Introducing The Safe Banking Initiative

Financial institutions must adopt new safeguards in 2005

04-dec-a01.jpg

We interrupt the regularly scheduled newsletter for an important bulletin: The industry1 MUST adopt stricter online authentication and monitoring tools or risk a damaging backlash against online banking and payments. To help spur innovation on the security front, we are launching a new effort called the Safe Banking Initiative, or SBI for short. We hope to create an Underwriters Lab (UL) type seal of approval for financial institutions to display on the websites and other marketing material.

BAI Retail Delivery 2004

On the way home from BAI’s Retail Delivery, I always try to reflect on the “themes” from this influential industry conference. This year it was all about integration: interbank (A2A) transfers integrated with bill payment; ATMs integrated with check processing; branches integrated with online banking; everything integrated with industrial strength CRM systems. 

My biggest aha! occurred at an unlikely spot. Normally, I skip the hardware displays with their legions of enthusiastic ATM salespeople, and head straight for the booths in the back where I always learn something from the online pioneers. This year my most memorable conversations were with Hill Ferguson, Melanie Flanigan, and the whole crew from Yodlee on the bus back to our hotel; Neil Platt and Sanjeev Dheer from CashEdge on the trade-show floor as they landed a major new bank account; and as always, catching up with long-time industry visionary Matt Lawlor from Online Resources.

But this year, thanks to an effective pitch from its Williams Mills rep, Jamie Stephenson, I found myself chatting with Miles Busby, founder of Source Technologies www.sourcetech.com  about his vision of the future branch. Think airport check-in, circa 2004, where rows of touch-screen kiosks greet flyers, run them through the check-in process, and spit out boarding passes. One or two attendants assist with checked baggage and answer questions posed by perplexed travelers using self-service for the first time2.

 

1We’re referring specifically to U.S. banks; many major banks outside the U.S. have already added rigorous and highly effective authentication processes; one major bank familiar to us has only lost a few thousands dollars year-to-date. 

2Alaska Airlines, the first airline to offer kiosk check-in, then later Web-based check-in, is considering eliminating the ticket counter altogether, a concept it is testing in Anchorage.

A Real Automated Teller Machine

Fast-forward to the bank branch of 2007.  Customers walk in the door and head directly to teller row, no lines. After swiping an ATM card and entering a PIN at terminals built into the counter, customers feed paper checks directly into the deposit slot. Instantly an image of the check appears on screen along with the amount of the deposit. After confirming, the total is added to the customer’s balance, the original paper s check returned as a receipt, and any cash-back is dispensed from the machine. Finally, the human teller asks, “Did you get that double billing on your credit card resolved
Mr. Poddenstopper?”*

The machines can also handle other routine transactions: loan payments and other bills could be paid by feeding billing statements into the machine, then selecting the account to debit; funds could be transferred within the bank or to accounts outside the bank; money orders, cashiers checks, and prepaid cards could be created right from the machine. Machines could be even be equipped to handle merchants, accepting and dispensing cash and coin, payroll checks, and prepaid employee cash cards.

The beauty of all this, not counting the labor savings, which Busby said could pay for the equipment within a year, is that it all ties in nicely with online banking. Upon return to their home or office, branch self-service users will be greeted with an email summarizing the transactions with links to online banking to view images of any paper checks or statements scanned in the branch, and to take any action related to the in-branch transaction. It’s similar to the way the airline check-in process is spurring travelers to go online and check-in prior to the trip to the airport.

Paperless Banking

Another chord struck at Retail Delivery was the growing threat to consumer confidence in online banking, and by extension banking in general, due to the proliferation of spyware, worms, Trojans, fake messages, as well as the mixed messages from financial providers, the media, and government regulators. Jim Van Dyke, whose Javelin Strategy www.javstrat.com  consultancy is doing pioneering work in this area, presented not one but two sessions on paperless banking. He looked at 44 criteria at 39 leading banks, determining that BofA, Wells Fargo, E*Trade, and Zions had the best total safety rating .

That’s great information on those 40 banks, but what about the other 20,000 U.S. financial institutions? How do consumers determine if they are dealing with a “best practices” bank or credit union? Not to beat our own drum too loudly, but we hope our Safe2Bank certification will go a long way in educating, and, more importantly, reassuring consumers and the media about real fraud threats, both on and offline.                                                                                       

 

Jim Bruene, Editor & Founder,

 jim@netbanker.com

*As soon as Mr. P swiped his card, his name, account history, and recent service issues instantly appeared on a screen visible only to the human teller. The customer record could also be enhanced with family names, pronunciations, and even the occasional cross-sell prompt. While this teller-automation technology has been available for years, the typical teller is too busy handling transactions to really converse with the customer

Gold Credit Report Package from Equifax

If you are looking for ideas on how to create a steady stream of fee income from your online presence, look at how the credit report marketers have continued to command premium prices even as the government mandates annual free credit report access.

We like Equifax ‘s approach. A laundry-list of features and benefits divided into a GOLD and SILVER offering. Gold, at $100 per year provides little more than Silver at $50 per year, but with a 30-day free trial, why not give it a try. Cleverly, the cheaper Silver plan does NOT have a free trial period. Many consumers will check out the Gold and never remember or bother to switch back to Silver.

By the way, we first heard about this offering through a banner ad on eBay in June.

Easy Anti-Phishing Defense for Banks

antiphishing_chart

With phishing reaching epidemic proportions (see chart), you need to look for ways to reinforce the authenticity of your website. Few banks have adopted one of the simplest trust building tools: greeting customers by name. This is simple to do through site registration and cookies. Online retailers have been doing this for years, it's time banks jumped on the bandwagon. Once registered, when accessing your website, either through an email link or via direct surfing, users will know they've come to the right place.

For more information on anti-phishing defenses, read OBR 102, No Phishing: Enlisting users in your battle against fake emails

U.S. Bancorp’s Stingy Email Storage

Usually we discuss innovations, this is an exception. We’ll call this a non-innovation, non-ovation for short.

In a time where all the huge Web-based email providers, led by Google’s free 1 GB of storage, U.S. Bank decides to delete emails sitting in customer in-boxes (within their online banking platform) after just 30 days. This includes estatement notifications.

Assuming the average customer gets one message per month, and each message is 2k in length, that saves about 20k in storage costs per customer, compared to keeping the messages for one year. Assuming the marginal cost for disk space is $10 per GB, that policy change will save an awesome 2 one-hundredths of a cent per customer per year, or $200 per 1 million customers.

Extensive online archive space is one of the biggest benefits of banking online. Don’t be pinch pennies on one of the lowest-cost aspects of your online Usually we discuss innovations, this is an exception. We’ll call this a non-innovation, nonovation for short.

In a time where all the huge Web-based email providers, led by Google’s free 1 GB of storage, U.S. Bank decides to delete emails sitting in customer in-boxes (within their online banking platform) after just 30 days. This includes estatement notifications.

Assuming the average customer gets one message per month, and each message is 2k in length, that saves about 20k in storage costs per customer. Assuming the marginal cost for disk space is $10 per GB, that policy change will save an awesome 2 one-hundredths of a cent per customer per year, or $2,000 per 1 million customers.

Extensive online archive space is one of the biggest benefits of banking online. Don’t be pinch pennies on one of the lowest-cost aspects of your online presence.

JB

——————————————————–
The full text of the message is repeated below:
——————————————————–

Date: 09/14/04
To: Jim Bruene
From: U.S. Bank

Subject: Messages now refreshed after 30 days

In an effort to populate the message center with current information, all messages, including ones related to online statements, will be deleted after 30 days. However, online statements will continue to be available for up to 90 days and can be accessed in the Recent Statement area at the top and bottom of each account Transaction History page. Online statement customers will continue to receive a message in the Message Center when a new statement is available.

——————————————————–
If you’d like to learn more about the future of online bank messaging, check out the Online Banking & Bill Pay Forecast: Current, future and historical usage: 1994 to 2016 from our sister publication, The Online Banking Report.

ComputerWorld Op-Ed on Phishing

Phishy e-mails and Web sites: What’s your responsibility? – Computerworld

Larry Ponemon, founder of the Ponemon Institutute, and new IT ethics columnist for ComputerWorld, writes about phishing this week.

His accout is unusual in the detail. His company surveyed 411 customers of a major retail bank that claimed to have clicked on a phishing email in May 2004 and who contacted the bank’s customer service department seeking help. Of the sample, 65 (16%) provided account details in the scam. Of those, 5 (8% of 65) reported account losses totally $50,000. Doing the math, that means a little more than 1% of those clicking on the fake email lost money, averaging $10,000 per loss, or $120 per customer who clicked. Pretty good money for the crooks if you don’t get caught.

More interesting is that 310 (75%) felt that the bank’s service reps were unprepared to deal with the problem. Nearly 60% of the total sample, a whopping 243 customers, said they would close their accounts at the bank. Even if just a quarter followed through, that’s 61 lost customers (15% of 411). Assuming each customer represents a NPV of $1000 to the bank, that’s another $60,000 in losses, bringing the total to more than $100,000.

Dr. Ponemon closes with five ideas for fixing the problem.

If you have been trying to convince senior managment to approve funding of additional security measures, by all means forward this article to them.

GeoTrust’s TrustWatch Toolbar


There’s a reason why everyone and their uncle are offering toolbar’s that
plug-in to Internet Explorer. They are a convenience to customers and a
tremendous branding opportunity. The latest entrant from GeoTrust’s TrustWwatch
unit: a privacy toolbar. It’s similar to Ebay’s Account Guard function with a
green light for “verified” websites, yellow for “not verified,” and red for
“warning,” websites on their black list. If you are working on a bank-branded
toolbar (see OBR 85), consider licensing this functionality from GeoTrust  http://www.trustwatch.com/
 Also, if you haven’t already done so, make sure your website is verified by
submitting it to one of the trusted third party certification authorities such
as Entrust, Betrusted, or GeoTrust.

 

Electronic Messaging Opportunities and How to use for Cost-Reduction Benefits

Electronic messaging is wide-open for innovation. The content, delivery, and
style of your electronic messaging provide numerous points of differentiation,
and the business case is positive with potential retention, cross-sale, and
cost-reduction benefits (see OBR 91/92 for a complete analysis).





Source: Online Banking Report, 9/04
 

Online Banking Benefits: Consumer Needs Pyramid

 

Before embarking on new product and marketing strategies,
perform a reality check on users’ expectations.





Source: Online Banking Report, 9/04 Notes: 1We call it the illusion of real-time
processing, because users don’t so much care whether a transaction is processed
in real-time, what they care about is that they can SEE that you have accepted
their transaction and have adjusted balances accordingly; the actual
debiting/crediting can occur behind the scenes in batch mode. 2It’s extremely
difficult to describe what’s “right” in words, but we know it when we see it.

Making Money the Old-Fashioned Way: Fees

In the U.S., online banking fees have all but disappeared. Online account
access fees went by the wayside at the beginning of the Internet era (circa
1995) and bill pay fees have been disappearing in the wake of Bank of
America’s
highly advertised strategic decision to give away bill payment
beginning in 2002. However, as we discussed last month, do not give
up the notion of charging for online services. On the contrary, as more
users go online, there is a much bigger market for premium services along
the lines of American Express and Federal Express. Following is our list of
potential fee-based services and the range of potential charges. The “Low”
column lists the range of fees geared towards consumers, while the fees in
the “High” column are more appropriate for small businesses, which are much
less fee averse, and other high-end consumers.

Note: Commentary applies to the U.S. market only. Other international
markets have much different appetites for or against various fees.

 












 

Source: Online Banking Report, 9/04
Notes:

*The fees in the Low column are more appropriate for average consumer
users; the fees in the High column are more appropriate for micro and
small businesses, and some consumers with complex finances; for simplicity, we
have rounded most fees to the nearest whole dollar; however, common retail
pricing practices are to set prices below natural price points such as $9.95
instead of $10 

Online Strategy Matrix Designed for your Business Planning Process

The following matrix is designed to assist your business planning
process. Consumer strategies are divided into three broad categories:
product, general marketing (on- and off-line), and customer
satisfaction/service. Each broad category is further divided into groups of
tactics aimed at a common goal. Finally, every tactic is categorized as
either:

·         Best Practices (column 1): Required
features that every competitive financial institution should support

·         Competitive Advantage (column 2): Top-rated
features that differentiate you from the competition

·         Others (column 3): Other optional features to
help set you apart and/or support other company objectives

 

04-sept-c01_intro.jpg








Source: Online Banking Report, 9/04
Notes: (1) Features to put you at parity with the best online banks; (2)
Differentiating strategies that provide either a competitive advantage,
incremental profits, or both; (3) Other optional tactics to create competitive
advantage and/or support other company goals.

Small and Microbusiness Strategy Matrix

In theory, small and micro businesses represent one of the most lucrative,
and relatively untapped, sources of incremental business. The reality is that
most small and even mid-size businesses are too busy to spend much time changing
banking relationships, unless they are a pre-startup1
and/or shopping for a credit line or loan. As we outlined in OBR 107/108, a
product offering optimized for business will differ somewhat from one built for
consumers. The following chart summarizes the product options for small- and
microbusinesses. See our prior report for more detail on each feature. The
options are divided into nine categories:

1.       Statement data: viewing and organizing balance

2.       Customer service: customer care delivered over the Internet

3.       Accounting services: financial management tools

4.       Payments and billing: e-checks, bill pay, email payments, ACH,
wires, invoicing, card processing

5.       Security/privacy: privacy, security, permissions, guarantees

6.       Lending: business tools, news, information

7.       Website content/features: non-financial tools and information

8.       Alerts: email, fax, telephone, and mail activity- and balance-level
alerts

1Pre-startup: The time immediately preceding business startup
phase. One of the first things an entrepreneur will do is open separate bank
account(s) for a new business venture; it helps keep records straight for
tax-reporting purposes. So it does little good to target any startup, since
most will already have business banking relationships established; you
really need a foot in the door in “pre-startup” mode, when the kernel of an
idea is just forming (see OBR 107/108, for ideas on how to target
pre-startups).

  

Online Services for Microbusinesses
checkmark = must have feature; R = recommended feature; O = optional feature


04-sept-d03.jpg
04-sept-d04.jpg
04-sept-d05.jpg
04-sept-d06.jpg

Source: Online Banking Report, 9/04 checkmark = must have feature; R =
recommended feature; O = optional feature