Japan’s largest trust bank takes action to protect customers from account takeover and advanced phishing threats with FIDO authentication solution
OneSpan Inc. announced that Sumitomo Mitsui Trust Bank (SuMiTB), Japan’s largest trust bank, has chosen SCSK Corporation and OneSpan to strengthen its mobile banking security and address the growing threat of phishing-related fraud. Building on OneSpan’s experience with many on-premises FIDO authentication deployments in Japan, this collaboration marks the first deployment of OneSpan’s cloud-based FIDO authentication solution for mobile banking in Japan, made possible by the combined expertise of SCSK and OneSpan. By adopting a future-ready FIDO authentication solution, SuMiTB is taking a significant step toward modernizing its security infrastructure and better protecting its customers in an evolving digital landscape.
Read More on Fintech : Global Fintech Interview with Mike Lynch, Principal, AI Strategy and Finance Transformation for Auditoria
This deployment comes at a pivotal moment, as Japan faces escalating account takeover fraud losses totaling approximately ¥690 billion in 2025 alone, along with new regulatory mandates for stronger multi-factor authentication. In alignment with recent directives issued by Japan’s Financial Services Agency (FSA), the FSA has proposed amendments to its supervisory guidelines that would make phishing-resistant authentication mandatory for financial institutions. This integration reinforces the growing momentum for FIDO authentication in Japan’s financial sector and highlights a scalable approach for institutions aiming to strengthen security and meet evolving regulatory standards.
While FIDO authentication has traditionally been used for login verification, SuMiTB is taking a significant step forward by planning to integrate FIDO authentication directly into mobile banking transactions. This approach is designed to eliminate account impersonation risks and establish one of Japan’s most advanced security frameworks. The solution aims to safeguard customers against account takeover attacks and sophisticated phishing schemes by securing transactions and delivering a seamless, secure digital banking experience.
“We are proud to be chosen by SuMiTB and SCSK for this landmark project,” said Victor Limongelli, CEO at OneSpan. “This selection not only underscores OneSpan’s leadership and credibility in Japan’s rapidly evolving FIDO market, but also demonstrates our ability to deliver enterprise-scale, phishing-resistant authentication that meets the highest regulatory standards. We are committed to helping financial institutions protect their customers and set new benchmarks for digital security.”
OneSpan Cloud Authentication (“OCA”) is a modern, cloud-based multi-factor authentication solution designed to help banks and businesses secure online applications and digital transactions. Built for rapid deployment and scalability, the platform enables organizations to meet strict regulatory requirements and deliver a seamless user experience across digital channels. OCA is part of OneSpan’s comprehensive authentication portfolio for digital banking security. Whether on-premises or in the cloud, software or hardware—including Digipass protocols, FIDO protocols (FIDO UAF, passkeys), and Cronto solutions for visual transaction signing—OneSpan provides its customers with maximum flexibility to meet their authentication needs.
“We are honored to support SuMiTB in deploying OneSpan’s cloud-based FIDO authentication solution for mobile banking,” said Hideho Masuda, Senior Executive Officer, SCSK Corporation. “This implementation demonstrates SCSK’s commitment to providing advanced, secure authentication solutions to the Japanese financial sector, and highlights the strength of our partnership with OneSpan.”
Catch more Fintech Insights : The Disappearing Payment: How Embedded Finance Is Quietly Reshaping B2B Transactions?
[To share your insights with us, please write to psen@itechseries.com ]
