Allocates losses from phishing scams between banks, telcos and consumers based on whether each met defined anti-scam duties.
Key points
- Banks must send real-time outgoing transaction alerts and offer a 12-hour cooling period for new devices.
- Telcos must block SMS from unregistered senders.
What firms should do
Map the requirements to your controls, assign an owner, and track deadlines in your compliance calendar.