Identity Theft in the Mexican Financial System: An Urgent Threat Requiring Immediate Action

In .IT Operations, Blogfest-en by Baufest

By Bernardo Córdova, Account Manager at Baufest.

Tuesday 16 - July - 2024
Baufest
Concepto de red de datos de seguridad, Impedir el robo de identidad en línea.

In the Mexican financial landscape, identity theft poses a serious threat to individuals, institutions, and the economy as a whole. This crime, which involves stealing personal data to gain undue financial benefits, has seen alarming growth in recent years, exploiting deficiencies in identity validation processes and a lack of adequate regulation.

While obtaining precise figures on this crime is complex, various indicators reveal its magnitude. In 2022, the National Commission for the Protection and Defense of Financial Services Users (CONDUSEF) recorded nearly 4.5 million fraud claims in the banking sector, 13.5% more than the previous year. Although the specific number of identity theft cases is not broken down, this figure reflects the prevalence of fraud in Mexico.

Even more concerning is that, despite being classified as a crime in 26 states of the country, identity theft is not criminalized in the Federal Penal Code. This “legal loophole” creates a judicial gap that hinders the effective prosecution and punishment of criminals.

Modus Operandi and Facilitating Factors

Identity theft schemes often operate by falsifying documents such as voter IDs (INE), proof of address, and bank statements. Criminals take advantage of weaknesses in the security controls of financial institutions, such as:

  • Deficient identity validation processes: Lack of rigorous document verification, absence of biometric authentication mechanisms, and excessive reliance on digital data without physical corroboration.
  • Lack of regulation and supervision: The absence of strict regulatory frameworks and inadequate oversight by competent authorities allow some institutions to operate with unsafe practices.

Devastating Consequences

In many cases, victims do not realize the fraud until they notice irregularities in their credit history and/or receive notifications of debts they did not incur. This lack of immediacy complicates timely action and increases the negative impact of the crime, leading to severe consequences:

  • Difficulty accessing future financing: Damage to their credit history prevents them from obtaining loans, credit, or opening a bank account.
  • Economic losses: They are forced to assume fraudulent debts or invest resources in costly legal processes to clear their name.
  • Emotional damage: Stress, anxiety, and concerns about legal and financial repercussions negatively affect the victim and their family.

On the other hand, financial institutions also suffer significant impacts:

  • Economic losses: Identity theft fraud represents a substantial financial loss.
  • Reputation damage: Exposure to such frauds erodes customer trust and tarnishes the institution’s image.
  • Legal problems: Institutions may face legal and regulatory penalties for not implementing adequate security measures.

A Call for Comprehensive Action and Shared Responsibility

Combating identity theft in Mexico requires a joint and sustained effort from various actors:

As users:

  • Protect personal information: Avoid sharing sensitive data online and carefully safeguard important documents.
  • Monitor credit history: Regularly review credit history to detect any fraudulent activity and report it immediately to the financial institution and relevant authorities.

Authorities:

  • Criminalize identity theft as a federal crime: It is essential to establish clear national criminalization with severe penalties to deter criminals and facilitate their prosecution.
  • Strengthen regulatory frameworks: Implement stricter requirements for account opening and credit acquisition, and conduct regular audits of financial institutions to assess their identity validation processes, security measures, and regulatory compliance.

Financial institutions and companies:

  • Train staff: Provide continuous training to employees on identity theft fraud techniques and procedures to detect and prevent it.
  • Invest in cutting-edge technology: Implement robust technological solutions that allow for precise and reliable identity validation.

Institutions that fail to take measures to combat identity theft face significant economic, legal, and reputational impacts. In addition to direct losses, they may encounter indirect costs such as difficulties in attracting new customers, long-term growth impacts, and even reduced morale and productivity among employees.

Artificial Intelligence: A Powerful Weapon Against Fraud

Current identity validation methods are vulnerable and unreliable:

  • Email and phone number validation is often superficial.
  • There is no “physical verification” of a declared address through a copy of a bank statement.
  • Inability to detect falsified or cloned identity documents.

Implementing Artificial Intelligence components in a financial service allows for a DDB Identity Flow Process (data, documents, and biometrics). This process halts credit operations at the slightest indication of inconsistency and presents the contradictory data for analysis and resolution.

The combination of texture and metadata analysis algorithms, anomaly detection, and neural networks reveal forgeries with a high degree of accuracy. A study published in the journal “IEEE Transactions on Information Forensics and Security” found that the combination of texture analysis and neural networks achieved a 99.7% forgery detection rate.

It is essential to consider some limitations such as potential biases in the algorithms, data quality, and the evolution of fraud techniques. Algorithms and detection techniques must be continuously updated.

Looking Ahead

It is crucial to recognize that this challenge is persistent and its complete eradication is unlikely. Identity theft in the Mexican financial system represents a significant threat. The lack of federal criminalization, deficiencies in identity validation processes, and inadequate regulation and supervision have created a conducive environment for criminals to thrive.

While there is no perfect solution, implementing tools like Artificial Intelligence along with other security measures (both physical and digital) can significantly contribute to reducing the risk and impact of this crime and protecting users. The commitment and collaboration of all involved actors are essential to creating a more secure and resilient financial ecosystem, thereby strengthening trust in it.