每日跟讀#489 : Banks Look to Cellphones to replace A.T.M. Cards

Wallets can be lost, stolen or forgotten, but most people today would not be caught dead without their phones.

Banks understand, and are grabbing on to that trend. Customers who do not want to fumble around in their wallet for their ATM card — or who have misplaced it for the umpteenth time — will soon be able to unlock cash dispensers’ coffers by using their phone.

皮夾可能會搞丟、被偷或是忘了帶，但時下多數人怎麼樣也要把手機帶在身邊。銀行業者深明這一點，並正緊緊把握這個趨勢。不想在皮夾裡翻找ATM（自動櫃員機）卡片、或是無數次忘記卡片放在什麼地方的顧客，很快就能用自己手機來為自動提款機的錢箱解鎖。

JPMorgan Chase, which has more ATMs in the United States — 18,000 — than any other bank, has activated this technology on a few hundred machines in four test cities, including Miami and San Francisco. Six thousand more are upgraded and ready to go.

Bank of America and Wells Fargo plan to introduce cardless options to all their machines by the end of the year. And while swiping an ATM card may not exactly seem onerous, bankers think going card-free will be a hit with consumers.

“It’s about having the choice,” said Jonathan Velline, Wells Fargo’s head of ATM and branch banking. “If you’ve lost your card or left home without your wallet, chances are you still have your smartphone in your hand.”

摩根大通銀行在全美的ATM比任何其他銀行都多，達1萬8000台，該行已在邁阿密、舊金山等四座試點城市的數百台機器啟用這項技術。另有6000台機器亦已升級，準備推出。

美國銀行和富國銀行計畫在年底前把無卡功能選項導入旗下所有機器。雖然刷個ATM卡片似乎並沒那樣麻煩，但銀行業者認為無卡交易會大受消費者歡迎。

富國銀行ATM暨分行金融業務部門主管喬納森．威靈說：「這跟有所選擇有關。若你遺失了卡片或出門沒帶皮夾，你手上很可能仍有智慧手機。」

But of course, any new financial technology brings with it new security holes.

For decades banks have battled “skimming,” in which criminals sabotage ATMs to steal the information off a card and use it to clear out people’s accounts. The replacement of magnetic stripe cards with chip cards significantly reduced that problem, but mobile access brings in new worries.

當然，任何新的金融科技都會帶來新的安全漏洞。

銀行業者數十年來一直跟「側錄」行為對抗，罪犯破壞ATM來竊取卡片資訊，並用來提光人們的帳戶。以晶片卡取代磁條卡大大減少了這個問題，但行動登入則帶來了新的憂慮。

One Chase customer recently had $2,900 stolen from her account through the bank’s new cardless system — which she had never used. A thief got her online banking user name and password, installed Chase’s mobile app on his or her phone, and used it to withdraw cash. Unlike most cardless systems, Chase’s does not require customers to enter their four-digit PIN at the cash machine.

Chase refunded the customer’s lost money and immediately made security changes. “We’ve put safeguards in place to protect our customers,” said Michael Fusco, a Chase spokesman. The bank’s system still does not require PINs, but Chase is confident it can detect and prevent similar attacks, he said.

一名摩根大通顧客最近被人透過該銀行新的無卡系統，從她帳戶內偷走2萬9000美元，但該系統她卻從未使用過。有個小偷拿到她的線上銀行使用者名稱與密碼，在他或她的手機上安裝了摩根大通的行動App，並利用它來提款。跟多數無卡系統不同的是，摩根大通銀行的App並未要求顧客在自動提款機上輸入4位數的PIN碼。

摩根大通發言人麥可·法斯科表示，摩根大通退還了該顧客損失的錢，並立即進行安全性更改。「我們已實施安全措施來保護我們的顧客。」他並說，該行系統仍未要求輸入PIN碼，但有信心現在可偵測並防止類似攻擊。

Other banks have fared better, and say their fraud rates on mobile ATM transactions are significantly lower than those for traditional card-swipe withdrawals.

Wintrust Financial, which operates community banks in Illinois and Wisconsin, added cardless access to all its 250 cash machines nearly three years ago. Thanks to multiple layers of security, there has been no fraud so far, said Thomas P. Ormseth, a senior vice president at the bank. (“Knock on wood,” he added.)

其他銀行的情況更好，並表示它們行動ATM交易的詐欺率遠低於傳統的刷卡取款交易。

銀行業者Wintrust Financial在伊利諾州與威斯康辛州經營社區銀行，在旗下所有250台自動提款機新增無卡登入功能已接近三年。該銀行資深副總裁湯瑪斯．歐姆西斯表示，多虧有多層安全機制，迄今還未發生詐欺事件。（他接著說：「老天保佑。」）

Source: https://paper.udn.com/udnpaper/POH0067/311064/web/