DBS, UOB become latest banks to restrict app access if sideloaded apps detected on customers’ phones

NO MONITORING OF PHONE ACTIVITIES

OCBC was the first to roll out new anti-malware security measures last month, followed by Citibank on Sep 15.

The new moves aimed at nullifying the threat of malware scams have received mixed responses from banking users here, with OCBC customers taking to the local bank’s social media to express their concerns about privacy.

Asked why DBS is pursuing this security measure despite customer concerns, Mr Lam stressed that the latest security features do not monitor phone activities, collect or store any personal data.

“We are detecting the signatures of known malware or the signatures of sideloaded applications.”

DBS has done “a lot of testing” to strike a balance between security and user experience “as well as possible”, he added in an interview with CNA ahead of the announcement.

“For now, it appears (that) scam vulnerability by malware is a major issue and therefore, it is appropriate to strike the balance in favour of protection for now. If this changes over time, then we may be willing to revisit the situation,” he said.

In a press release, DBS Singapore Country Head Han Kwee Juan said: “We recognise that certain measures may add some friction to the customer journey and seek their understanding that they are necessary to ensure that they can perform digital transactions on a secured platform with peace of mind.”

UOB also sought to assure customers that its new security features do not monitor phone activities, nor collect or store any personal data. 

“These features are necessary for enhanced security to mitigate the risks and protect customers’ exposure to malware scams,” said Mr Ng.

“We also seek our customers’ understanding that deployment of the features may lead to some inconvenience.”

Meanwhile, DBS also rolled out a new security check-up dashboard, which hopes to get customers into “the habit of regularly reviewing” their security settings on the banking app.

Users can already access the new feature via the app’s homepage, based on a check by CNA.

Currently, the dashboard will focus on “getting customers to strengthen their core security accesses” before being expanded to include more security features in the coming months, DBS said.

With an increasing number of customers becoming more informed and looking to safeguard their own online security, the bank has been rolling out more of such self-managed security controls.

For example, the payment control features launched in 2021 allow customers to set monthly card spending limits, and indicate their preferences for cash advances and overseas in-store transactions.

Nearly half a million DBS and POSB customers have used these payment control features.

DBS said it has been continuously sharpening its security measures in line with evolving scam and fraud typologies. Together, the new measures announced on Tuesday will add to existing safeguards, including surveillance and monitoring systems.