ADGM FSRA Information Technology Risk Management Guidance (VER01.201124) 12.2: Detect, report and investigate fraud on online services, notify and support affected customers and replace compromised credentials

What does 12.2 require?

Systems detect suspected fraud through suspicious login detection, real-time fraud surveillance, transaction pattern deviation analysis and abnormal system activity, and customers are notified of suspected fraud in time; customers have a prompt means to report potential fraud and obtain replacement of compromised credentials; and procedures investigate detected or reported fraud with severity classification, technical resolution, escalation and reporting, integration with incident management and continuity plans, and timely updates to affected customers on progress and outcome.