/security

News and resources on cyber and physical threats to banks and fintechs worldwide.

[New Report] The Future of Payments in Major Global Markets: A Mid-Decade ReviewFinextra Promoted[New Report] The Future of Payments in Major Global Markets: A Mid-Decade Review[New Report] The Future of Payments in Major Global Markets: A Mid-Decade Review

Join the Community

Learn, share and discuss the latest banking, payments and fintech innovations with the world’s largest fintech community.

Access unique research, content, and real-time alerts, services – free to registered members.

41,339 Members   23,587 Expert opinions

Join the community Sign in

295Reports  284Webinars

Find out more

/security

Expert opinions

Naina Rajgopalan

Naina Rajgopalan Content Head at Freo

How Family Offices Are Advancing Digital Security Standards

Digital security has never been more important for family offices. With sensitive data at stake, advancing protection measures isn’t optional—it’s necessary. From leveraging cutting-edge software to adopting smarter protocols, explore how family offices strengthen their defenses against modern cyber threats. Streamlining Family Office Security w...

/security /wealth

Slava Mehovich

Slava Mehovich Founder at AKDev Group

𝗙𝗮𝗰𝗲 𝗜𝗗 𝘃𝘀. 𝗙𝗶𝗻𝗴𝗲𝗿𝗽𝗿𝗶𝗻𝘁𝘀

Biometric technologies such as Face ID and fingerprint scanning are actively discussed in the financial technology industry. Let's figure out which one is more reliable in the context of financial transactions. Face ID uses an infrared TrueDepth camera that projects more than 30,000 dots to create a 3D map of the face. The data is converted into a...

/security /identity Biometrics

Eli Talmor

Eli Talmor CEO at ID-Bound

The Business Case for Absolute Crypto Theft Protection .

A technological solution offering 100% theft protection for ETH-pegged tokens held in a self-custodial account, including transfers, but excluding DeFi interactions, such as TRIO, would have a mixed but potentially significant impact on its attractiveness and customer willingness to pay. Here's an analysis: 1. Value Proposition & Attractivenes...

/security /crypto Blockchain in Banking and Financial Services

Perry Carpenter

Perry Carpenter Chief Human Risk Management Strategist at KnowBe4

Humans Aren’t the Weakest Link, But a Critical Security Layer

Faulting the end user camouflages a more profound reality: our defense-in-depth is not deep enough. Cybersecurity has long emphasized the importance of security awareness campaigns, yet unsafe behaviors persist. Consider this: you know speed limits exist, but you still choose whether to obey them. You draft a New Year’s resolution to hit the gym, w...

/security Information Security

Erica Andersen

Erica Andersen Marketing at smartR AI

The Walls Within: Why Organizations Cling to Data Silos in the Age of AI

The promise of Artificial Intelligence (AI) is tantalizing: smarter decisions, streamlined processes, and unprecedented insights. The promise is transformative. From predicting consumer behavior to automating complex tasks, AI offers a tantalizing glimpse into a future of unprecedented efficiency and innovation. Yet, despite this allure, organiza

/ai /security Data Management and Governance

/security

Trending

/security

Research

Report

PaaS, cloud and instant payments: Navigating the outsourcing question

Today’s institutions are in some ways faced with far greater challenges than ever before. Be it from the demand for ever-faster services; the pressure of always-on compliance; or the need to remain agile and competitive. Is PaaS the holy grail FIs have been looking for?  Outsourcing payments is an increasingly irresistible proposition for FIs. With end-user demand constantly evolving; real-time requirements on the rise; macro-economic trends becoming ever more unpredictable; and the pressure of regulatory compliance ratcheting up, the provision of proprietary payments has become a thorny pursuit.  Enter the stage: cloud technology. By leveraging modern tools and techniques to build, deploy, run, and manage software in a cloud-computing environment, FIs of all kinds can take advantage of scalability, elasticity, and automation. But the benefits of Payments-as-a-Service (PaaS) can extend beyond these practicalities – serving to revolutionise bank operations, unlock broader efficiencies, and enrich the end-user experience.  Mining this potential, however, obliges institutions to navigate some challenges. First, FIs must understand the potential of cloud-native technology as an engine for modernisation and embrace the cultural shift that is triggered by cuttingedge technologies. It may involve training, testing and concerted integration efforts.  Another key challenge is delegation: which tasks should be handed to third parties, and which should remain in-house? Indeed, when systems evolve, FIs must always keep one eye on compliance. As ever, approach and growth potential are directly impacted by the type and size of the institution in question, so approaches should be tailored.  This Finextra whitepaper, produced in association with FIS, evaluates:  The key considerations when placing client transaction data in the public cloud;  The art of delegation: Determining which tasks to offload;  The role of regulation and compliance; and  A PaaS checklist for finding the right solutions and partnerships.    Register to watch the related Finextra webinar, hosted in association with FIS – PaaS, cloud and instant payments in the spotlight: Overcoming outsourcing challenges

332 downloads

Impact Study

Surviving digital fallout: Operational resilience in 2025 and beyond

Almost every financial institution loses money each year to outages. What does an optimal resilience strategy look like in 2025?  The financial sector is increasingly dependent on technology to deliver its offering. Notwithstanding all the benefits this brings for productivity, reach, and customer satisfaction, its side effect is that the sector is increasingly vulnerable to network and software issues, third-party service slip-ups, cyberattacks, and capacity problems. If not managed correctly, a compromised IT system can spark knock-on disruptions to financial institutions, the firms they trade with, their supply chains, and even the economy-at-large.  To mitigate such risks, the global marketplace has been flooded with regulations aimed at bolstering operational resilience. Most recently, Europe’s answer has been the Digital Operational Resilience Act (DORA) – the deadline for which passed on 17 January 2025. However, these regulations are only guidelines; they mandate a minimum level for compliance, instead of an ideal strategy to holistically handle outages.  In this Finextra impact study, produced in association with Cockroach Labs, we speak with leading firms in the space to understand the best-in-class strategies they have adopted to achieve operational resilience. In the most effective cases, firms go beyond compliance, and exploit regulations as a business opportunity to stimulate productivity, increase competitiveness, and reduce costs. In today’s increasingly digital marketplaces, architectures must be operationally simple and flexible, as well as global and robust.  We explore:  The growing challenge of outages;  Regulation, DORA, and resilience requirements;  What an optimal resilience strategy should look like in 2025 and beyond;  How organisations can future proof their operations while staying agile for future regulatory requirements. 

196 downloads

Impact Study

Why DevSecOps is key to navigating innovation and compliance

Explore how DevSecOps enable organisations to navigate economic uncertainties while treating innovation and compliance as complementary forces rather than competing priorities. A balancing act is underway within the financial services industry. Driven by client demand and fintech competition, institutions are increasingly obliged to innovate, while at the same time, ensure every step forward is secure and compliant. Often, it feels as though these two goals sit on either side of a seesaw – when one goes up, the other must go down. Many such challenges are born from the software delivery process, where countless organisations are struggling to source the expertise and capabilities necessary to deliver secure and compliant applications, at speed.  Much of the conflict stems from fragmented DevSecOps (a software development practice that integrates security throughout the development lifecycle) strategies which are built upon outdated infrastructure. Indeed, many financial institutions (FIs) today operate with disjointed security and development workflows – sometimes patching together between five to 10 separate tools that were implemented incrementally over time. While this approach worked five years ago, better options exist today. A simplified stack is conducive to both innovation and compliance – without either being compromised.  This Finextra impact study, produced in association with GitLab, explores:  How the evolution to a unified software delivery platform can deliver on both innovation and compliance;  reduce the risk of security incidents;  supercharge operational efficiencies;  amplify business agility and scalability;  and even support talent acquisition. 

148 downloads

/security

FinextraTV

The Importance of a Modernised Custodial Process

Connor Coughlin, Chief Commercial Officer, Apex Fintech Solutions in his FinextraTV interview at the Communify Fincentric Experience 2025 gave his insights into an often overlooked and misunderstood element of payments: custody and clearing. Often, Coughlin says, many of our issues can come from a clunky, outdated custodial process, something that can be solved with evolving technologies and a more considered mindset.

/security

Long reads

Retired Member

Retired Member

The UK’s moment to lead digital verification: A roadmap to economic growth and financial security

Following London Tech Week, the spotlight is on the technologies shaping our future, and one of the most important is digital verification. With more of our lives happening online, from banking to healthcare to everyday shopping, the need for secure, reliable ways to prove who we are has never been greater. That’s why digital verification is high ...

Luke Stubbs

Luke Stubbs Partner at Shoosmiths LLP

Mitigating cyber-risks in outsourcing: Contract strategies for compliance and protection

A clear and present danger In recent years, several prominent UK businesses have faced significant technology and cybersecurity challenges and the consequences of data protection breaches. For example, in October 2023, the Financial Conduct Authority (FCA) fined Equifax over £11 million for failing to manage and monitor the security of UK consumer ...

Dominique Dierks

Dominique Dierks Senior Content Manager at Finextra

Ensuring operational resilience in 2025 – why the status quo no longer works

Operational resilience is on all UK payments leaders’ minds. In 2024, 95% of business leaders stated that they’re aware of operational weaknesses which leave them vulnerable, yet 48% said their organisations aren’t doing enough to improve resilience. The European Union (EU)’s Digital Operational Resilience Act (DORA) – having come into effect on 17...