In today’s digital age, phishing scams and cybercrimes are growing threats, particularly with the increase in online payments and digital banking. Singapore, in particular, has experienced a rise in unauthorised transactions and scam-related losses. The Shared Responsibility Framework (SRF) has been introduced to address these challenges and protect consumers.
The framework is a significant step toward protecting consumers from such threats and aims to reduce the damage caused by scams and cybercrime. Minister of State for Trade and Industry Alvin Tan confirmed this initiative during an April 2, 2024, parliamentary session. But what exactly is the Shared Responsibility Framework, and how does it affect you?
What Is the Shared Responsibility Framework?
The Shared Responsibility Framework (SRF) is designed to distribute accountability between consumers, Financial Institutions (FIs), and telecommunication companies (telcos) when dealing with phishing and other digitally enabled scams. It focuses on scam prevention, the quick processing of claims when unauthorised transactions occur, and compensation for affected scam victims.
How Did the Framework Come To Be?
The SRF was introduced in response to a joint consultation paper launched by the Monetary Authority of Singapore (MAS) and the Infocomm Media Development Authority (IMDA) in October 2023 to respond to this growing trend, ensuring that the financial and telecommunication sectors are more accountable for addressing scam-related losses. The framework seeks to protect consumers and reduce scam incidents by fostering collaboration between these industries.
Scam and cybercrime cases surged by 49.6% in 2023, reaching 50,376 incidents, up from 33,669 in 2022. Scams, including those involving malware, made up 92.4% of these cases. Scam incidents rose by 46.8%, climbing to 46,563 in 2023 from 31,728 the previous year. The top five types of scams in 2023 were job, e-commerce, fake friend calls, phishing, and investment scams.
How the SRF Addresses Phishing and Malware Scams
The SRF’s primary focus is phishing scams. One key recommendation from this joint consultation paper is the introduction of an anti-scam filter, which aims to block and mitigate phishing scams before they reach end-users. This proposal also outlines relevant duties for industry leaders, emphasising the need for interested parties to collaborate on a self-service feature that empowers consumers to safeguard their digital assets.
In a recent statement, industry leader Alvin Tan, a prominent board member, highlighted the importance of implementing risk-mitigating measures. He stressed the need for stringent controls and SRF duties, which would require companies to effectively manage and prevent unauthorised transactions. The proposed SRF, in particular, is designed to enhance accountability, ensuring that payouts to victims must be made promptly when such incidents occur.
Which Scams Are Covered by the Framework?
The Shared Responsibility Framework (SRF) addresses phishing, malware-enabled, and investment scams. A key aspect of the framework is the digital nexus, which refers to scams that originate online but often have physical ramifications, such as loss of funds or personal information. The framework also covers scams involving phone calls and phishing links.
For example, if a consumer falls victim to malware fraud, the proposed framework ensures that responsibility is shared between the consumer, the telecommunication operators, and the financial sector. This creates a clear structure for determining accountability.
How the Framework Protects Consumers Like You
The SRF offers greater consumer protection by requiring financial institutions (FIs) and telecommunication companies (telcos) to implement stricter anti-scam controls. These measures include imposing a 12-hour cooling-off period when activating a digital security token, which helps prevent unauthorised high-risk transactions. Additionally, FIs and telcos must provide real-time notifications for outgoing transactions and the activation of security tokens. Consumers also benefit from a 24/7 self-service feature that allows them to block unauthorised access to their accounts.
How Your Claims Will Be Processed
The SRF outlines a clear, four-stage process for handling consumer claims related to scam losses:
- Claim Stage: The responsible FI assesses the claim to determine if it falls within the SRF’s scope.
- Investigation Stage: If a telco is involved, they collaborate with the FI to investigate the claim thoroughly.
- Outcome Stage: The responsible FI informs the consumer of the investigation’s result and explains.
- Recourse Stage: If the consumer is dissatisfied, they can pursue further action through channels such as the Financial Industry Disputes Resolution Centre Ltd (FIDReC) or IMDA.
This streamlined process ensures efficient claims handling and fair outcomes for affected consumers. If you become a victim of a phishing scam or another digitally enabled scam, the framework ensures that your claims will be processed efficiently.
What Will the Telcos and FIs Have To Do Under the Framework?
How Do They Determine Who Has To Compensate the Victims?
The proposed Shared Responsibility Framework (SRF) uses a waterfall approach to determine who compensates victims. This means that responsibility is assigned based on the level of fault. For instance, if the bank fails to implement appropriate anti-scam controls, it may be required to compensate the victim. If the consumer was negligent by ignoring real-time notification alerts or clicking on phishing links, they may bear part of the responsibility.
In a real-world example, a consumer named Mr. Lee fell victim to a phishing scam involving his bank account credentials. After a thorough investigation, it was found that the bank had failed to send outgoing transaction alerts in real time, allowing the scam to proceed unchecked. In this case, the bank was required to fully compensate Mr. Lee under the Shared Responsibility Framework (SRF) guidelines.
How Easy Will It Be To Implement the Framework?
Implementing the proposed SRF poses both challenges and opportunities. One of the primary challenges is ensuring that all Financial Institutions and telcos adopt uniform practices to prevent phishing and malware-enabled scams. This requires significant investment in digital security token technologies and scam filters.
On the other hand, the framework presents an opportunity for both industries to strengthen trust with consumers by demonstrating their commitment to fighting scams. FIs and telcos can enhance their reputations and reduce scam losses by collaborating on scam prevention measures.
Why You Must Still Remain Vigilant
While the Shared Responsibility Framework (SRF) offers substantial protection, consumer vigilance remains critical. Scammers continually evolve their tactics, finding new ways to bypass anti-scam controls. Even with frameworks and SRF guidelines in place, consumers must stay alert to phishing links, phone calls, and other digital scams.
You should:
- Use self-service features from your bank or telco to report suspicious activity.
- Enable real-time notification alerts to stay informed about outgoing transactions.
- Be cautious when clicking on links or sharing personal information online.
- Regularly update your passwords and enable multi-factor authentication to protect your account credentials.
In short, the framework provides an additional layer of security, but it’s up to you to protect yourself from falling victim to love scams, investment scams, or malware fraud.
The Role of the Monetary Authority of Singapore (MAS) and Infocomm Media Development Authority (IMDA)
The Monetary Authority of Singapore (MAS) and the Infocomm Media Development Authority (IMDA) issued a joint consultation paper proposing a stronger framework for distributing accountability among stakeholders. This framework outlines the responsibility and guidelines for handling scam losses and such transactions.
The Monetary Authority of Singapore (MAS) also enforces stricter security standards on financial institutions, requiring them to improve fraud detection mechanisms. Meanwhile, the Infocomm Media Development Authority (IMDA) ensures telecommunication operators implement the necessary technological safeguards, such as anti-spam filters. For further details, the Monetary Authority of Singapore and the Infocomm Media Development Authority have published a consultation paper outlining the full SRF guidelines. You can access these documents to understand better how the framework applies to you as a consumer.
Conclusion
The Shared Responsibility Framework (SRF) is a groundbreaking initiative by the Monetary Authority of Singapore and the Infocomm Media Development Authority to reduce scam losses and ensure that consumers, financial institutions, and telcos share accountability in preventing scams. With scam filter technologies and anti-scam controls in place, the framework helps protect customers from the increasing threat of phishing and other scams.
Singapore is expected to implement this pioneering SRF by the end of 2024. It is one of the few jurisdictions globally where financial institutions and telcos are held accountable for scam-related losses. Explore the latest updates and stay informed about important developments at OMY, today.
