Threats from Fraudulent Bank Web Sites: Risk Mitigation and Response Guidance for Web Site Spoofing Incidents

Gramm-Leach-Bliley Act (GLBA)
Sarbanes-Oxley Act (SOX)
STRONG AuthenticationOffice of the Comptroller of the Currency (OCC)Identity Theft
Risk Management

The purpose of this bulletin is to provide banks with guidance on how to respond to incidents of Web-site spoofing. The bulletin addresses procedures banks can implement to mitigate the risks to themselves and their customers by detecting and responding to Web-site spoofing. It also identifies the types of information banks can provide to law enforcement authorities to assist in investigating illegal activities. This bulletin expands on OCC Alert 2003-11, “Customer Identity Theft: E-mail-Related Fraud Threats,” September 12, 2003.

> Read entire regulation (log in required - registration is free)