About the Author

Scott BalesI have a strong personal interest in Financial Inclusion through the enablement of innovative technologies. Past roles include the Head of Technology at WING Cambodia and a Mobile Financial Services Consultant with HSL Consulting. Drawing from 10 years experience in Financial Services and vast networks across industry, I work with organisations on strategies and plans to establish build and optimize market offerings. I enjoy close relationships with many of the large International Development organizations.

» More about Scott Bales

Friday, November 19, 2010

Will banks embrace the social frameworks of modern society

Time and time again I am amazed at how integrated Social Frameworks are into our everyday lives. It seems every week that a new service is added to the mesh that is Facebook, Google, LinkedIn or Twitter. Each of these frameworks provides the base building blocks for enabling connected services between individuals and/or businesses. But to date none of these services have come from one of societies must traditional industries, the Banks.

With the reputation of banks continually under the spot light with recent systemic issues, bailouts and large scale misconduct, you would have thought that banks were keen to find a distraction or ray of hope to defer the eyes of the world. Just like a politician likes to distract voters from issues towards tax cuts, new infrastructure or better benefits, banks should have take the opportunity to pounce on the convergence of social frameworks and financial services.

Lets start with a really simple example. Imagine the possibilities if you could get a bank to endorse the validity of you're Facebook or LinkedIn profile. Therefore enabling other business's to trust the information you present through your social media. Thus applying for a new gym membership could be entirely linked to your profile, therefore allowing the individual to self maintain their information which automatically feeds into the clubs database for communications, marketing and Analytics. Such a service would not only do away with the customer/member systems the clubs have today, but also provide a great plugin to better utilize the network of the member.

Banks already have access to information stores for the purpose of minimizing risk and fraud. Such as national credit databases, electoral roles, fraud databases, etc. Such data could be used by the bank to not only valid profiles, but also bring the concept of security or valid identity as a potential new revenue line.

The idea of self maintained information can be applied to almost anything once the source is validated: credit card applications, additional product applications within the bank, updating of address details, exchanging of contact information with a new associate, and the list goes on.

What we need is a bank brave enough to take a controlled step forward to demonstrate to the industry that such innovations are not only possible, but benefit both the business while decreasing product risk.

Here is a simple use case:
1. John Citizen has been with HSBC Bank now for close to 10 years. He has multiple service relationships for utilities, banking, financing, postal, club memberships, government services and employment.
2. John opts for HSBC's new ConnectSecure ID service, in which he complete on online linkage if his customer record at the bank with his Facebook and LinkedIn profiles.
3. Once linked John's bank does the following via existing data services:
a) Validates his Name & Address against the electoral role
b) Validates employment history against the taxation department
c) Validates select photos against existing KYC images
d) passes a validity status to Facebook and LinkedIn for the validated fields
4. John wants to join Fitness First, and signs up via Facebook. The Fitness First member database links John's membership information to the validated fields on Facebook
5. John also links his utility bills to his Facebook profile
6. John and his family moves house. But instead of updating all separate customer systems. He simply changes his address on Facebook which checks the updated address against the electoral role, saves the newly validated address and now all the associated service providers have his new address.

Look for more future use cases in future blog posts

Happy New Year

Location:Nassim Rd,,Singapore

Wednesday, November 10, 2010

Nigerian PayPal Scam

In an exciting time for my wife and I, we have been doing some changes to house in preparation for the arrival of our first baby on January 6th. Like most modern tech savvy men I elected for online classifieds to sell our old furniture, in this case eBay and Craigslist.

Almost instantly there was a hype of interest for my items through Craigslist. One buyer, Mikel Boldon, in particular wanted to instantly send me money so we could arrange transport for a bed to Malaysia. Here is the first email from the potential buyer:


Thanks for getting back to me on here,i will take it for $650 including PayPal surcharges since i am interested in the immediate purchase.I just moved to the Malaysia,where this is needed and i will be making use of a shipping company to have this picked up from you and have it delivered to me.Further arrangements will be made with you in regards to the pickup once i have paid you.

I would appreciate if you email me with more pictures (if available) too since i won't be able to see this in person,what's the PayPal email to send funds to in order for me to pay you ASAP.

I hope to read from you soon.

Thanks
Mikel

I was encouraged by the swiftness and eagerness of the Mikel, but then it turned sour when I received this email:

PayPal


You've got new funds!!!

Dear Scott Bales,

This email confirms that you have received an Instant payment of $1,550.00 SGD from Mikel Boldon (mmmbmm1@gmail.com) via PayPal MERCHANDISE Payment Service.
Reversals : This method of payment can not be reversed.
Status : Pending - Transport Company Awaiting Payment.
View the "NOTE" of this pending transaction below



Payment Details
Merchandise Amount:
$650.00 SGD
Transport Charges:
Taxes and Insurance:

Total:
$900.00 SGD
    -------

$1,550.00 SGD
Transaction:
5X472815E1267414M
Quantity:
1
  Merchandise Title:
Malm Queen Bed & Mattress
 



 
Transport Company: " MTR Services Sdn Bhd "
Address:

Name:Aaron Ramos
Address:No. 73, Jalan PJS 9/18, Bandar Sunway
City:Petaling Jaya
State:Selangor
Zipcode:46150
Country:Malaysia
Address Status:
 Confirmed https://www.paypal.com/us/cgi-bin/?cmd=p/pop/confirmed_address




NOTE:  This is to confirm to you that the said amount has been successfully transferred by the Sender and been deducted from his Account which is ready to be credited into your account, been that this Payment has been subjected to be a Payment for an MERCHANDISE purchased from you, we reserve the right to make sure this transaction is safe and secured also to verify the legitimacy level on this transaction because of the high sum of funds involved.

The above sum has Included the transport charges and taxes as we and the Transport Company quoted for the buyer (as per PayPal MERCHANDISE PAYMENT POLICY). You will receive a Message from the PayPal Customer Verification Department Shortly informing you on how to send the Transport fares and taxes to the transport company with the above details as soon as possible.



You may contact PayPal customer service by Clicking Here or reply directly to this email by using the reply button in your Mail Box and Quote the Above Transaction ID for quick recognition of this transaction.


Sincerely,

The PayPal Team. 



PayPal Email ID PP307


The email almost looks legitimate, expect this scammer was unlucky enough to come across a seller with a background in Financial Crimes and the email smelt of 'phishing,' but out of curiosity I played along.

PayPal has a brilliant fraud & scam service, where you can forward any suspicious emails to spoof@paypal.com and they will investigate. While the investigation was going on, the emails from the scammer pretending to be PayPal continued:


PayPal


 Dear Scott Bales,

 You have received a PayPal Payment of
$1,550.00 SGD from Mikel Boldon (mmmbmm1@gmail.com).
We've placed a temporary hold on the funds of this transaction
In order to complete this transaction and get the funds approved in your account.We advice you go to nearest Western Union Money Transfer Office,and send the excess sum $900.00 SGD to the Transport Agent and send us a Scanned Copy/Photograph of your Western Union Transaction Receipt (in .JPG Format).
As mentioned in the receipt of Payment and as per New PayPal Payment policy, we have fully debited the total amount (above) from the buyer's account which included the Transport/Delivery Charges (MTR Services Sdn Bhd Logistics).

NOTE: This is important as a security measure to ensure safety of this transaction.

Please, find below the name and address of the Transport Agent where the Funds would be sent via Western Union Money Transfer.

Click Here Locate Nearest Western Union Office

Transport Company: " MTR Services Sdn Bhd "
Address:
Name:Aaron Ramos
Address:No. 73, Jalan PJS 9/18, Bandar Sunway
City:Petaling Jaya
State:Selangor
Zipcode:46150
Country:Malaysia
Address Status:
Confirmed https://www.paypal.com/us/cgi-bin/?cmd=p/pop/confirmed_address








https://www.paypal.com/us/mrb/pal=KZAL42RVE3MQS
Your Account will be credited accordingly upon the receipt of details requested. Should either be sent in JPG format or send type details as:

(1) Sender's Name;
(2) Receiver's Name;
(3) MTCN;
(4) Amount Sent;
(5) Western Union Receipt



You may contact PayPal customer service by Clicking Here or reply to this message directly using the reply button in your email to submit the required information and include either transaction ID or reference number (PP307) quick recognition of this transaction.


Sincerely,

The PayPal Team


PayPal Email ID PP307

And again:


PayPal


Dear Scott Bales,

Your Pending Payment Statements

From:       mmmbmm1@gmail.com
To:          
scott@starmonkey.com.au
Amount:   $1,550.00 SGD
Status:     Pending, Awaiting Approval (Western Union Money Transfer Details)


Attachment:

Please be advised that verification of Western Union Money Transfer Details of $900.00 SGD (which must be sent as deposit to Buyer's Shipping Agent) is required to complete this "Pending" payment sent to you by Mikel Boldon. Therefore, you are mandated to complete the refunding process within 24 Hours. Your account is being monitored through PayPal Security Systems.

Upon the receipt of Western Union Money Transfer Details, your account will be credited accordingly which will include all cost charged for transfer via western union money transfer at PayPal cost.

You are require to send us the Western Union Information below for Verification:

(1) Sender's Name;
(2) Receiver's Name;
(3) MTCN;
(4) Amount Sent;
(5) Western Union Receipt

Below is the Confirmed & Verified Agent's address where you are mandated to send the money:

Name:Aaron Ramos
Address:No. 73, Jalan PJS 9/18, Bandar Sunway
City:Petaling Jaya
State:Selangor
Zipcode:46150
Country:Malaysia
 Address Status:
Confirmed https://www.paypal.com/us/cgi-bin/?cmd=p/pop/confirmed_address




With more than 147 million accounts worldwide, we are a leading online payment method you can trust.

Thanks for using PayPal.
A. Williams,
The PayPal Team.


Then in less than 24 hours PayPal's official response from the investigation came through:


Dear Scott Bales,

Thank you for contacting PayPal.

Thanks for taking an active role by reporting suspicious-looking emails.
The email you forwarded to us is a phishing email, and our security team is working to disable it.

What is a phishing email?

Phishing emails attempt to steal your identity and will often ask you to reveal your password or other personal or financial information. PayPal will never ask you for your password over the phone or in an email and will always address you by your first and last name.

Here's how you can take our Fight Phishing Challenge.

   1. Go to the PayPal website.
   2. Click "Security Center" at the bottom of the page.
   3. Click "Take the Fight Phishing Challenge!" Under What's New

You've made a difference.

Every email counts. By forwarding a suspicious-looking email to spoof@paypal.com, you've helped keep yourself and others safe from identity theft.

Sincerely,
PayPal, an eBay Company

Copyright © 1999-2010 PayPal. All rights reserved.
PayPal (Europe) S.à r.l. & Cie, S.C.A.
Société en Commandite par Actions
Registered Office: 5th Floor 22-24 Boulevard Royal L-2449, Luxembourg RCS Luxembourg B 118 349


Confirmation that the guy was a scam. But again my curiosity got the better of me. I hadn't been replying to the scammer's emails, just collecting and observing. His emails got more and more aggressive, even threatening to deactivate my PayPal account. And then today he called me, stupidly he left caller ID on and from the +23 (+2348074437547) country code I instantly knew it was from Nigeria. He was very annoyed that I hadn't paid the $900 fee through Western Union for the shipping company and he reminded me that this was urgent for him as he was new to Malaysia. That's when one question from me ended the whole episode...."If your in Malaysia, why are you calling from Nigeria?" He instantly hung up.

Why did I share this? Because one thing I learn from my days in Financial Crimes is stories like these, including the real email addresses and phone numbers so that others can forward the story to others to build awareness of scams like these. So I encourage you to Tweet this blog, share it on Facebook or LinkedIn, email it to friends and family so that more people are aware.

Lastly I'd like to add that PayPal did a fantastic and swift job in investigating this incident.

Tuesday, November 2, 2010

Going truly mobile

Just installed Blogger for my Android phone to see if its possible to go truly mobile. I continue to preach the power of mobile, so maybe my blog should practice what I preach.

Let the experimentation begin