Keylogging Viruses and Banking

Before there was phishing there was keylogging. Rember the controversy in South Africa a year ago? Turns out keylogging may be harder to contain than phishing. An article in today’s Wall Street Journal discusses the case of Robotector who unleashed a virus that captured usernames and passwords when victims logged into to any of 30 major banking and payment sites.

What’s a bank to do? There are lots of ways to fight the cyberthieves, but the most important one is to add an additional layer of authentication for moving money out of the bank. We’ve been recommending this for nearly 10 years, but it’s been a low priority due to the relatively low levels of losses experienced online. Well, the times have changed, and it’s time to make authentication a top priority for 2005, or earlier if you can work it into the budget. In the meantime, keep educating users and crossing your fingers.

See Online Banking Report for more details on fighting phishing and other security problems.

NetBank Announces Remote Deposit Scanning Service

According to an article in the May 20 American Banker, NetBank is about to launch a remote deposit service for its business customers. Although details of the yet-to-be-launched service are sketchy, it is expected that business customers would scan paper checks into a remote device that transmitted the images to NetBank for immediate deposit.
This service has two important benefits in addition to the obvious: freeing small business owners from a trek to the branch:
1. Improves cash flow since checks can be deposited immediately rather than on periodic trips to the branch
2. Streamlines record keeping in two ways:
(a) the original check can be filed as a paper receipt
(b) an electronic image is stored at the bank and is available if questions arrive
The service is not expected until August at the earliest. The technology provider is Alogent.
Speaking as both as a small business owner and an industry analyst, this is a great service and a strong candidate for an Online Banking Report Best of the Web award once the service becomes operational.

E*Trade using $175 New Checking Account Bonus

Although it takes some work to get the whole thing, E*TradeBank’s $175 new-account bonus is the richest we’ve seen for a new checking account. Here are the bonus levels (see file for download below):

$75 Open a checking account with at least $1000
$75 Begin a direct deposit of at least $1000 per month
$25 Pay 2 bills online within 60 days
$175 Total

For screenshots and the fine print, download the following file:

Download may_21_financial_innovations_etrade.doc

Online New Bank Account Acquisition

Wondering whether to improve your online account opening process? In a recent American Banker article, Citibank said that 10% of its new checking accounts are opened online, and that’s before they streamlined the process making it paper free. Previously, customers had to mail or fax a form with their handwritten signature.

MBNA Might Acquire Egg

MBNA Egg.com?

The Wall Street Journal today reported that MBNA was considering a purchase of Egg, the UK-based Internet bank and credit card issuer. While the primary purpose of the acquisition would be to pick up the bank's 2.8 million card accounts, MBNA would likely consider expanding the Egg.com Internet banking franchise into the United States.

We think the U.S. market is ready for another innovative Internet banking brand. Look at what ING Direct (USA) has accomplished in under four years: built a successful franchise with more than one million accounts and $16 billion in deposits (year-end 2003).

Local Option Boosts Google AdWords Appeal for Financial Institutions

Now that Google has begun identifying search engine users by their IP addresses, advertising via Google has become a whole lot more lucrative for community banks and credit unions.
Financial institutions now have the ability to target their keyword ads via city, state, or MSA.
See OBR 95 for a full report on search engine marketing.

Ebay Toolbar Provides Phishing Defense

 


 

We’ve been a proponent of increasing your presence on the desktop through browser toolbars, pushed content, and other means . We were looking at it from a usability and marketing standpoint. It turns out there’s another use, as a security enhancement.

04-april-b15.jpg

Leave it to eBay to come up with the first proactive anti-phishing system. Ebay toolbar users received the Account Guard upgrade in February. It has two functions. First, whenever a user visits a valid eBay URL, the background color of the account-alert section of the toolbar changes to green. It’s a subtle but effective technique – quite noticeable when a spot on the top browser controls suddenly changes color, and much more effective than a locked or unlocked padlock in the lower corner. Second, an optional feature launches an alert box whenever you type your eBay username into a non-eBay URL.

It’s not a foolproof system. It only protects against browser-based phishing. It wouldn’t guard against phishing attacks that ask users to update their account within the body of a phony HTML email. We’ve also heard that it’s possible to spoof the toolbar itself, pasting a phony one at the top of a fake browser.                            

 

 

 

Who Has the Best E-Service?

It’s difficult for outsiders to judge a bank’s service levels unless you
interview a number of customers as Vividence and others are doing or use the
bank’s products yourself. However, the bank’s website does provide clues to
the relative value placed on e-service. Here are the things we would look
for as a prospective customer, all of which are affordable even to the
smallest organization:

Table 35

Ten Clues You Are Dealing with a Top E-Service
Organization

1.       Help function accessible from every page

2.       Easy-to-find prices (not buried on the eighth page of the
account agreement)

3.       Contact Us or About Us section prominently
displays telephone numbers, email,
and mail addresses

4.       Service standards and guarantees prominently posted

5.       Detailed and up-to-date FAQs

6.       Customer feedback encouraged; for example, suggestion box or
satisfaction survey

7.       Third-party endorsements/affiliations displayed, such as
Member Better Business Bureau
, Chamber of Commerce, TrustE,
etc.

8.       Hours of operation displayed in appropriate areas

9.       Customer service staff and/or line management (especially branch
managers) identified by name with online bios/pictures

10.    Customer testimonials and/or Q&A forums with actual customer
questions

Source: Online Banking Report, 3/04

 

 

Table 36

Customer Experience at Major U.S. Card Issuers*

Rank

Card Issuer

1

Capital One

2

American Express

3

Discover Card

4

Citibank

5

Wells Fargo

6

Bank of America

7

Chase

8

Bank One (First USA)

9

MBNA

10

Fleet

Source: Vividence, 4/04; Evaluations took place in July and August 2003;
Banks evaluated but not making the top 5 were: Fleet, US Bank, Wachovia

 

In terms of actual service experiences, we can only judge the companies
we’ve personally used, they include: American Bank, American Express, Bank
One (card only), Bank of America (card only), Capital One, Centura,
CharterOne, Chase (card only), Citibank (card and account aggregation),
DeepGreen Bank, Everbank, ING Direct, Juniper Bank, National City
(aggregation only), NextCard, Providian, Security First Network Bank, U.S.
Bank, Wells Fargo (card only), X.com/PayPal. Many of these accounts are
little-used, so we don’t have much opportunity to experience the entirety of
the company’s service efforts. However, among those accounts only ING
Direct, PayPal, and before they went out of business, NextCard, standout in
terms of overall online delivery. Other places do a great job servicing our
accounts online, but have not provided a truly memorable experience, the
kind of performance that generates unsolicited word-of-mouth referrals.  

A number of third parties evaluate financial website usability and
service. One of the most thorough is Vividence,* which evaluates
customer experience at the 10 largest banks and ten largest card issuers. In
its latest analysis completed this month, Vividence ranked Bank of
America
tops in customer experience for existing customers, National
City
was second, and US Bank third.

The longest-running service evaluation is by Gomez Advisors (now
owned by WatchFire), which ranks online banks across five categories,
including customer confidence. Gomez determines the customer
confidence score by evaluating the bank’s website and mystery shopping
customer service. The most recent Gomez scorecard ranked Citibank first,
Wachovia second, and Wells Fargo third.              

 

Table 37

Ranking Customer Experience at Major U.S. Banks

04-april-b05.jpg

Sources: Vividence and Gomez, see below for details

Vividence, 4/04 & 9/03; Evaluations took place in July and August 2003;
Banks evaluated but not making the top 5 were: Fleet, US Bank, Wachovia;
Vividence Customer Experience Rankings are benchmarking studies using
proprietary software tracking behavior and opinions across a 2000-user
panel.

Watchfire Gomez Pro 10/03 & 10/99; Banks evaluated in Fall 2003 but not
making the top 5: American Bank/pcbanker.com, American Express-Banking,
Associated Bank (WI), Bank One, Chase, Charter One Bank, Citizens Bank,
Commerce Bank (NJ), E*TRADE Bank, First Internet Bank of Indiana, First
National Bank of Omaha, First Tennessee Bank, Fleet, Hibernia National Bank,
Huntington, NetBank, National City Bank, Key Bank, HSBC, PNC Bank,
SouthTrust Bank, U.S. Bank, Union Bank of California, Washington Mutual,
Webster Bank

 

The Critical Role of Web Self-Service

By Annette M. Jacobs, CEO SafeHarbor

Online banking is no longer a competitive advantage. Today, the value is to offer an experience that is simple, user-friendly and provides the highest completion rates. Customer satisfaction with the quality is critical. Online banking customers have high expectations regarding system reliability and content quality. The level of sophistication among this customer segment is also driving the need for site integration and personalized service options.

It can be difficult for online banking programs to duplicate the high touch of personalized service that customers have grown to expect from a branch-bank experience. Offering customers effective online support can substitute for most of the personal attention offered by the neighborhood teller. Whether customers are finding answers for themselves through a FAQ page or by using assisted alternatives like on-line chat or telephone support, financial institutions need a comprehensive program maintain high customer satisfaction while decreasing support costs. A recent survey of 30 banks and credit union executives by Forrester Research found that 96% felt assisted support is a major priority for the online banking market over the next two years.

Implementation Options

Financial institutions can implement and enhance online banking support several ways: purchase a prepackaged program, build a network internally from the ground up, or partner with a business process service company that can integrate and manage the program. In making that decision, consideration must be given to delivery times, costs, ongoing support, assisted support and the ability to gather or consolidate customer data.

1.       Purchase support tools: At first glance, out-of-the-box support software appears to be a logical starting point. While many offer a broad range of functionality, the features may not align with your institution’s specific online banking needs. It is important to examine carefully the tool’s range of features and determine the existing infrastructure capability. Institutions should also ensure the software can accurately identify, assess and grow, not only with internal needs but also customers’ needs. Additional functionality will also be tied to internal IT release dates or those of the vendor.

  1. Build an internal support service network: As an alternative to purchased software, building a service network internally may seem the most effective way to provide an integrated, customized solution. Proprietary systems can be continually upgraded and enhanced to meet expanding customer needs and support new product launches.
  2. Outsource the process: The third option, outsourcing, can be cost-effective and relatively easy-to-implement. It allows a bank to focus on its business needs by partnering with a business process service company. When you eliminate the organizational burden of building, installing, maintaining and staffing, banks can direct resources to their core competencies of product development, customer relationships and revenue growth.

Partnering also offers the ability for risk sharing. That can be critical as you define the long-term strategy. The vendor generally assumes responsibility for maintaining the software and hardware, which is invaluable to keep pace with technology changes. Many business process service companies can also provide assisted-support staffing, which offers flexibility and leverages the skill development necessary to optimize return on investment.

Business process service companies can bring support systems to market more quickly. Partnering can eliminate time-consuming steps and internal project management. For example, SafeHarbor Technology Corporation delivers a complete customer-interaction support system that can be operational in as little as eight weeks.

Components of a Successful Customer Support System

In designing a customer support system, flexible multi-channel service is the key to increasing satisfaction, loyalty and retention. According to Gartner Research Director Esteban Kolsky, customers would prefer to use self-service if it is comprehensive and easy to use. Below is an example of SafeHarbor’s graphical help function as deployed by Washington Mutual. It walks users through a relatively technical process, upgrading security at AOL, which would be difficult and time-consuming for most bank service reps to handle.

Customers must also have the ability to escalate to other service channels, and the transition must be seamless. Support agents need the ability to track every service-inquiry step. The online banking customer should not be subjected to retracing each step and subsequently reliving the frustration.

Collecting and analyzing this data is also a tremendous opportunity. Identifying customer-user patterns, and the service channels through which they seek support, can be critical to a bank’s ability to accurately assess user needs and provide relevant services.

Financial institutions must take support services to the next level to maximize profitability and ensure customer satisfaction. Support systems can also serve another role by collecting valuable customer data. This should not only guide the strategy, but also identify new opportunities to grow product revenues.

Annette M. Jacobs is the President and CEO for SafeHarbor Technology Corporation, a provider of customer support and delivery services including Web, call center, and analytics to Global 2000 and emerging SMB organizations; founded in 1998, clients include Washington Mutual Bank, SunTrust Banks, T-Mobile, American Airlines, and the State of Washington.

04-april-b04.jpg

Washington Mutual’s Site Helper powered by SafeHarbor.

 

SafeHarbor Projections for your Business Case

·      Toll-free numbers displayed throughout your website can increase support costs by more than 25%.

·      A large portion of online banking support goes
toward educating new users; better “getting started” (aka onboarding) content and messaging can
reduce account cancellations and increase
customer satisfaction by more than 50%.

·      Preemptive live-agent support can increase call deflections by 30% or more.

·      Providing access to the online banking support environment for call center agents can reduce call handle times and increase agent productivity by
more than 40%.

What to Do Now Regarding Self-Service and Customer Service

Customer service is one of those topics that engender passionate calls to action at staff meetings, but little follow-through. Why? Because it’s tedious work, difficult to measure, and expensive. Yankee Group estimates the total cost of a $200,000 Web-based self-service application is $1.3 million over five years, including IT support, knowledge-based maintenance, user training, and so on (see Table 30, below).

However, if you expect to profit from your online services, you must pay attention to the subject. Following are several tables to help you prioritize your investments. Table x lists the high-level priorities. Table y lists 10 ways to get the biggest bang for your buck today. Finally, we list more than 50 techniques for delivering service beyond customer expectations, while deflecting calls from your call center and branches.

Online Service Rules

# 1: Anticipate questions and tripping points;
remove the ambiguity in the product-design phase

# 2: Email users frequently with confirmations and alerts, especially for new accounts in process

# 3: Imbed pop-up Help bubbles for every conceivable question, especially in product applications

# 4: Make sure customer service owns the FAQs,
including the authority/ability to change them on the fly

# 5: Provide prominent Search capabilities;
manage the results to insure relevancy

# 6: Most people still want to want to interact with a live human; put a face on your e-service, and don’t hide phone numbers

Source: Online Banking Report, 3/04

 

 

Table 30
Total Cost of Ownership

stand-alone Web self-service solution

04-april-b01.jpg

Source: Yankee Group, 8/02, from Online Selling & eCRM

 

 

 

Table 31

Strategic E-Service Priorities

04-april-b02.jpg

Source: Online Banking Report, 3/04

Table 32

Ten Low-Cost E-Service Improvements

1.       Autoresponse email to Web-based inquiries

2.       Help button on every page, especially at login

3.       Expanded FAQs, possibly with college intern support

4.       Links to FAQs in email responses

5.       FAQs written in user-friendly language

6.       Published email service standards

7.       Opt-in for email communications when submitting Web-based inquiries

8.       Templates for email responses

9.       E-reps rewarded for improving online FAQs

10.    On-hold message referring users to easy to remember URL for Web-based inquiry,
e.g., <www.yourbankservice.com>, or use your toll-free number as the URL <www.1-800-555-BANK>

Source: Online Banking Report, 3/04

 

 

 

 

Table 33

 

Techniques for Deflecting Service Calls/Visits

 

04-april-b03.jpg
04-april-b03a.jpg

Source: Online Banking Report, 4/04

 

 

Table 34

 

Basic E-Service Implementation Checklist

  •        Contact Us link in the upper-right corner of every Web page
  •        Ensure that common search terms entered in your site-search feature result in highly relevant answers and links
  •       Separate FAQs for customers and non-customers
  •        FAQs edited by a professional copy writer for grammar and tone; reviewed by customers for clarity
  •        Web-based inquiry form includes: name, email address, retype email address, customer/noncustomer, subject (choose from drop-down list), and opt-in for future email communications
  •       Inquiry form includes graphical security assurances and link to privacy and security policie
  •        Direct customer service email addresses; for example, service@yourbank.com, info@yourbank.com
  •        Identifiable service area with its own intuitive URL; for example, <service.yourbank.com>, <vip.yourbank.com>, <www.yourbank.com/service>, <1800yourcallcenter.com>
  •        Service department Web and email addresses in company literature and advertising
  •        Autoresponses for Web-based queries, includes thank-you and estimated response time
  •        Email response templates for the most common questions
  •        Procedures for handling undeliverable emails
  •        Secure password-reset procedure and monitoring program
  •        Security/privacy guidelines for handling confidential information emailed by user
  •        Fraud-detection algorithms and procedures for email requests, e.g., password resets, change of address
  •        Procedures to escalate customer problems
  •        Guidelines for distributing email questions to the appropriate departments
  •        Tracking and follow-up mechanisms to ensure all emails are answered in a timely fashion
  •        Performance metrics and methods to capture the data, e.g., response times; percent resolved within 24/48/72 hours; customer satisfaction with response
  •        Service standards communicated internally and externally
  •        Process for maintaining and improving internal and external knowledge base and FAQs
  •        Guidelines and approval procedures for editing approved email response templates
  •        Email training program for e-reps, branch staff, and other customer-contact personnel

Source: Online Banking Report, 4/04