Carter Pape

Key insight : Fiserv's own lawyers say the company's system can unfreeze a card flagged for fraud before the call reaches an agent.

Key insight : Fincen withdrew its first-ever proposal to treat an entire class of transactions, international crypto mixing, as a primary money-laundering concern.

Key insight : South Korea's Financial Services Commission blamed systems used by employees and outside personnel such as loan recruiters and contractors for the intrusions.

What's at stake : Several affected institutions had stopped working with Mercadien years earlier, yet their customers' data was still on its systems; auditors usually keep workpapers five to seven years.

Business customers in two lawsuits say callers posing as them got past First Horizon's phone identity checks, and more than $23 million in wires followed.

Key insight: Across the security suits, Fiserv's court filings say stronger login protections are available on many of its systems, and each client decides whether to use them.

Key insight: Bank of America tuned its transaction-monitoring model to improve SAR yield, the share of flagged customers whose activity ends up in a SAR, and cut more than 8,200 cases in one 2021 recalibration.

Key insight: The extortion group n0n says it will publish Finzly's "access secrets for payment infrastructure" and cloud access keys if no settlement is reached.

The ICBA-supported Romance Scam Prevention Act requires fraud-ban notices that most apps already send.

Key insight: Attackers have fired millions of attempts at the PHP2Shell flaws, but no U.S. bank or credit union has publicly reported a compromise.