LAGOS, NIGERIA: AFollowing increase in the spate
of complaints by ATM cardholders on fraud, the Central Bank of Nigeria (CBN)
has issued directives aimed at making banks in Nigeria liable for payment
card fraud. Consequently, all deposit money banks (DMBs) are hereby
directed to implement the following:
1. No debit card should be issued on an account without a written request
from the account holder. DMBs shall bear liability for any fraud
perpetrated with the use of cards issued without written request from the
account holder, and such card must be delivered in such a manner that the
confidentially of the information is not compromised.
2. DMBs should set and implement mandatory daily limits for ATM cash
withdrawals. All other related transactions, including PoS and Web
purchases should be subjected to stringent limits as agreed and documented
between DMBs and their customers. It is the responsibility of DMBs to
ensure that the agreements are documented and that such limits are
embedded within the card to automatically initiate a trigger when limits
are exceeded.
3. The use of second level authentication for internet transactions is now
mandatory for all payment cards. It is the responsibility of the issuer to
ensure that transactions emanating from its web merchants are properly
scrutinized and operations are permitted only after second level
verifications.
4. DMBs must send SMS alerts to the telephones/email addresses of
cardholders whenever there is a debit transaction via payment card.
Evidence of the dispatch of such messages would be required in cases of
non-receipts of the alerts by account holders because of telephone network
failures.
5. Cardholders should be provided with a facility to block their accounts
immediately from their mobile phones whenever an SMS alert is received in
respect of suspicious transactions to prevent further fraudulent
transactions from being perpetrated.
6. All card issuing banks should deploy fraud monitoring tools that have
the capability to monitor the normal spending trends of a card holder as
well as automatically stop abnormal transactions that are perceived to be
fraudulent. The block shall only be lifted by express instruction by the
Card holder.
7. The use of temporary staff, i.e. students on industrial
attachment/vacation job, NYSC members and contract staff for card
management and issuance/distribution of PIN mailers should be stopped.
Appropriate sanctions will be imposed for non-compliance.
.
