SMS to be banned as two-factor authentication system in the US
The United States National Institute for Standards and Technology is getting ready to ban SMS as a way to implement two-factor authentication, Cnet reported.
According to the report, a paragraph in the new draft of the Digital Authentication Guideline reads as follows:
“[Out of band verification] using SMS is deprecated, and will no longer be allowed in future releases of this guidance.”
South African banks and credit card companies like MasterCard and Visa all use SMS as an authentication mechanism.
To work around banks’ two-factor authentication systems, criminals commit SIM-swap fraud to gain control of their victim’s cellphone number.
While the US aims to ban SMS for two-factor authentication, the new draft guideline does allow for secure application or biometrics, such as a fingerprint scanner, to be used.
More on banking scams
What FNB is doing to fight SIM-swap fraud
Standard Bank building system to beat SIM-swap fraud
The one bank in South Africa that is safe from SIM-swap fraud
SIM-swap victim feels betrayed by FNB, MTN after losing R200,000
How your chip-and-PIN bank card gets skimmed and your money stolen