Rule · CBJ · 29 Jan 2014
Banks operating in the Kingdom are reminded of recent email hacking incidents resulting in unauthorized transfers. The Central Bank emphasizes adherence to its Circular No. (1/2046) dated 2005/3/21, specifically Item Second - 2, which requires banks to use verification techniques for electronic banking services to ensure accountability and non-repudiation. Furthermore, banks are required to report such cases to the competent security authorities.
Greetings,
We reiterate recently - and as some banks operating in the Kingdom have informed us - the occurrence of hacking operations on their customers' email, which resulted in the creation of incorrect correspondence on customers' email and the issuance of transfer orders to different parties without the customer's knowledge.
I emphasize the necessity of adhering to the provisions of Central Bank Circular No. (1/2046) dated 2005/3/21 regarding the principles of electronic banking risk management, specifically (Item Second - 2), which obliges the bank to ensure the use of verification means and techniques for banking services executed by electronic means, thereby ensuring accountability and non-repudiation, to avoid potential losses to customers or the bank resulting from such fraudulent operations, which could substantially affect its financial soundness and reputation.
I also re-emphasize the necessity for banks to report such cases to the competent security authorities.
Please accept our highest regards,
Governor
Dr. Ziad Fariz
Website: www.cbj.gov.jo • E-mail: info@cbj.gov.jo • 4638889, 4639720, 4639761 Fax • 4630301 Phone • P.O. Box 27 Amman 11118 Jordan
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
More like this from CBJ
CBJ published 3 documents in the last 30 days. We email you each new one the day it's published.
Source: Central Bank of Jordan — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated