Behavioral protection at Bank Pekao – a new dimension of security in electronic banking

In September, Bank Pekao S.A., in collaboration with Biuro Informacji Kredytowej S.A., is launching an innovative solution to protect customers against fraud. Behavioral protection, a significant enhancement to anti-fraud systems, will enable more effective detection of unauthorized access to online banking by analyzing unique user behavior patterns. The new service will be available free of charge to all customers, and consent for its activation will be granted starting July 1st of this year.

In an era of dynamic technological development and the simultaneous increase in advanced cyberfraud, traditional authentication methods are no longer sufficient. Logins, passwords, SMS codes, and mobile authorization may not be sufficient to secure access to online banking and the execution of transactions – especially in situations of phishing, various types of social engineering manipulation, or even device hijacking. In response to these threats, Bank Pekao is launching a new behavioral protection service, which aims to increase the effectiveness of detecting unauthorized access.

"The scale and complexity of digital fraud are growing, and criminals are using increasingly advanced manipulation methods. Therefore, it is the bank's responsibility to build a culture of security among customers and implement modern and effective protection tools. Behavioral protection is a step in developing a multi-layered security system that helps protect our customers from potential fraud. It's worth noting that it's not the only solution supporting the security of funds – we've already introduced two-factor login using the PeoPay app or a hardware key, as well as the ability to verify an employee's identity during a phone call. We also remember the role of education, which is why we constantly conduct activities to raise awareness of growing cyber threats" says Paweł Krakowiak, Director of the Fraud Prevention Department at Bank Pekao S.A.

Behavioral protection technology is based on the analysis of unique user behavior patterns when using online banking – both on the Pekao24 website and in the PeoPay mobile app. It collects and processes behavioral data, i.e., information about how the user uses the keyboard, moves the cursor or finger across the screen, scrolls pages, or holds the mobile device. This data is used to create an individual, dynamic behavioral pattern for the customer. If the bank's security system, which uses this data, detects a significant deviation from the pattern, it can block the requested transaction and redirect it for additional authorization. The solution requires no additional steps after activation – the service runs in the background, does not track content, and does not record personal data.

Beginning July 1st, Bank Pekao customers can activate the behavioral protection service by providing appropriate consent to data processing using the PeoPay app, the Pekao24 online service, by calling the hotline, or by visiting any branch. Once these formalities are completed, the solution will begin operating automatically in September.

The service is being implemented in cooperation with Biuro Informacji Kredytowej S.A. (Credit Information Bureau), which has advanced analytical infrastructure, including for assessing fraud risk based on customer online authentication. Integrating behavioral solutions with Bank Pekao's online banking platform allows for increased efficiency and effectiveness in detecting unauthorized customer activity in real time, while ensuring compliance with regulatory and privacy regulations.

More information about the new behavioral protection service can be found at: Ochrona behawioralna - Bank Pekao S.A.