Part Two
Building on yesterday’s article, ‘From Phishing to Pig Butchering: Understanding Modern Financial Scams,’ this piece continues the discussion and delves deeper into the evolving tactics used by fraudsters.
Proactive Measures to Protect Yourself
Taking proactive steps can significantly reduce your risk of falling victim to scams. Consider implementing the following precautions:
- Verify Payment Details: Always double-check account numbers or payment instructions before sending money.
- Secure Accounts: Use strong, unique passwords and enable two-factor authentication for email and financial accounts.
- Use Regulated Platforms: Only transact through well-known, licensed, and regulated exchanges or financial services.
- Scrutinise Communications: Carefully read emails and messages for urgent requests, grammatical errors, or inconsistencies.
- Confirm Identities: Always verify the identity of individuals, companies, or organisations before sharing information or making payments.
- Avoid Stranger Links: Never invest or transfer funds through links sent by unknown parties.
- Monitor Accounts: Regularly review your bank statements and online accounts for unusual activity.
- Use Call-Blocking Features: Filter unknown or suspicious numbers using phone or carrier tools.
- Protect Personal Information: Never share sensitive details online or over unsecured channels.
- Assess Contact Details: Check the authenticity of phone numbers, emails, and websites before responding.
- Check Licenses and Reviews: Confirm the legitimacy of financial service providers through official registers and customer feedback.
- Stay Informed: Keep up to date with scam alerts and guidance issued by banks, regulators, and authorities.
- Seek Professional Advice: Consult a licensed financial advisor before making significant investments.
- Trust Your Instincts: If something feels off or suspicious, step back and reassess before taking action.
By staying vigilant and following these measures, you can significantly reduce your risk of falling victim to scams and protect both your finances and personal information.
Responsibility of Banks, Financial Institutions, and Virtual Financial Asset Service Providers
As cybersecurity threats continue to grow in sophistication, it is not only users who must be cautious – banks, financial institutions, and virtual asset service providers also carry responsibilities to protect customers and prevent fraud.Local trends in regulatory oversight and Arbiter decisions provide important guidance on how liability is shared in cases of scams and fraudulent transactions.
While customers typically bear primary responsibility for authorising transactions and sharing sensitive information, the Arbiter has consistently emphasised that banks and other service providers also carry a portion of responsibility. This underscores the importance of proactive measures by financial institutions, including direct communication with customers, rather than relying solely on social media posts or website warnings, to alert them about potential scams.
Licensed payment service providers (PSPs – including banks, financial institutions, and virtual financial asset service providers (VASPs)- have different regulatory obligations related to monitoring payment transactions and protecting clients.
Banks
Banks are expected to:
- Implement robust transaction monitoring systems to detect suspicious activity.
- Educate and alert customers about potential scams and fraudulent transactions.
- Investigate unusual or potentially fraudulent transactions promptly.
The Arbiter, in its recent decision, emphasises that banks must go beyond general awareness campaigns and communicate directly with customers to reduce risk. Banks are partially accountable even when customers authorise transactions, making proactive prevention measures essential.
Financial Institutions (Licensed under the Financial Institutions Act)
Financial institutions share similar obligations with banks regarding transaction monitoring. They are urged to:
- Enhance due diligence procedures, specifically for corporate clients managing funds derived from retail customers.
- Require corporate clients to implement thorough onboarding systems for their own customers to reduce the risk of fraud.
- Exercise increased scrutiny for payment orders that provide only an IBAN without specifying a named beneficiary.
- Investigate transactions that deviate from typical patterns, with heightened attention to any subsequent transfers that appear unusual or suspicious.
Virtual Financial Asset Service Providers (VASPs)
Although VASPs are not subject to the same transaction monitoring standards as banks, they still hold fiduciary duties and are increasingly required to maintain detailed records. The Arbiter recommends that VASPs:
- Establish comprehensive onboarding processes, with particular attention to retail clients, to ensure proper verification and risk assessment.
- Inform clients of potential risks related to custodial wallets and the possibility of fraudulent schemes.
- Keep accurate and detailed records of external wallet holders, as digital asset transfers often move through complex networks that can obscure the ultimate beneficiaries.
- Enhance fraud prevention mechanisms, as highlighted in past Arbiter decisions.
Measures Financial Institutions Can Take to Reduce Liability
To mitigate risks and ensure compliance, financial service providers should:
- Maintain robust transaction monitoring systems.
- Alert customers promptly about suspicious activities.
- Investigate and document all suspicious transactions thoroughly.
- Record all customer interactions for accountability.
- Monitor short-term and unusual transaction patterns.
- Keep systems and software up to date.
- Block transactions when there is suspicion of fraud or unauthorised activity.
By adopting these measures, banks, financial institutions, and VASPs can significantly reduce their liability while protecting customers from emerging scams and fraudulent schemes.
Are You a Victim of a Financial Scam? What You Should Do
Falling victim to a financial scam can be stressful and disorienting, but it is important to act quickly. Taking no action allows fraudsters to succeed and can reduce your chances of recovering lost funds. Here are the steps customers and consumers should follow:
1. File a Complaint with Your Financial Institution
The first step is to report the incident to your bank or financial institution in writing, following their complaints procedure. Include in your complaint:
- A detailed description of the scam, including dates and times.
- Any communications received from the fraudster (emails, messages, chat logs).
- Proof of financial loss resulting from the scam.
Banks are required to respond within 15 working days of receiving a complaint. Filing a complaint can help trace funds and may increase the likelihood of recovery, while also contributing to stronger security measures and a safer financial environment.
2. Report the Scam to the Police
In parallel, file a report with local authorities. Reporting to the police is crucial for official investigation and potential prosecution of the fraudsters.
3. Collect Evidence
Gather as much evidence as possible, including:
- Emails, messages, or chat logs from the scammer.
- Financial transactions and receipts.
- Screenshots or documents related to the scam.
These are essential if you pursue legal action or escalate the complaint to OAFS.
4. Escalating the Complaint to the Arbiter for Financial Services
If your bank does not respond within the 15-day period or if you are unsatisfied with their response, you may file a complaint with the Arbiter for Financial Services (OAFS). Complaints to the Arbiter can only be submitted against banks and financial institutions licensed by the Malta Financial Services Authority (MFSA).
When considering responsibility, the Arbiter examines factors such as:
- Timing and nature of the bank’s interventions
- Actions taken to alert the customer
- Customer payment patterns and transaction history
- Robustness of the bank’s monitoring systems
- Any gross negligence by the bank or user
- Customer involvement in the scam
- Warnings issued by the financial institution
- Customer response to those warnings
- Whether the fraudster used normal communication channels to appear genuine
- Special or unusual circumstances
Concludingly, while modern technology offers unparalleled convenience, it also exposes us to new forms of risk. Scammers are increasingly sophisticated, using phone calls, text messages, emails, and online platforms to exploit unsuspecting victims. Understanding the methods they use and adopting proactive safeguards are essential steps in protecting both your personal and financial security. Awareness, caution, and timely action remain your strongest defences against fraud.
If you are a victim of a scam and require legal advice, please get in touch on [email protected].
Questo articolo è solo a scopo informativo e non deve essere interpretato come consulenza legale.
Article and research done by Ms Caitlin Turner, currently reading a Master of Advocacy at University of Malta.
Sciberras Advocates, fondato dall'Avvocato Adrian Sciberras, è uno studio legale con sede a Malta. Lo studio si vanta di essere multidisciplinare, innovativo e flessibile per far fronte ai tempi che cambiano e a qualsiasi sfida nello scenario legale locale e internazionale. Qualunque siano le complesse esigenze private o societarie richieste, Sciberras Advocates offre soluzioni legali pratiche ed economiche per raggiungere i risultati desiderati. È possibile contattare Sciberras Advocates telefonicamente al numero +35627795222o via email su [email protected].











