Banking, payments, and financial-services security remain under pressure from fraud and MFA gaps

Financial services and payment environments appear repeatedly in the feed as targets of phishing, account takeover, and fraud infrastructure. The articles describe fake investment schemes, phone-based social engineering, weak MFA coverage in financial workforces, and extortion campaigns that exploit payment or onboarding processes. The common pattern is that attackers favor low-friction identity compromise over noisy malware when they can, especially against staff accounts or customer-facing payment systems. This is directly relevant to Swiss banks, canton administrations, and PMI operating in regulated payment chains, because the weakest link is often the user or service account rather than the core banking platform. Several stories also show that finance teams are especially vulnerable to “boring” phishing that looks operationally normal. That makes detection harder because the messages blend into legitimate workflows. The core lesson is that financial security now depends as much on identity and process control as on technical perimeter defenses.

Sources

• Only 28% of financial workforce MFA is phishing-resistant — Help Net Security
• Finance phishing works because it sounds boringly normal — Help Net Security
• Dutch police dismantle global crypto investment scam, arrest alleged mastermind — The Record — Cybercrime