. UK Finance said fraudsters had capitalised on the coronavirus pandemic, with criminals targeting children as young as 14 via social media to become money mules. Britain's intelligence agencies and the police should play a greater role in responding, according to the RUSI Report, which says that the amount of fraud against the private sector has had a negative impact on the UK as a place to do business.

The Crime Survey for England and Wales found 3.7 million reported incidents in 2019-20 of members of the public being targeted by credit card, identity and online fraud.

The private sector takes the biggest financial losses. One estimate from 2017 put the cost of fraud to businesses at £140bn. However, the losses go beyond the financial, the Survey authors say. "Fraud has the potential to disrupt society in multiple ways, by psychologically impacting individuals, undermining the viability of businesses, putting pressure on public services, fuelling organised crime and funding terrorism." The report cites evidence that terrorist groups and lone actors turn to fraud in order to finance their activities. In one case, eight supporters of the Islamic State group were convicted of defrauding UK pensioners out of more than £1m, which was alleged to be used in part to fund travel from the UK to Syria. 

The digitisation of everyday life has been accelerated by Coronavirus has increased the risks, with organised crime groups showing increased sophistication in their tactics. "The UK has become a target destination for global fraudsters," the RUSI argues. But the extent to which international criminals focus on the UK is hard to gauge, because intelligence agencies have not traditionally focused on the issue. 

Classifying fraud as a national security issue would help ensure the right level of resourcing and prioritisation, the authors argue. 

RUSI recommend more focused intelligence direction from the National Security Council, including greater tasking for GCHQ as well as the National Crime Agency to understand the issue. They call for better information-sharing and use of data analytics, as well as more money and attention from police forces to address what they call a "responsibility vacuum".

The RUSI report makes a number of recommendations for policymakers to consider. At its core, it advocates that the National Security Council commissions a whole-of-system public-private fraud strategy, including a local networked criminal justice response, pathways for cross-government collaboration, and a clearer role for the financial, e-commerce and telco sectors.

Gov.UK:      Computer Weekly:      RUSI:       Finextra:       Guardian:       BBC:  

You Might Also Read: 

Britain's Cyber Security Strategy Focuses On Resilience:
 

« A Quick Guide To Remote Code Execution (RCE)
Most SMEs Do Not Provide Cyber Security Training »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

AlgoSec

AlgoSec

The AlgoSec platform enables the world’s most complex organizations to gain visibility, reduce risk and process changes at zero-touch across the hybrid network.

Evidian

Evidian

Evidian, a Bull Group company, is the European leader and one of the major worldwide vendors of identity and access management software.

Logscape

Logscape

Logscape provides a big data analytical tool for log file analysis and operational analytics.

Exida

Exida

Exida is a leading product certification and knowledge company specializing in industrial automation system safety, security, and availability.

Assured Enterprises

Assured Enterprises

Assured Enterprises provides comprehensive cyber risk identification, management and mitigation across all platforms.

CERT.lu

CERT.lu

CERT.lu is an initiative to enhance cyber security practices and techniques, and support security professionals in Luxembourg.

Kymatio

Kymatio

Kymatio are pioneers in Artificial Intelligence applied to adaptive staff strengthening, cultural change and predictive internal risk analysis.

NDK InfoSec

NDK InfoSec

NDK InfoSec is a specialist Information Security and Cyber Security search firm. We're not just a security function in a larger generalist recruitment company.

Pathway Communications

Pathway Communications

Established in 1995, Pathway Communications – is part of the Pathway Group of Companies, a Canadian IT Managed Services organization.

Stacklet

Stacklet

Stacklet provides cloud governance as code platform that accelerates how Global 2000 manages its security, asset visibility, operations, and cost optimization policies in the cloud.

Valtix

Valtix

Valtix is the first and only multi-cloud network security platform delivered as a service that enables cloud teams to meet the most stringent security requirements in a cloud-first & simple way.

InfoSec4TC

InfoSec4TC

InfoSec4tc is an online Information Security Courses, Training, and Consultancy provider.

ShellBoxes

ShellBoxes

ShellBoxes are a leading Web3 company focused on providing top-notch blockchain security and development services.

Worksent Technologies

Worksent Technologies

Worksent is a Trusted white-label offshore support partner for MSPs and MSSPs.

Locket Cybersecurity

Locket Cybersecurity

Locket’s certified students provide pro-bono security audits for small and medium-sized businesses in the Chicagoland area.

KIT365

KIT365

KIT365 aim to protect organisations against cyber security attacks, by mitigating the risk to their systems and information, and protecting their data and reputation.