Credit union NOVEMBER 2019

Senate bill to exempt veteran- owned businesses from lending cap News and Trends (Page 9)

CUs face evolving botnets, phishing and other cybercrime threats Deep Dive (Page 13)

SAFE Brings TARGETED MARKETING To An Increasingly On-Demand World

FEATURE STORY (Page 6) TABLE OF CONTENTS

WHAT’S INSIDE A look at how credit unions are partnering with technology companies to drive customer loyalty, boost membership 03 and introduce new services

FEATURE STORY Grace Roberto, senior digital product manager at SAFE Credit Union, explains the new targeted marketing function on the 06 CU’s mobile app and the challenge of balancing usefulness and members’ privacy

NEWS AND TRENDS The latest credit union headlines, including Google’s foray into CU checking accounts and Mastercard’s partnership with 09 30 Irish credit unions

DEEP DIVE An in-depth examination of how cybercriminals target CUs 13 and their members with botnets, phishing and ransomware ACKNOWLEDGMENT The Credit Union Tracker® was done in collaboration with PSCU, and PYMNTS is grateful for the company’s support ABOUT and insight. PYMNTS.com retains full editorial control over 15 Information on PYMNTS and PSCU the following findings, methodology and data analysis. WHAT'S INSIDE

Credit unions (CUs) are unique among financial insti- such tools are responsible for one out of every five ac- tutions (FIs) for the loyalty they inspire among their count openings. members. PYMNTS’ Credit Union Innovation Index CUs thus need to collaborate with each other and found that 65 percent of CU members chose their cred- third-party providers if they want to thwart cyberattacks it unions because they trusted them, with 60.8 percent and provide expanded services to members. saying they would not leave their CUs for different FIs. Members appear to be much happier with their FIs than AROUND THE CREDIT UNION WORLD other banking customers, too: 58 percent reported be- The United States Senate is expressing interest in ing extremely satisfied with their primary FIs, compared credit union regulations, and two lawmakers recently to just 46 percent of non-CU consumers. introduced the Veterans Members Business Act to CUs are working with providers across numerous indus- exempt CU to veteran-owned businesses from the tries to maintain this loyalty. Technology companies are current regulatory cap of 12.25 percent of assets. Sens. helping credit unions offer the products and services Mazie Hirono (D-Hawaii) and Dan Sullivan (R-Alaska) en- their members desire, working with both individual CUs tered the bill into consideration earlier this month, and and credit union service organizations (CUSOs) to de- several CU organizations — including the Hawaii and velop case management platforms, modernize systems Alaska credit union leagues as well as the Credit Union and provide advanced loan software. Even industry gi- National Association (CUNA) — have expressed support. ants like Google are exploring the space, partnering with Another CU issue awaiting federal regulation is legal- CUs to integrate Google Pay as an alternative to tradi- ized marijuana. A recent Financial Crimes Enforcement tional debit cards. Network (FinCEN) study found that 162 credit unions Cybercrime continually threatens to derail these efforts, across the U.S. are serving the cannabis industry, with however. Credit unions face a wide range of attacks the number of FIs lending in the space increasing by 61 from bad actors, including fraudulent payments, hacked percent year over year. Cannabis has been legalized or accounts and spoofed logins. The same artificial in- decriminalized in several states but is still a Schedule telligence (AI) technologies that offer CUs valuable 1 drug under U.S. law, leaving many CUs that partic- analytical insights can also help hackers field botnets to ipate in the industry at risk of federal investigation or overwhelm their defenses, with studies indicating that prosecution.

3 © 2019 PYMNTS.com All Rights Reserved 3 What’s Inside

EXECUTIVE Credit union innovation is also prevalent abroad as ev- idenced by the 30 Irish CUs that are partnering with Mastercard to open full-service checking accounts. The INSIGHT offering will be implemented at 115 branch locations by the end of the year and is intended to provide consum- ers with an alternative to traditional accounts. The CUs plan to add the checking accounts at several more loca- tions in the future. A recent study found that 48 percent of CU For more on these stories and other credit union head- members prefer debit cards and 44 percent lines, read the Tracker’s News and Trends section (p. 9). prefer credit cards. Why are debit cards the preferred choice? A CALIFORNIA CREDIT UNION KEEPS ITS MARKETING EFFORTS TRUSTED AND SAFE

Consumers are growing accustomed to on-demand “Findings from PSCU’s 2019 Eye on Payments study indi- goods and services thanks to the prevalence of cated a shift in consumer preference from credit to debit Amazon Prime, Uber and other Silicon Valley giants. [cards] as compared to 2018. The majority of this year’s These developments are pressuring CUs — including survey respondents among all age groups reported deb- California-based SAFE Credit Union — to deliver the it cards were the most convenient and easiest way to same levels of service, with SAFE deploying a new tar- pay for items or make transactions. Debit was the most geted marketing initiative to meet such demands. For commonly used method of payment across the majority this month’s Feature Story (p. 6), Grace Roberto, SAFE’s of purchase locations and throughout different types of retail situations, ranging from restaurants to retailers to senior digital product manager, explains the ins and coffee shops. outs of the program and how the credit union balances the new capabilities with maintaining privacy. Economic uncertainty could have played a role in the shift from credit to debit. By the end of 2018, debt DEEP DIVE: CUs FACE A RANGE OF CYBERSECURITY had reached an all-time high of $8,811 per U.S. house- THREATS hold, according to a study published in the Nilson Report. Additionally, there is a great deal of speculation in the me- Cybersecurity is a hot topic in many industries, but few dia of an impending recession. Whether or not a recession face higher stakes than FIs, with credit unions being or economic slowdown is on the horizon, this notion could particularly vulnerable. They may work to protect their be affecting consumer behavior and influencing consum- members' money and data, but they are still at risk from ers to be more budget conscious and less eager to run hacks against other companies that can indirectly af- up debt on credit cards. PSCU saw the shift to debit be- fect how they handle transactions. A sizable portion of ginning to take shape when analyzing data from popular CU members say they would abandon their FIs if they spending events like the 2018 holiday shopping season fell victim to data breaches, giving credit unions even and 2019’s Amazon Prime Day.” more incentive to ensure that they adequately address cybercrime. This month’s Deep Dive (p. 13) explores the daily cybersecurity threats credit unions must tackle, as well as how they can better safeguard themselves and TOM PIERCE, senior vice president and chief marketing officer at PSCU their members with education and legislation.

© 2019 PYMNTS.com All Rights Reserved 4 4 What’s Inside

82%

Portion of CUs affected by local merchants’ data breaches since 2017

84% 12.25%

Share of consumers Current lending cap who expressed high for U.S. CUs as a confidence in their FIs’ share of assets security capabilities

50 162

Number of CU Number of CUs mergers in the U.S. serving the during Q3 2019 cannabis industry

© 2019 PYMNTS.com All Rights Reserved 5 FEATURE STORY

SAFE Credit Union Brings TARGETED MARKETING To An Increasingly On-Demand World

© 2019 PYMNTS.com All Rights Reserved 6 Feature Story

Meeting customers’ expectations and desires is a “Say a member has opted into a 5 percent cash back pro- FEATURE key goal for all enterprises, and CUs are no exception. gram, for example,” Roberto explained. “If they were ... PYMNTS’ Credit Union Innovation Index found that CU near a Barnes & Noble for a [certain] period of time, they members may not prioritize the latest technology as could receive a push notification to remind them that if much as bank and FinTech customers do, but they still they [used] their Cash Rewards card, [they would] get that value easy-to-use mobile apps and online capabilities. extra 5 percent back.” Credit unions are therefore focusing on providing these STORY She pointed to a sponsorship deal with Papa Murphy’s services to avoid losing members to technologically su- Park, home of the Sacramento Republic Football Club, perior FIs. as another example. SAFE members who entered One CU upgrading its mobile technology is SAFE Credit the geofenced stadium received messages notifying Union, which has more than $2.3 billion in assets and ap- them that if they used their debit or credit cards while proximately 235,000 members. It catered exclusively to on location they would be automatically entered into a Sacramento Army Air Corps employees when it started in sweepstakes for free tickets and a catered dinner. 1940, but the world has changed significantly since then The app can provide public service announcements in — as have members’ expectations. addition to promotional materials, and SAFE recently “All of our members are now super accustomed to an used this capability to inform its members when some on-demand world, with ... Uber and Lyft and Seamless of its Visa-branded credit cards experienced an outage. and Grubhub and Amazon Prime,” Grace Roberto, SAFE’s Member services employees saw significant drops in senior digital product manager, recently told PYMNTS. both call center and live chat volumes as a result, improv- “Now, all of that is affecting SAFE as well. Member ex- ing the CU’s back-of-house efficiencies. pectations for a really wonderful and seamless user experience in the digital space translate to that same ex- CRUNCHING THE NUMBERS pectation from SAFE.” Roberto said the largest hurdle associated with SAFE’s SAFE has been delivering on-demand experiences since outreach efforts is understanding and leveraging the 2016, when it launched a targeted marketing function on vast amount of member data collected through its mar- its mobile app. The CU leverages this capability to pro- keting tool. This information must also be combined with vide customers with instantly accessible promotions and the credit union’s other data sources to provide holistic special offers, and the company is now working to bal- views of members’ desires, financial journeys and needs. ance its outreach efforts and member privacy. Further complicating the issue is the data’s organization- al structure, as information can be stored in the CU’s data MEETING MEMBERS WHERE THEY ARE WITH PROMOTIONS warehouse, structured query language databases or un- structured data lakes. SAFE leverages a targeted marketing tool with geofenc- ing, messaging capabilities and push notifications to “SAFE is going through a lot of internal working to bring provide tailored promotional experiences. The platform about the right framework in which to [analyze this data],” integrates with the company’s mobile app and uses Roberto said. “We have a data governance committee geofencing to securely track members’ locations in pre- and an analytics committee, which have both come to- determined areas, allowing SAFE to deliver targeted gether within the last year and a half or so, so that we set advertising based on their activities outside the CU. the right framework.”

© 2019 PYMNTS.com All Rights Reserved 7 Feature Story

The credit union is also pooling its sources into a “We have had a lot of internal discussion [about] that line Salesforce database, which would allow it to offer deeper between useful and helpful versus creepy and unwanted,” insights into members’ financial journeys. The initiative she stated. “Any time we're launching a new campaign aims to layer in different data sources — including in- that has a type of geolocation-based trigger, we rely very formation about market segmentation, members and heavily on our compliance and marketing teams to keep transactions — as each becomes relevant to the CU’s un- these campaigns compliant and to have the right phras- derstanding of its members. ing, so it's not invoking any type of creep factor.”

“It’s definitely an initiative that we're in the midst of and Members are generally accustomed to targeted mar- not at the end line or anything, but that's the overall vision keting campaigns, however, and they even expect the for SAFE,” she noted. businesses they patronize to send them highly person- alized messages. Roberto said this is largely a result of MEMBER PRIVACY CONCERNS the on-demand world created by Silicon Valley compa- Roberto said striking a balance between actionable mar- nies like Uber and Grubhub, with consumers applying keting and member privacy is a key priority for the CU’s similar standards to CUs. Members could have even targeted outreach program. Navigating these concerns higher expectations for their FIs than they do technolo- is a challenge facing all businesses that deploy targeted gy firms, in fact. ad strategies, but it is particularly critical for organiza- “There’s a level of trust in a credit union — that they have tions with intimate knowledge of customers’ personal members' interests and financial well-being top of mind,” finances. she explained. “That may not be the case for these enor- mous tech companies that don't necessarily see that customer as anything but a certain profit value, and that's it.”

SAFE and other CUs are seeing benefits from leveraging personalized marketing efforts that cater to members’ expectations, but betraying their trust with intrusive cam- paigns could have devastating consequences. Targeted marketing may help credit unions fit into the increasing- ly on-demand world, but they would be wise to examine their approaches and ensure they do not take such pro- grams too far.

© 2019 PYMNTS.com All Rights Reserved 8 NEWS & TRENDS

CUSOs PARTNER UP developer Olenick to boost its proprietary MyCUID dig- ital identity platform. The pairing will allow the latter’s PSCU ADOPTS NICE CASE MANAGEMENT PLATFORM TO development team to streamline and standardize the REPLACE LEGACY SYSTEMS platform’s implementation and adoption processes, CUSOs and technology companies are teaming up to pro- enable efficient resource scaling and encourage the defi- vide CU members with the latest offerings. PSCU has nition of projects’ scopes on the back end. Olenick plans partnered with financial solutions provider NICE Actimize to provide its change and process management services, to integrate the latter’s ActOne Extend case management performance testing, project management and quality platform, which will replace the former’s legacy sys- assurance services to all CULedger partner CUs utilizing tems. The product will leverage machine learning (ML) MyCUID. This will benefit those with limited project re- and robotic process automation to centralize and stan- source capacities, as they will no longer have to perform dardize PSCU’s dispute management platform on both such duties in house. client-facing and server-side applications. It will also al- low AI- and human-driven processes to collaborate in TRUHOME SOLUTIONS INTEGRATES TO serving the CUSO’s 1,500 member CUs by using appli- ENHANCE CUSTOMER EXPERIENCE cation programming interfaces (APIs) to integrate with CUSO TruHome Solutions is also adopting third-party other installed NICE platforms. technology, integrating software provider Black Knight’s Servicing Digital platform to help CUs offer their members CULEDGER, OLENICK PARTNER ON MYCUID detailed and personalized loan information. The offering STANDARDIZATION AND MODERNIZATION enables CU members to make mortgage payments on- CUSO CULedger is also collaborating with a technology line, obtain loan information and seek opportunities for company to aid its member CUs, partnering with software refinancing, equity loans and second home purchases.

© 2019 PYMNTS.com All Rights Reserved 9 News and Trends

Servicing Digital is available online and via mobile app, US GOVERNMENT accessing members’ information through an end-to-end managed service provider (MSP) system, property re- WEIGHS IN ON CU cords database and automated valuation models. ISSUES Each of TruHome's CU partners can utilize a person- SENATE BILL TO EXEMPT VETERAN-OWNED BUSINESSES ally branded website with the same look and feel as FROM CUs LENDING CAP their primary CU webpages, which will enable mem- CU developments and innovations often attract attention bers to seamlessly access services without adjusting to from politicians, and U.S. Sens. Mazie Hirono (D-Hawaii) new layouts. and Dan Sullivan (R-Alaska) introduced a bill this month that would exempt loans made to veteran-owned firms MNCUN, OCUL PARTNER FOR REWARD from CU member business lending caps. Congress INCENTIVES imposed the current cap in 1998 through the Credit Union CUSOs are partnering to offer savings account incen- Membership Access Act, which set the upper limit of CU tives as well as loan platforms. The Minnesota Credit loans at 12.25 percent of their assets. The proposed leg- Union Network (MnCUN) recently announced a collabo- islation would entirely remove the cap for veteran-owned ration with the Ohio Credit Union League (OCUL) to offer businesses, allowing CUs to lend as much capital prize-linked savings accounts and encourage healthy as desired. savings habits among CU members. The latter’s Bucks for Buckeyes program draws inspiration from MnCUN’s The bill, called the Veterans Member Business Loan WINcentive Savings offering by automatically entering Act, was well received by both the Hawaii and Alaska members into monthly, quarterly and annual cash prize credit union leagues as well as the CUNA. Similar legis- drawings when they deposit set amounts into their sav- lation exempting veterans from CUs’ lending caps was ings accounts. MnCUN and its subsidiary TruLync will presented to the House of Representatives earlier this provide OCUL with technology management services, in- year. That measure — co-sponsored by Reps. Paul Cook cluding prize drawing administration and reporting for (R-California), Tulsi Gabbard (D-Hawaii), Vicente Gonzalez participating credit unions. (D-Texas) and Don Young (R-Alaska) — has been referred to the House Committee on . WINcentive Savings was started in 2016 and now accounts for 7,500 accounts and almost $7 million in sav- NCUA APPROVED 50 CU MERGERS IN Q3 2019 ings. MnCUN has also supported 23 prize-linked savings The number of CUs in the U.S. is declining despite the programs in Minnesota, as well as others in Louisiana, possibility of loosened federal regulations. The National Montana, New York and Wisconsin. Credit Union Association (NCUA) recently approved 50 CU mergers during Q3 2019, up from the 29 and 32 sanc- tioned during Q1 and Q2, respectively. Five were approved due to financial conditions, two because of CUs’ inabilities

© 2019 PYMNTS.com All Rights Reserved 10 News and Trends

to find new CEOs and 43 to enable expanded financial 1 drug under federal law but has been legalized or de- services. The largest Q3 merger occurred when Schools criminalized in several states. A recent FinCEN report Financial Credit Union in Sacramento, California, was found that 162 CUs currently serve the cannabis indus- absorbed by Santa Ana, California-based SchoolsFirst try, and the total number of FIs investing and lending in Federal Credit Union. The former held $2.1 billion in as- the space has increased by 61 percent year over year. The sets to the latter’s $16.1 billion, and the combined CU now FIs investing in the industry are largely looking for bold operates under SchoolsFirst’s name and charter. expansion opportunities rather than partnerships with well-established brands, said Jacques Santucci, CEO of A total of 111 credit union mergers have been approved marijuana enterprise software company Strimo. in the first three quarters of 2019, marking a decline from the 139 that occurred during Q1 2018. Recent research Several bills have been introduced in Congress to protect showed that 5,529 CUs were operating in the U.S. as of FIs that invest in marijuana enterprises, most recently the July 2019, a year-over-year decline of 177 from the 5,706 Secure And Fair Banking Enforcement Act submitted in noted during the same month in 2018. September. The legislation was sponsored by U.S. Rep. Ed Perlmutter (D-Colorado) and seeks to prohibit federal NCUA TO CONSIDER ALLOWING INDIVIDUALS WITH MINOR regulators from penalizing banks and CUs for lending to CRIMINAL RECORDS TO WORK AT CUs legal cannabis businesses. The NCUA is also considering a plan that would allow individuals with minor criminal records — such as convic- CU COLLABORATIONS tions for drug possession, false identification, offenses committed during youth or petty theft — to work at cred- IRISH CUs ROLL OUT NEW FULL-SERVICE CHECKING it unions without requiring waivers from its board. The ACCOUNTS THROUGH MASTERCARD PARTNERSHIP proposal is still in development, but the organization is Numerous Irish CUs have partnered with Mastercard to expected to enact it by the end of this month. provide full-service checking accounts that offer con- CU trade groups have voiced their approval of the plan, tactless payments, debit cards, overdraft capabilities, with CUNA saying it would decrease credit unions’ reg- standing orders and the ability to open accounts online ulatory burdens by removing the time-consuming waiver or at physical branches. Thirty CUs with a total of 115 process. The National Association of Federally-Insured branch locations are expected to offer the accounts, and Credit Unions (NAFCU) has tentatively supported it as the service is slated to expand throughout 2020. well but has expressed concerns that the move could The new offerings will be available to CU members under negatively affect CUs’ premiums. the name currentaccount.ie and will cost €4 ($4.43 USD) a month. According to currentaccount.ie's chief execu- 162 CUs NOW SERVE MARIJUANA-RELATED COMPANIES tive, Seamus Newcombe, the program is aimed at those CUSOs are also navigating regulatory changes regarding who would otherwise be required to visit bank branches the cannabis industry as marijuana remains a Schedule to open such accounts.

© 2019 PYMNTS.com All Rights Reserved 11 News and Trends

GOOGLE PAIRS WITH STANFORD CREDIT UNION, CITIGROUP TO Canadian credit unions. The service will combine the for- OFFER CHECKING ACCOUNTS mer’s technology solutions with the latter’s payment Technology giant Google is partnering with CUs as well, platform and loyalty programs to provide instant rewards recently announcing a collaboration with Stanford Credit for CU members. Aura will also offer financial wellness tools Union and Citigroup to offer checking accounts starting to encourage members to open savings accounts and uti- next year. The FIs will largely be responsible for manag- lize additional services. STACK currently works with more ing the accounts and monitoring financial plumbing and than 5 million CU members, and CEO Miro Pavletic said the compliance, while the technology behemoth’s Google Pay company hopes its partnership will change members’ rela- capability will allow customers to access funds with their tionships with their money and allow them to better engage phones rather than debit cards. Related fees for service with their credit unions. usage are currently unknown, but deposits will be insured through the Federal Deposit Insurance Corporation (FDIC) VYSTAR CREDIT UNION ADOPTS ZEST AI TO AID IN CREDIT and NCUA. DECISIONS VyStar Credit Union, the 15th-largest CU in the U.S., has Several other technology companies have also recent- adopted Zest Automated Machine Learning (ZAML) soft- ly made banking industry moves. Amazon has expressed ware from developer Zest AI to power its loan and credit interest in opening checking accounts, and Apple collabo- decision-making processes. ZAML uses data analytics and rated with Goldman Sachs to launch a credit card. Industry ML to determine borrower risk, allowing VyStar to more experts say these developments could encourage younger quickly approve credit applications with a lower degree of consumers to enter the financial industry with companies portfolio risk. The platform also provides automated mod- they trust and use regularly, rather than open accounts with el documentation, testing and validation to meet regulatory unfamiliar banks or CUs, putting added pressure on FIs to and transparency requirements. attract and retain customers. VyStar has 675,000 members in northern Florida and south- CELERO, STACK COLLABORATE ON CU REWARDS PLATFORM east Georgia and more than $9 billion in assets. It will first Smaller technology companies are also entering CU part- integrate ZAML into its credit card services and expand the nerships. Solutions integrator Celero and FinTech STACK product to its auto loans next year. are collaborating on a new digital member experience and rewards platform called Aura that will cater exclusively to

© 2019 PYMNTS.com All Rights Reserved 12 DEEP DIVE

THE CYBERCRIME THREATS FACING CUs AND HOW TO STOP THEM

October marked National Cybersecurity Awareness MEMBERS RELY ON CUs TO PROTECT THEIR DATA Month, which has been commemorated annually since CU members trust that their credit unions will keep their 2004. Stakeholders from various industries and the information secure, and a September ReputationUs government come together during the month to exam- survey found that 84 percent of respondents expressed ine emerging issues and discuss the development of high confidence in their FIs’ security capabilities. This fraud-fighting solutions. The program has been a failure stands in stark contrast with other industries as 64 per- in many ways, unfortunately, as cybercrime continues to cent of respondents cite the same level of trust in their rise with no end in sight. credit card companies and 48 percent say the same for A Juniper research study found that cybercrime is ex- their mobile phone providers. pected to increase by 70 percent over the next half This high level of confidence can easily be shattered, decade, costing the global economy up to $5 trillion an- however. The same study noted that 46 percent of nually by 2024. Forty-three percent of these attacks are consumers would blame corporations if their personal in- predicted to hit small businesses, including credit unions. formation were compromised, and 48 percent said they It is thus imperative that CUs be up to date on current would be unlikely to stick with their FIs if stolen data were cybercrime trends and conscious of the latest security used to illegally create accounts in their names. methods and tools. Cybercriminals could not only steal This means cyberattacks not only cost FIs their current members’ assets and data if credit unions are caught members, but also cause reputational damage that can unaware, but also cripple FIs’ standings in the financial drive away potential customers. Consumers shopping for community and cost them untold sums if they ultimately FIs are not going to bank with CUs that cannot keep their lose members’ trust and business. data safe, after all.

© 2019 PYMNTS.com All Rights Reserved 13 Deep Dive

CU CYBERSECURITY THREATS TAKE MANY FORMS EDUCATION AND LEGISLATION ARE CRITICAL TO All businesses with online components are at risk of PREVENTING CYBERATTACKS cyberattacks, but credit unions and other FIs are par- New cyberattack methods are no doubt threatening, but ticularly vulnerable. They handle transactions for many old-fashioned defense measures are still some of the other companies, meaning attacks against those firms most effective at thwarting criminals’ attempts. Technical can indirectly affect CUs even if they are not the primary experts attribute the most successful cyber breaches to targets. A recent NAFCU study found that local merchant social engineering, which refers to bad actors’ abilities to data breaches affected 82 percent of CUs over the past manipulate users to gain entry to systems. CUs should two years, for example. therefore place priority on proper training to ensure that employees do not become unwitting accomplices in Further complicating the cybersecurity threat is the in- cybercrimes. creasing prevalence of stolen personal data circulating on dark web marketplaces. Cybercriminals can purchase CU members must also be aware of security threats. such information cheaply and use it to open accounts, Jack Lynch, chief risk officer at PSCU, has stated that spoof logins and make fraudulent payments in several ransomware and phishing attacks are particularly ef- industries, including financial services. They often lever- fective at enabling hackers to access to credit unions’ age bot networks to test stolen credentials en masse, systems via unsuspecting customers. with another study noting that use of such technology to “All the cybersecurity investment a CU makes will not register false accounts increased by more than 70 per- matter if the user falls for a phishing attack and gives cent in Q3 2019. That number is only expected to grow the bad actor [his] credentials or the entire CU’s computer as the holiday season approaches. Sixty-five percent of system gets compromised,” Lynch said. “The attacks are Americans believe increased shopping activity could put getting better every day as well, so the threat is growing.” them at a higher risk of data compromise, and 68 percent say they would hold their FIs responsible if such data The U.S. Congress is taking its own steps to protect FIs breaches occurred. from fraud. The Cybersecurity and Financial System Resilience Act would require financial industry regu- Evolving technological trends are also opening new fraud lators to issue reports about pressing cybersecurity avenues. 5G wireless communication standards are ex- threats to banks and credit unions, detailing how the in- pected to increase connectivity speed, thereby enabling dustry could best address them. The House Financial faster internet access and data transfers as well as fresh Services Committee recently passed the bill by voice opportunities for online fraud and breaches. Hackers can vote, and it now awaits a potential vote from the House use 5G-connected internet of things (IoT) devices with of Representatives. Several CU advocacy organizations fast internet connections and poor security protocols to and CUSOs, including CUNA, have voiced their support access entire systems, as evidenced when cybercrimi- for the bill. nals stole 10 GB of data from a casino via a web-linked fish tank in 2015. Cybercrime is a continually evolving field, and CUs look- ing to develop effective prevention measures should be cognizant of growing trends and anticipate future threats. It is too late to do so once cybercriminals strike, after all.

© 2019 PYMNTS.com All Rights Reserved 14 ABOUT

PYMNTS.com is where the best minds and the best content meet on the web to learn about “What’s Next” in payments and commerce. Our interactive platform is reinventing the way in which companies in payments share relevant information about the initiatives that shape the future of this dynamic sector and make news. Our data and analytics team includes economists, data scientists and industry analysts who work with companies to measure and quantify the innovation that is at the cutting edge of this new world.

PSCU is a CUSO supporting the success of more than 900 owner credit unions representing more than 2 billion annual transactions. Committed to service excellence and focused on innovation, its payment processing, risk management, data and analytics, loyalty programs, digital banking, marketing, strategic consulting and mobile platforms help deliver possibilities and seamless member experiences. Comprehensive, 24/7, year-round member support is provided by contact centers located throughout the United States. The origin of PSCU’s model is collaboration and scale, and the company has leveraged its influence on behalf of credit unions and their members for more than 40 years. Today, PSCU provides an end-to-end, competitive solution that enables credit unions to securely grow and meet evolving consumer demands. For more information, visit www.pscu.com.

We are interested in your feedback on this report. If you have questions or comments, or if you would like to subscribe to this report, please email us at [email protected].

© 2019 PYMNTS.com All Rights Reserved 15 DISCLAIMER

The Credit Union Tracker®, a PSCU collaboration, may be updated periodically. While reasonable efforts are made to keep the content accurate and up-to-date, PYMNTS.COM: MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, REGARDING THE CORRECTNESS, ACCURACY, COMPLETENESS, ADEQUACY, OR RELIABILITY OF OR THE USE OF OR RESULTS THAT MAY BE GENERATED FROM THE USE OF THE INFORMATION OR THAT THE CONTENT WILL SATISFY YOUR REQUIREMENTS OR EXPECTATIONS. THE CONTENT IS PROVIDED “AS IS” AND ON AN “AS AVAILABLE” BASIS. YOU EXPRESSLY AGREE THAT YOUR USE OF THE CONTENT IS AT YOUR SOLE RISK. PYMNTS.COM SHALL HAVE NO LIABILITY FOR ANY INTERRUPTIONS IN THE CONTENT THAT IS PROVIDED AND DISCLAIMS ALL WARRANTIES WITH REGARD TO THE CONTENT, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT AND TITLE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN WARRANTIES, AND, IN SUCH CASES, THE STATED EXCLUSIONS DO NOT APPLY. PYMNTS.COM RESERVES THE RIGHT AND SHOULD NOT BE LIABLE SHOULD IT EXERCISE ITS RIGHT TO MODIFY, INTERRUPT, OR DISCONTINUE THE AVAILABILITY OF THE CONTENT OR ANY COMPONENT OF IT WITH OR WITHOUT NOTICE.

PYMNTS.COM SHALL NOT BE LIABLE FOR ANY DAMAGES WHATSOEVER, AND, IN PARTICULAR, SHALL NOT BE LIABLE FOR ANY SPECIAL, INDIRECT, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, OR DAMAGES FOR LOST PROFITS, LOSS OF REVENUE, OR LOSS OF USE, ARISING OUT OF OR RELATED TO THE CONTENT, WHETHER SUCH DAMAGES ARISE IN CONTRACT, NEGLIGENCE, TORT, UNDER STATUTE, IN EQUITY, AT LAW, OR OTHERWISE, EVEN IF PYMNTS.COM HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

SOME JURISDICTIONS DO NOT ALLOW FOR THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, AND IN SUCH CASES SOME OF THE ABOVE LIMITATIONS DO NOT APPLY. THE ABOVE DISCLAIMERS AND LIMITATIONS ARE PROVIDED BY PYMNTS.COM AND ITS PARENTS, AFFILIATED AND RELATED COMPANIES, CONTRACTORS, AND SPONSORS, AND EACH OF ITS RESPECTIVE DIRECTORS, OFFICERS, MEMBERS, EMPLOYEES, AGENTS, CONTENT COMPONENT PROVIDERS, LICENSORS, AND ADVISERS.

Components of the content original to and the compilation produced by PYMNTS.COM is the property of PYMNTS.COM and cannot be reproduced without its prior written permission.

© 2019 PYMNTS.com All Rights Reserved 16