Authorised push-payment (APP) fraud
Customers moving money to scammers under social-engineering pressure is the fastest-growing loss category in retail banking. Reimbursement obligations have caught up.
For business
🏦 Banks & fintechs
Fewer fraud losses, happier customers.
Most retail fraud now begins outside the bank: a phishing text, a SIM-swap, a phone call from a fake fraud team. Help your customers spot it before they tap "send", and you cut both the loss and the reimbursement bill.
Where the gaps are
What costs your business, first.
These are the three patterns that drive most of the personal-cyber risk for banks & fintechs. The plan addresses whichever one matters most for your population.
Account takeovers via personal accounts
Credential stuffing, SIM-swaps, and email compromise begin outside the bank perimeter but end inside it as fraudulent transfers.
Differentiation in a flat product market
Younger primary-bank decisions hinge less on rate and more on whether the bank visibly protects them. Active personal-cyber tooling is a measurable signal.
The case
Why this is worth doing.
The points below are sourced where a public source exists. Where a number is an internal model or industry observation rather than a measured fact, we say so.
-
APP-fraud reimbursement is now mandatory for most UK PSPs (50/50 between sending and receiving banks) under PSR rules effective October 2024.
Payment Systems Regulator (UK), 2024
-
FCA Consumer Duty requires firms to deliver good outcomes for retail customers, including helping them avoid foreseeable harm.
FCA, PRIN 2A (UK), 2023
-
Customer-side hygiene reduces the funnel of cases that ever reach reimbursement; it is a frequency lever, not a severity lever.
-
Demysti5 integrates as a co-branded benefit inside online banking, or as a standalone offering for select customer segments.
Frameworks and obligations
Aligned with what you already have to do.
We do not claim certifications we do not hold. The list below is where Demysti5 either fits an existing obligation, supports a control, or stays out of regulated data flows by design.
PSR APP-Fraud Reimbursement Requirement (UK)
Customer education programmes are recognised mitigants in scheme rules.
FCA Consumer Duty (UK)
APRA CPS 234 (Australia)
Information-security obligations including supplier and customer touchpoints.
DORA Article 8 (EU)
Aligns with consumer-protection signalling for ICT-related incident readiness.
Your plan starts with one 60-second check.
Same product, shaped to how you live online. No email, no card, no download.