Identification of Risks Encountered in Remote Identity Verification in Banking and Proposed Solutions

Year 2024, Volume: 48 Issue: 1, 243 - 276, 15.03.2024

Serdal Yıldırım

Abstract

The usage of digital banking and remote banking services is on the rise, emphasizing the importance for banks to prioritize technology integration. Banks recognizing the benefits offered by new technologies have the potential to save costs and attract more customers. Technological advancements have accelerated developments in digital banking applications, which aim to enhance the customer experience. As the prevalence of digital banking and remote banking services grows, the need for physical bank branches diminishes, leading to the development of various methods for customer acquisition.
Remote identity verification is crucial for ensuring security in banking and other online services. However, security vulnerabilities within this process may allow malicious individuals to commit crimes such as phishing. Artificial intelligence (AI) can provide an effective defense mechanism against such threats. Nevertheless, some banks still underutilize this technology or fail to sufficiently strengthen their security measures. This may lead to the emergence of advanced fraud methods, such as Deep Fake, in the future.
The recent rise of digital banking in Turkey has revolutionized access to financial services. With the establishment of these new digital banks and the adoption of remote authentication methods, customers can easily conduct banking transactions. Unlike the traditional banking model, digital banking offers customers access to services anytime, anywhere, providing them with independence and freedom. By reducing the need for physical bank branches, banks can deliver services more efficiently, which often reduces costs. This digitalization trend enables banks to be more competitive and offer faster and user-friendly experiences to customers. Overall, the development of digital banking in Turkey not only provides customers with an easier, faster, and more flexible banking experience but also increases operational efficiency and reduces costs for banks. This, in turn, expands access to financial services and enhances financial inclusion within society.
However, the use of remote banking services carries high risks, and managing these risks is crucial. Enhancing security measures and utilizing AI technologies can mitigate the risks associated with remote identity verification. Additionally, prioritizing customer satisfaction and providing a user-friendly process are essential. By focusing on digital banking and remote banking services, banks can improve technology integration, leading to potential cost savings and an increase in customer numbers. This study aims to assist banks in securely deploy remote identity verification methods.

Keywords

Digital Banking, Security, Remote Customer Acquisition, Remote Identity Verification, Artificial Intelligence.

Bankacılıkta Uzaktan Kimlik Tespitinde Karşılaşılan Riskler ve Çözüm Önerileri

Abstract

Dijital bankacılık ve uzaktan bankacılık hizmetlerinin kullanımı giderek artmaktadır ve bankaların teknoloji entegrasyonuna önem vermeleri gerekmektedir. Yeni teknolojilerin sunduğu faydaları fark eden bankalar, tasarruf etme ve müşteri sayısını artırma potansiyeline sahiptir. Teknolojik ilerlemeler ile dijital bankacılık uygulamalarındaki gelişmeler hızlanmıştır ve müşteri deneyimini geliştirmek hedeflenmektedir. Fiziksel banka şubelerine olan gereksinim azalırken, müşteri edinimi için farklı yöntemler geliştirilmektedir.
Bu makalede, bankacılık sektöründe uzaktan kimlik tespitiyle ilgili riskleri ve çözüm önerileri ele alınmaktadır. Uzaktan kimlik tespiti sürecinde yapay zekanın sağlayacağı güvenlik önlemlerine yeterince değinilmemesi, gelecekte Deep Fake gibi kötü niyetli kullanımların ortaya çıkmasına neden olabilir. Bu nedenle, bankaların güvenlik önlemlerini artırmaları ve yapay zekâ teknolojilerini kullanmaları önemlidir.
Son zamanlarda Türkiye'de dijital bankaların kurulması ve uzaktan kimlik tespiti yöntemlerinin kullanılmasıyla müşterilerin bankacılık hizmetlerine uzaktan erişimi sağlanmıştır. Bu dijitalleşme bankalar için maliyetleri azaltırken, müşterilere bağımsızlık ve özgürlük sağlamaktadır. Ancak uzaktan bankacılık hizmetleri kullanımı yüksek risk taşımaktadır ve bu risklerin yönetilmesi önemlidir. Bankaların güvenlik önlemlerini artırmaları ve yapay zeka teknolojilerini kullanmaları, uzaktan kimlik tespiti sürecindeki riskleri azaltabilir. Ayrıca, müşteri memnuniyetini ve kullanıcı dostu bir süreci sağlamak da önemlidir. Bankaların, dijital bankacılık ve uzaktan bankacılık hizmetlerine odaklanarak teknoloji entegrasyonunu geliştirmeleri, tasarruf etme ve müşteri sayısını artırma potansiyeline sahiptir. Bu çalışma, bankaların uzaktan kimlik tespiti yöntemlerini güvenli bir şekilde kullanmalarına yardımcı olmayı amaçlamaktadır.

Keywords

Dijital Bankacılık, Güvenlik, Uzaktan Müşteri Edinimi, Uzaktan Kimlik Tespiti

References

• Alomaliye (2023). Uzaktan ve Şubeden Müşteri Edinimi İstatistikleri. https://www.alomaliye.com/2023/04/11/uzaktan-ve-subeden-musteri-edinimi-istatistikleri-mart-2023/. Son erişim tarihi, 15.11.2023.
• Arjun R vd. (2021). Developing banking intelligence  in  emerging markets: Systematic review and agenda. Int. J. Inf. Manag. Data Insights, vol. 1, no. 2, p. 100002, 2021.
• Apple (2023). iPhone veya iPad Pro’nuzda Face ID’yi kullanma. Erişim: 16.05.2023. https://support.apple.com/tr-tr/HT208109. Son erişim tarihi, 15.11.2023.
• Aydin M vd. (2023). A Fusion-Based Deep Neural Networks Approach for Face Liveness Detection. International Conference on Innovations in Intelligent Systems and Applications (INISTA), 20-23 September 2023. 10.1109/INISTA59065.2023.10310519.
• Balkan H (2021). Dijital (Şubesiz) Bankaların Regülasyonu. Bankacılar Dergisi, Sayı (Vol. 118). https://orcid.org/0000-0001-8032-9866.
• Banerjee S (2015). From cash to digital transfers in India: The story so far. Customer-Centricity for Financial Inclusion brief. Washington, DC, World Bank, pp.1–4.
• Bankid  (2023). Digital ID card in BankID. Erişim: 25.04.2023. https://www.bankid.com/en/foretag/digital-id-card. Son erişim tarihi, 15.11.2023.
• Belov A V ve Zagumennov P D (2019). Designing Algorithms for Evaluating the Effectiveness of Remote Banking Systems. Journal of Accounting and Finance (Vol. 19, Issue 9).
• Beybur M (2021). Şubesiz Dijital Bankacılık ve Türk Bankacılık Sektörü İçin Öneriler. Ankara Hacı Bayram Veli Üniversitesi İktisadi ve İdari Bilimler Fakültesi Dergisi. 24/1 (2022) 286-303.
• Chajkina E V vd. (2018). Innovative technologies as a factor of competition in the Russian banking market. Nauchnyi vestnik: 7nansy, banki, investitsii, no.4, pp.114–121.
• CFO (2023). Türkiye Fintek Ekosistemi Durum Raporu. https://www.cbfo.gov.tr/turkiye-fintek-ekosistemi-durum-raporu. Son erişim tarihi, 20.06.2023.
• Dağıdır Çakan C vd. (2022). A New Approach in Banking Branchless (Digital) Banking and Customer Acquisition: Case Study of Kuveytturk Bank. Finans Ekonomi ve Sosyal Araştırmalar Dergisi. Year 2022, Volume: 7 Issue: 1, 177 - 192, 31.03.2022. https://doi.org/10.29106/fesa.1059930.
• Digalaki E (2022). The impact of artificial intelligence in the banking sector & how AI is being used in 2022. https:// www. businessinsider. com/ ai- in- banki ng- report? r= US& IR=T.
• ENISA (The European Union Agency for Cybersecurity) (2021). Remote ID Proofing -Analysis of Methods to Carry Out Identity Proofing Remotely. Erişim: 12.05.2023. https://www.enisa.europa.eu/publications/enisa-report-remote-id-proofing
• Etnews (2018). Woori Bank to Be the first South Korean Commercial Bank to Launch a PC Version of Bank Sign. Erişim: 25.04.2023. http://english.etnews.com/20181008200002.
• Ezrokh Y S (2020). Problems of establishing the practice of remote identification of clients in the Russian banking system (economic aspects). Vestnik Sankt-Peterburgskogo Universiteta. Ekonomika. 36 (2), 266–286. https://doi.org/10.21638/spbu05.2020.205.
• Fares O H vd. (2022). Utilization of artificial intelligence in the banking sector: a systematic literature review. Journal of Financial Services Marketing. https://doi.org/10.1057/s41264-022-00176-7.
• FINMA (Swiss Financial Market Supervisory Authority) (2016). Circular 2016/7 Video and Online Identification: Due diligence requirements for client onboarding via digital channels. https://www.finma.ch/en/~/media/finma/dokumente/rundschreiben-archiv/2016/rs-16-07/finma-rs-2016-07.pdf?la=en. Son erişim tarihi, 25.04.2023.
• FMA (Regulation of the Financial Market Authority) (2017). Online Identification Regulation. https://www.fma.gv.at/download.php?d=2665. Son erişim tarihi, 25.04.2023.
• Gao M vd.   (2014). Fingerprint sensors in mobile  devices. Paper presented at the 2014 9th IEEE Conference on Industrial Electronics and Applications.
• Gorgani G (2016). The effect of e-banking on bank customers’ deposits. International Journal of Humanities and Cultural Studies (IJHCS). ISSN 2356-5926, 1(1), 2231-2246.
• HMB (Türkiye Cumhuriyeti Hazine ve Maliye Bakanlığı) (2021). Ekonomi Reformları. https://ms.hmb.gov.tr/uploads/2021/03/Ekonomik-Reformlar-Kitapcigi.pdf. Son erişim tarihi, 20.05.2023.
• Hollister S (2018). Amazon facial recognition mistakenly confused 28 Congressmen with known criminals. https://www.cnet.com/news/privacy/amazon-facial-recognition-thinks-28-congressmen-look-like-known-criminals-at-default-settings/.
• iBeta (2023). ISO 30107-3 Presentation Attack Detection Test Methodology And Confirmation Letters. https://www.ibeta.com/iso-30107-3-presentation-attack-detection-confirmation-letters/. Son erişim tarihi, 20.08.2023.
• Indriasari E vd. (2019). Digital Banking Transformation: Application of Artificial Intelligence and Big Data Analytics for Leveraging Customer Experience in the Indonesia Banking Sector,” in Proceedings - 2019 8th
• International Congress on Advanced Applied Informatics, IIAI-AAI 2019, 2019, pp. 863–868.
• Indriasari E vd. (2022). Intelligent Digital Banking Technology and Architecture: A Systematic Literature Review. International Journal of Interactive Mobile Technologies, 16(19), 98–117. https://doi.org/10.3991/ijim.v16i19.30993.
• Jain A K vd. (2006). Biometrics: a tool for information security. IEEE transactions on information forensics and security, 1(2), 125-143.
• Jama A Y vd. (2019). Cyber physical security protection in online authentication mechanisms for banking systems. Advances in Intelligent Systems and Computing, 857, 1021–1031. https://doi.org/10.1007/978-3-030-01177-2_74.
• Juniper Research. (2020). Digital Banking Users to Reach 2 Billion This Year, Representing Nearly 40% of Global Adult Population. www.juniperresearch.com/press/digital-banking-users-to-reach-2-billion. Son erişim tarihi, 29.04.2023.
• Keleş M K ve Demirel Ş (2020). Republic of Turkey Identity Card (TCKK): Banking Use Case in Authentication & Customer Onboarding. ACM International Conference Proceeding Series, 35–40. https://doi.org/10.1145/3397125.3397126
• Kemp S (2021). Digital 2021: The Latest Insights Into the State of Digital. Erişim: 13.05.2023. https://wearesocial.com/uk/blog/2021/01/digital-2021-the-latest-insights-into-the-state-of-digital/.
• Khan A (2018). National Identity Card: Opportunities and Threats. Journal of Asian Research, vol.2, no.2, pp.77–85.
• Koenig-Lewis N vd. (2010). Predicting young consumers’ take up of Mobile Banking Services. International Journal of Bank Marketing, 28(5), 410–432. https://doi.org/10.1108/02652321011064917.
• Korobov Y (2017). Global Banking: Transformation, Innovation & Competition. Paper presented, in Proceedings of the SHS Web of Conferences. Innovative Economic Symposium 2017, 19 October 2017, (IES2017), Czech Republic, 39, 01012.
• Kozlova N P ve Ustinova E V (2019). Digitization of the banking sector: trends and cases of development of the Russian market. Ekonomika. Biznes. Banki, no.1, pp.18–34.
• Mamadiyarov Z (2020). Prospects For The Development Of Remote Banking Services In The Context Of Bank Transformation. The American Journal of Applied Sciences, 02(07), 108–118. https://doi.org/10.37547/tajas/Volume02Issue07-18
• Mamadiyarov Z (2021). Analysis of factors affecting remote banking services in the process of bank transformation in Uzbekistan. Financial and Credit Activity: Problems of Theory and Practice, 1(36), 14–26. https://doi.org/10.18371/fcaptp.v1i36.227607
• NTV (2022). 10 kişiden 8’i çipli kimlik karta geçti. https://www.ntv.com.tr/turkiye/10-kisiden-8i-cipli-kimlik-karta-gecti,7VG7ZGeJYEOat0-HsHZMRQ. Son erişim tarihi, 13.05.2023.
• NVİ (Nüfus ve Vatandaşlık İşleri Genel Müdürlüğü). TC Kimlik Kartı (Online Access). https://www.nvi.gov.tr/tc-kimlik-karti. Son erişim tarihi, 20.05.2023.
• OneConnect (2021). OneConnect Announces Partnership with Indonesia-based Bank Mayapada, to Enable Digital Onboarding through a Comprehensive Suite of Innovative Solutions. https://www.prnewswire.com/news-releases/oneconnect-announces-partnership-with-indonesia-based-bank-mayapada-to-enable-digital-onboarding-through-a-comprehensive-suite-of-innovative-solutions-301417400.html. Son erişim tarihi, 20.08.2023.
• RG (Resmî Gazete) (2020). Bankaların Bilgi Sistemleri ve Elektronik Bankacılık Hizmetleri Hakkında Yönetmelik (2020, 15 Mart). Resmî Gazete (Sayı: 31069). Erişim adresi: https://www.resmigazete.gov.tr/eskiler/2020/03/20200315-10.htm
• RG (Resmî Gazete) (2020). Bazı Kanun ve Kanun Hükmünde Kararnamelerde Değişiklik Yapılması Hakkında Kanun (2020, 18 Haziran). Resmî Gazete (Sayı: 31167). Erişim adresi: https://www.resmigazete.gov.tr/eskiler/2020/06/20200626-1.htm
• RG (Resmî Gazete) (2021). Suç Gelirlerinin Aklanmasının ve Terörün Finansmanının Önlenmesine Dair Tedbirler Hakkında Yönetmelikte Değişiklik Yapılmasına Dair Yönetmelik (2021, 24 Şubat). Resmî Gazete (Sayı: 31405). Erişim adresi: https://www.resmigazete.gov.tr/eskiler/2021/02/20210224M2-3.pdf
• RG (Resmî Gazete) (2021). Bankalarca Kullanılacak Uzaktan Kimlik Tespiti Yöntemlerine ve Elektronik Ortamda Sözleşme İlişkisinin Kurulmasına İlişkin Yönetmelik (2021, 1 Nisan). Resmî Gazete (Sayı: 31441). Erişim adresi: https://www.resmigazete.gov.tr/eskiler/2021/04/20210401-7.htm.
• RG (Resmî Gazete) (2021). Mali Suçları Araştırma Kurulu Genel Tebliği (2021, 30 Nisan). Resmî Gazete (Sayı: 31470). Erişim adresi: https://resmigazete.gov.tr/30.04.2021.
• RG (Resmî Gazete) (2021). Dijital Bankaların Faaliyet Esasları ile Servis Modeli Bankacılığı Hakkında Yönetmelik (2021, 29 Aralık). Resmî Gazete (Sayı: 31704). Erişim adresi: https://www.resmigazete.gov.tr/eskiler/2021/12/20211229-6.htm.
• Sardana V ve Singhania S (2018). Digital technology in the realm of banking: A review of literature. International Journal of Research in Finance and Management, 1(2): 28-32. https://www.allfinancejournal.com/article/view/12/1-2-8.
• SBB (Türkiye Cumhuriyeti Cumhurbaşkanlığı Strateji ve Bütçe Başkanlığı) (2019). On Birinci Kalkınma Planı (2019-2023). https://www.sbb.gov.tr/wp-content/uploads/2022/07/On_Birinci_Kalkinma_Plani-2019-2023.pdf. Son erişim tarihi, 20.06.2023.
• Shamah J (2018). The role of financial institutions in delivering identity-as-a-service for governments, Web Fraud Prevention and Online Authentication Market Guide 2017/2018, Thursday 8 March 2018.
• Sheshasaayee A ve Sumathy D. (2017). A Framework to Enhance Security for OTP SMS in E-Banking Environment Using Cryptography and Text Steganography. Proceedings of the International Conference on Data Engineering and Communication Technology, Advances in IntelligentSystems and Computing, 469.
• Sova O vd. (2021). Development of remote identification the enterprises by digital technologies. SHS Web of Conferences, 120, 02004. https://doi.org/10.1051/shsconf/202112002004
• Stoiko O (2020). The problems of economy, 2(44), 356-364.
• Surane J (2021). Developers Are the New Bankers’: Wells Fargo Analysts Predict Wave of Job Cut. Erişim: 13.05.2023. https://www.bloomberg.com/news/articles/2021-09-28/-developers-are-the-new-bankers-mayo-predicts-wave-of-job-cuts
• TBB (Türkiye Bankalar Birliği) (2021). Uzaktan ve Şubeden Müşteri Edinimi İstatistikleri. Türkiye Bankalar Birliği: https://www.tbb.org.tr/tr/banka-ve-sektor-bilgileri/istatistiki-raporlar/Uzaktan_ve_Subeden_Musteri_Edinimi_Istatistikleri/6154. Son erişim tarihi, 29.08.2023.
• TBB (Türkiye Bankalar Birliği) (2023). Uzaktan ve Şubeden Müşteri Edinimi İstatistikleri. Türkiye Bankalar Birliği: https://www.tbb.org.tr/tr/bankacilik/banka-ve-sektor-bilgileri/istatistiki-raporlar/59. Son erişim tarihi, 29.08.2023.
• Teemu R (2010). Electronic identity in Finland: ID cards vs. bank IDs, IDIS (2010) 3:175–194, DOI 10.1007/s12394-010-0049-8
• Teknomers (2023). UIDAI, sağlam parmak izi tabanlı Aadhaar kimlik doğrulaması için yeni güvenlik mekanizmasını kullanıma sunuyor. https://teknomers.com/2023/02/28/uidai-saglam-parmak-izi-tabanli-aadhaar-kimlik-dogrulamasi-icin-yeni-guvenlik-mekanizmasini-kullanima-sunuyor/. Son erişim tarihi, 25.04.2023.
• Toshtemirovich Mamadiyarov Z (2021). Risk Management In the Remote Provision of Banking Services In The Conditions of Digital Transformation of Banks. ACM International Conference Proceeding Series, 311–317. https://doi.org/10.1145/3508072.3508119.
• Türedi D C (2023). Uzaktan Bankacılık Başvuru ve Müşteri Edinimi İstatistikleri. Fibabanka.
• Ullah M (2022). Khushhali Microfinance Bank begins digital account onboarding. https://dnd.com.pk/khushhali-microfinance-bank-begins-digital-account-onboarding/261469.
• Velioğlu S vd. (2019). A New Approach to Cryptographic Hashing: Color Hidden Hash Algorithm. Proceeding of 2019 International Conference on Digitalization (ICD).
• Wassan Abdullah A (2020). Digital payment and banking adoption research in Gulf countries: A systematic literature review, Int. J. Inf. Manage., 2020.
• Yang JC (2010). Biometrics verification techniques combining with digital signature for multimodalbiometrics payment system. In: 2010 International Conference on Management ofe-Commerce and e-Government.
• Zadeh M J ve Barati H (2019). Security improvement in mobile baking using hybrid authentication. ACM International Conference Proceeding Series, 198–201. https://doi.org/10.1145/3369114.3369151.