A Chinese netizen used facial recognition to transfer money, but the deposit was stolen by fraudsters. (Schematic) Figure: Retrieved from Tencent (file photo)
The face recognition system can improve work efficiency, but it also has security concerns. A Chinese netizen, Li Hong (pseudonym), said that if he wants to transfer money from a Bank of Communications card, the process requires face recognition and SMS authentication. Unexpectedly, the text message and verification code were intercepted by the scammers, and they were unable to answer the bank’s confirmation call. In the end, the deposit was stolen and received nearly 430,000 yuan (about 1.9 million Taiwan dollars).
According to a report by China News Weekly today (18), the background records of the banking system show that Li Hong performed face recognition 6 times when transferring funds. in Taiwan. After she discovered that the deposits from the online bank on her mobile phone had been stolen, she immediately reported the case to the police and cooperated with the investigation.
In addition, Li Hong doubted the security of the face recognition system of the Bank of Communications, and sued him to the court for a “debit card dispute”, demanding compensation. However, the Beijing Fengtai District People’s Court rejected the appeal in the first instance on June 30, and Li Hong decided to appeal the case.
The report pointed out that Li Hong received a call from a self-proclaimed “Officer Chen Jie of the Beijing Municipal Public Security Bureau’s Household Administration Department,” stating her ID card number and claiming that her passport had previously been suspected of illegal entry in Harbin. Li Hong was then transferred to another Harbin Public Security Bureau “Officer Liu” and was accused of being involved in the “Li Yan Anti-Money Laundering Case”. Therefore, according to the police officer’s instructions, he logged on to the website to see his “Wanted Notice”. “.
Li Hong panicked, so he obeyed the police officer’s request and downloaded the “Zhuo” mobile app with “public security protection” and video functions. The scammers obtained her bank card password and facial details through these two mobile apps, and also remotely controlled Li Hong’s mobile phone, preventing her from receiving text messages and calls. After the fraudsters mastered Li Hong’s “face recognition” and “dynamic password”, they immediately changed her bank password and successfully transferred each large deposit.
Bank of Communications Beijing Changxindian Branch stated in court that the transaction password, dynamic password and customer authentication mode assisting face recognition, and the transfer process has issued risk alerts to Li Hong, including SMS passwords and SMS notifications, and the internal system found abnormalities After that, I also called her phone number, when the transfer person’s situation and identity.
In response to the “successful biopsy” of face recognition, Li Hong’s husband pointed out that Li Hong was defrauded and transferred money from the account without her knowledge, and the bank should bear the responsibility for poor custody. “It’s like, it was originally agreed that I would need to go to the bank to transfer and remit money, but now someone pretends to be me to go to the bank, and the bank doesn’t find it, so the losses caused should not be fully borne by me.”
In the first instance, the court held that the process of Li Hong being stolen was “obvious” because the bank had already identified the user through multiple login passwords, verification codes, and face recognition, and there was no obvious error or negligence.
In this regard, Lao Dongyan, a professor at the Law School of Tsinghua University in China, believes that the party who creates risks and obtains more benefits should take more responsibility: “Face recognition was introduced by banks. As a participant in risk creation, in this way, banks They also benefit more, and should bear the risk responsibility proportional to the benefits they receive.” She added that in the face of technological advancement, banks must also upgrade their security technology to prevent loopholes and cause customer losses.
A Chinese netizen, Li Hong (pseudonym), said that if he wants to transfer money from a bank of communications card, the process requires face recognition and SMS authentication.
Unexpectedly, the SMS and verification code were intercepted by scammers, and they were unable to answer the bank’s confirmation call.
The last deposit was stolen and received 430,000 yuan (about 1.9 million New Taiwan dollars).
A user of Bank of Communications in China was stolen personal information and deposits by fraudsters. (The picture shows the headquarters building of the Bank of Communications) Picture: Retrieved from Baidu Encyclopedia