\n<\/p>\n
Australia is one of the world’s biggest cyber crime targets, with malicious actors targeting its residents every six minutes and $2.74 billion lost to scams in 2023\u201324, according to the ACCC\u2019s most recent report. \n<\/p>\n
\n You\u2019re out of free articles for this month <\/p>\n<\/div>\n
No one denies that the country is a major target. What is <\/em>up for debate is who should wear the cost of that reality. Specifically, does the government\u2019s proposed Scam Prevention Framework go far enough to protect Aussies?
\n<\/p>\n Consumer advocates, including the People Over Profit campaign launched by news.com.au<\/a>, argue that it does not. These groups want to see the burden shifted from everyday Aussies to financial institutions, arguing that regulators should require banks to compensate victims for scam losses except in cases of negligence.
\n<\/p>\n Our take? Regardless of what Australia\u2019s liability frameworks might look like, cybercriminals have a lot of advantages \u2013 and those demand layered solutions and strategic, cross-sector collaboration.
\n<\/p>\n Unfortunately, businesses face significant risks right now. As important as it is to evolve our approaches to scam prevention, business leaders can\u2019t afford to wait for those to manifest.\u00a0 <\/span>
\n<\/p>\n
<\/p>\n We\u2019ve all seen heartbreaking stories of a pensioner or retired couple who lost their life savings to a complex, difficult-to-detect scam. These cases demand urgent fixes.\u00a0 <\/span>
\n<\/p>\n What sometimes gets lost is that everyday Aussies also<\/em> comprise our country\u2019s business community, including the small businesses that are significantly more likely to lose money to cybercriminals.
\n<\/p>\n Rethinking scam liability might well end up being a crucial part of a solution, especially as scams become more sophisticated with help from artificial intelligence (AI). And we applaud broader efforts to shift the burden of scam losses away from vulnerable Australians and toward well-resourced entities.
\n<\/p>\n It\u2019s a policy that\u2019s already in place in the UK, and most of Australia\u2019s largest banks have made significant efforts to reduce scam losses \u2013 including confirmation of payee (CoP) tools. \u00a0<\/span>
\n<\/p>\n Here\u2019s the problem.<\/strong> The UK still loses billions to scams each year and, as Australian banks have pointed out, other organisations play roles that are arguably just as important when it comes to facilitating or preventing scams. Those include telcos, tech companies and social media platforms.
\n<\/p>\n Further, CoP tools are a welcome layer of security, but many of them may not be practical within busy AP functions and still have loopholes for fraudsters to exploit. In other words, they\u2019re only one piece of a national solution.
\n<\/p>\n And national solutions often take an infamously long time to come together.
\n<\/p>\n
<\/p>\n On the surface, these debates can look like old-fashioned finger-pointing, but they\u2019re an illustration of the problem\u2019s complexity. Loopholes within our communication and banking systems are compounded by tech outpacing legislation and law enforcement, which is further compounded by a lack of cyber awareness and training.
\n<\/p>\n The end result is that Australia remains a soft target for scammers, and no single entity or individual can be blamed \u2013 which means no single entity can fix the problem unilaterally.
\n<\/p>\n Campaigns like those from news.com.au are putting a necessary spotlight on the topic, while industry and government are working more closely than ever to prioritise solutions. These are encouraging developments. There are lots of reasons to be optimistic that Australia will find concrete ways to improve our overall security posture.
\n<\/p>\n In the meantime, though, your business is at risk<\/strong>. Many leaders underestimate the damage caused by even the smaller fraud-related losses, as well as the true costs of a cyber incident \u2013 including operational disruptions, damaged relationships, employee morale and indirect costs like legal fees or forensics. Likewise, they sometimes overestimate the efficacy of fraud mitigation controls in a security landscape shaped by rapidly proliferating AI tools.
\n<\/p>\n As risks accelerate, business leaders can\u2019t wait for others to figure out a new approach to an infamously complicated problem.
\n<\/p>\n Just as the broader problem requires a layered and multi-faceted solution, organisations will need similar layers of security within their finance and AP functions. To get started now, take a look at this year\u2019s Cybersecurity Guide for CFOs<\/strong><\/a>, which outlines ways to test your vulnerabilities and put up-to-date solutions in place.
\n<\/p>\n As the debate continues to unfold, don\u2019t leave your business vulnerable.<\/p>\n<\/div>\nBusinesses are often left out of the scam prevention conversation<\/h2>\n
Scam liability debates underscore the need for business action<\/h2>\n