1. Fraud and the internet Sandra Peaston Assistant Director, Insight Cifas, The UK’s Fraud Prevention Service

2. In next 30 minutes… What is Cifas? Fraud trends Cyber enabled identity crimes Identification vs. verification Good cyber hygiene

3. What is Cifas? Not-for-profit membership organisation Members share information on confirmed frauds To prevent the same identities & details from being re-used for fraud. Fraud data is non-competitive Co-operation and communication in the interests of crime prevention. Operates two databases National Fraud Database Internal Fraud Database

4. Fraud on the NFD 321,000 cases in 2015 - ▲16%

5. Fraud types on the rise

6. What are ID fraudsters targeting?

7. Identity Fraud and the Internet More than 4 out of 5 Identity Frauds perpetrated over the internet – 86% in 2015 Anonymity, volume, speed Electronic identity verification

8. Internet enabled Identity Crime Where is the data coming from? Data breaches Social engineering – (spear) phishing/smishing/vishing Open source data/Social media Malware attacks Credit files Bin raiding This may not be a one step process – data building blocks Can we arrest the flow? System security and awareness Public awareness raising campaigns Question how ‘open’ data should be Is it too late already?

9. Identification vs. verification Biometrics, behavioural biometrics, tokens, device whitelisting etc…

10. Categories of controls Boundary firewalls and internet gateways Secure configuration Access control Malware protection Patch management

11. Strongest defence?

12. Thank you Any Questions? Sandra Peaston sandra.peaston@cifas.org.uk 020 3004 3612