Scam Protection in Banking Apps Blueprint: Stop Fraud In-App

mBank POL offers a security checker that shows whether customers follow key mobile banking safety rules. It confirms completed protections, such as screen lock, push alerts, and mobile authorisation, turning invisible safeguards into visible reassurance. This builds trust and encourages safer app behaviour.

Erste Bank Austria AUT launches an in-app Security Check feature within its George platform that audits five key device parameters: app version, jailbreak status, screen lock, download source, and operating system integrity. Each check surfaces a clear pass/fail status alongside a direct fix action, empowering users to remediate vulnerabilities instantly. The main differentiator is its proactive, user-facing security posture — closing device-level gaps before fraudsters can exploit them, rather than relying solely on backend detection.

mBank CZE launches automatic mKlíč device pairing that instantly sets the mobile app as the primary verification method for internet banking. Upon successful pairing, users see a confirmation screen and are immediately ready to verify payments and operations without any additional opt-in step. The key differentiator is the elimination of a separate activation flow, reducing friction and streamlining the transition to app-based authentication.

Macquarie AUS launches a dedicated authenticator app that delivers actionable push notifications allowing users to approve or deny payments and account changes with a single tap. The device-bound solution eliminates reliance on SMS one-time codes, functioning seamlessly even without cellular connectivity abroad. This approach shifts transaction authorization control directly to the customer while significantly reducing SIM-swap and SMS interception fraud risks.

mBank CZE sends an instant push notification when mobile app pairing is initiated on another device. This real-time warning alerts users to potential unauthorized access. The immediate visibility creates a strong sense of control and helps prevent account takeovers.

Bunq NLD lets users log in on a new device with just their phone number, security code, and a quick selfie. Biometric re-identification replaces lengthy recovery flows and only one mobile device can be active at a time, keeping account access simple while protecting against takeover.

Bank Pekao POL launches opt-in behavioural biometrics protection within its PeoPay app that continuously learns each user's unique typing patterns and navigation gestures. Suspicious sessions that deviate from the established behavioural profile are automatically paused and subjected to additional verification. Unlike credential-based security, the system identifies impostors without introducing friction into everyday banking interactions.

Nubank BRA launches Street Mode, a security feature that automatically enforces lower transaction limits for Pix payments, transfers, and bill payments when users are outside trusted Wi-Fi networks. Any larger transaction attempted away from home requires facial recognition to proceed. The feature significantly reduces the risk of financial loss from a stolen unlocked device by tying spending power to physical context.

Moneta CZE sends proactive push alerts that warn customers about ongoing phishing, scam calls, and fake websites. It brings fraud prevention outside the app and into the moment, making threats hard to miss. This boosts awareness and helps users protect sensitive banking details before it is too late.

UniCredit CZE launches proactive push notifications that warn users about active online fraud and phishing threats before a scam attempt reaches them. Alerts appear either as a concise 'Beware of fraudsters' headline or as a longer message directing users to the Smart Banking in-app inbox for full safety guidance. The key differentiator is the pre-emptive, awareness-first approach — intervening upstream rather than reacting after fraud has already occurred.

ČSOB CZE uses homepage banners to warn users about specific fraud scenarios like unsafe marketplace payments. It delivers clear, situational advice with strong visual cues, making risks instantly understandable. This helps prevent scams by influencing behavior at the right moment.

Raiffeisenbank CZE shows in-app fraud guidance focused on scams on marketplaces like Vinted and other bazaars. It explains common attacker tricks and gives clear do’s and don’ts in plain language. This helps customers spot fraud earlier and avoid risky actions.

ANZ Plus (AUS) launches real-time payee name verification that cross-checks the recipient's name against the destination account before any transfer is processed. When a mismatch is detected, a prominent red warning is displayed and users must complete a second confirmation step to proceed. This friction-by-design approach targets misdirected payments and impersonation fraud before funds leave the account.

Starling Bank GBR launches Scam Intelligence, a Gemini-powered feature that allows users to upload marketplace listings or seller chats for instant AI-driven scam analysis before completing a payment. The tool intervenes at the critical moment of doubt, scanning for common fraud signals in real time. This proactive approach shifts scam protection upstream, reducing financial losses from online marketplace fraud.

ANZ Plus (AUS) launches real-time payee name verification that cross-checks the recipient's name against the destination account before any transfer is processed. When a mismatch is detected, a prominent red warning is displayed and users must complete a second confirmation step to proceed. This friction-by-design approach targets misdirected payments and impersonation fraud before funds leave the account.

Monzo GBR launches a friction-based safety mechanism that alerts users when a new payee's bank cannot verify the account name and temporarily locks the 'Continue anyway' button behind a mandatory countdown timer. The forced pause interrupts autopilot behaviour at the highest-risk moment in a payment flow, compelling users to actively read the warning before proceeding. The key differentiator is the deliberate UX friction design — turning a dismissible warning into an enforced decision point to reduce authorised push payment fraud.

Revolut GBR flags potential scam scenarios with a real-time in-app banner like “Revolut is not calling you” when users open the app during a call. Instant reporting of suspicious numbers strengthens protection, creating a powerful, contextual defense that actively prevents fraud.

mBank POL launches an in-app scam detection mechanism that identifies when a user is on an active phone call while initiating a large transfer or loan application, immediately displaying a warning that mBank is not the caller. Legitimate mBank employee calls are verified by surfacing the employee's credentials directly in the app, neutralizing impersonation scripts mid-conversation. The feature targets social engineering attacks where fraudsters pose as bank representatives to authorize fraudulent transactions.

Starling Bank GBR launches a contextual anti-fraud alert displayed directly on the payee screen, reminding customers that the bank has never contacted them by phone. The feature includes a 'call status sheet' listing actions Starling will never request — such as moving money to a 'safe account' — and names the specific scam type at the exact moment a transfer is initiated. The main differentiator is the precision timing of the warning: appearing at the highest-risk moment in the payment journey rather than in a generic security settings menu.

Moneta CZE uses full-screen overlays to put fraud prevention in front of customers before they act. The message names a specific scam, explains the risk in plain language, and offers one-tap help. This makes warnings harder to ignore and improves customer safety.

Revolut GBR launched a new security awareness campaign directly inside transaction flows. It warns users with contextual scam messages, risk signals, and “safe account” alerts before money is sent. This turns fraud education into a live payment safeguard that can stop losses in time.

Zing GBR launches a pre-payment scam awareness checklist that surfaces red flags — such as 'payee never met in person' — before any friends and family transfer is completed. The flow is deliberately asymmetric: cancelling the payment is a single prominent button, while proceeding requires the user to actively tick a risk acknowledgement checkbox. This friction-by-design approach shifts the cognitive burden onto the moment of highest vulnerability, nudging users away from authorised push payment fraud without blocking legitimate transfers.

Truecaller SWE launches real-time scam call identification powered by crowd-sourced community reports displayed directly on the incoming call screen. The feature labels unknown numbers as likely scammers and surfaces comments from other users who have previously received calls from that number. By turning every user into an early warning sensor, the system creates a continuously updated, community-driven fraud detection layer that helps users make informed decisions before answering or engaging.

Wise GBR launches a Kill Switch feature that instantly logs out all devices, freezes every linked card, and cancels pending transactions in a single tap. The tool is designed to protect users in high-stress scenarios such as scams, stolen phones, or suspicious account activity. Its key differentiator is the unified, immediate control it gives users before they even need to contact customer support.

Monzo GBR introduced an undo payment feature allowing users to cancel sent transactions instantly via a visible prompt, helping avoid mistakes and improving control over outgoing payments.

mBank CZE launches an in-app authenticated calling feature that connects users directly to mLine support without manual identity verification. The app passes authentication credentials automatically, eliminating repetitive security checks during the call. A confirmation dialog is shown before dialing, making the handoff transparent and the support experience significantly faster.

Erste Bank Hungary HUN launches biometric pre-authentication for in-app calls to its contact center via the George app. Users confirm their identity with mPIN or biometrics before the call connects, so agents receive a verified caller with a pre-selected topic — eliminating security questions entirely. The key differentiator is the seamless handoff between digital identity verification and live agent support, reducing friction and phishing risk simultaneously.

ING Bank Śląski POL launches real-time call verification in its Moje ING app, sending customers a push notification with the consultant's name whenever an ING employee initiates a call. If no matching call record is found, the app immediately flags the incoming call as suspicious. The feature gives users a clear, first-ring signal to hang up on fraudulent impersonators before any conversation begins.

Florence Bank USA launches a real-time push notification system tied to its FraudDetect service that instantly alerts customers when a suspicious debit card transaction is flagged. Customers can respond directly in-app via the notification or choose to call a dedicated phone line, with separate numbers for business and after-hours support. A key security differentiator is that sensitive transaction details are deliberately withheld from the lock screen, reducing exposure of financial data to bystanders.

Starling Bank GBR launches a contextual Get Help screen embedded directly within every payment transaction. The feature presents users with three clear options — raise a dispute, report fraud, or flag goods not received — eliminating ambiguity in the claims process. By routing users to the right claim type straight from the transaction view, Starling reduces misfiled claims and accelerates account protection.

Lloyds Bank GBR launches in-app payment reporting that lets customers flag an issue directly from the transaction detail screen. The flow opens with a plain-language explanation of the difference between fraud and a dispute, ensuring users select the correct category from the first tap. Smart routing then files the case with the appropriate team automatically, eliminating unnecessary transfers, callbacks, and resolution delays.

Cash App USA launches a transparent dispute tracking screen that displays case status, a dated timeline, and an estimated resolution date for every open dispute. The feature proactively surfaces progress to users without requiring them to contact support, directly addressing the most common source of post-dispute anxiety. By making case visibility a default part of the experience, Cash App reduces inbound support contacts while improving user trust during sensitive financial moments.