Krom Bank Enhances Account Takeover Detection by 10x While Preserving Privacy-Secure Banking

The Hidden Liabilities of Fraud

Krom Bank was founded to make banking simpler, faster, and more convenient for Indonesia’s next generation of customers. But as digital adoption accelerates, fraudsters are exploiting this shift with increasingly sophisticated scams.

One of the most pressing threats comes from account takeover (ATO) attacks driven by social engineering and phishing. Fraudsters distribute fake or malicious apps that impersonate trusted institutions or widely used digital services, tricking customers into installing them on their devices. Once installed, these apps prompt users to log in to their bank accounts, giving attackers the opportunity to hijack live sessions using screen sharing and remote access tools.

In Indonesia, this tactic has surfaced in multiple forms, including counterfeit versions of widely recognized digital identity and government-related applications, such as Identitas Kependudukan Digital (IKD). Similar patterns have also been observed with other fake public-service apps, underscoring how attackers leverage familiar brands and services to gain user trust.

More recently, fraud rings have begun to adopt AI-powered techniques such as deepfakes,  highly realistic synthetic audio or video that impersonates bank representatives, government officials, or even family members. By using deepfakes to gain trust and urgency, fraudsters make victims more likely to comply with instructions that ultimately expose their accounts to takeover attempts.

Capital Gains in Security

As fraud tactics became more complex, Krom Bank placed greater emphasis on visibility into what happens during an active user session. App hardening solutions protect the app’s code against tampering and reverse engineering, through code obfuscation and integrity checks, but their protections are inherently static.

Krom Bank found that this approach can create blind spots as fraud tools become more sophisticated. Many modern attack techniques operate dynamically during a live session, executing malicious actions in ways that evade static protections. These tools are often designed with stealth capabilities that deliberately conceal their presence and bypass traditional hardening measures.

To close this security gap, Krom Bank strengthened its defense with SHIELD’s device-first fraud intelligence. Unlike static app hardening, which focuses on code integrity, SHIELD is deeply rooted in continuous, run-time visibility into device behavior. This allows Krom Bank to detect sophisticated next-generation fraud tools (such as deepfakes, screen sharing, remote access software, and other AI-enabled social engineering) and bypassing techniques the moment they activate, ensuring protection throughout the entire user session.

SHIELD combines two core capabilities that work together to deliver unmatched accuracy and real-time protection:

• SHIELD Device ID: the global standard for device identification, uniquely and persistently identifying every physical device with over 99.9% accuracy. Even if fraudsters attempt factory resets or app cloning, the SHIELD Device ID continues to identify the same device, eliminating fake accounts and preventing device cycling.
  

• SHIELD Fraud Intelligence: a continuous layer of real-time, actionable signals that continuously profiles every device session. It enriches Krom Bank’s existing risk models with 20+ risk indicators, providing deeper context for every interaction.This enables Krom Bank to detect every malicious tool and technique the moment it is activated, such as when screen sharing is activated or when a device shows signs of remote hijacking.

With SHIELD’s Device Intelligence, Krom Bank is able to:

• Block ATO attempts in real time
• Detect and stop screen sharing and malicious remote access tools
• Neutralize threats silently in the background, without disrupting legitimate customers

Delivering Safe and Seamless Banking

By embedding SHIELD into its fraud prevention framework, Krom Bank has strengthened its defense strategy, eliminating blind spots against advanced scams while preserving a seamless user experience. Customers benefit from frictionless yet secure banking, while the bank reinforces its reputation as a trusted, forward-looking financial partner.

As Krom Bank continues its mission to become Indonesia’s most innovative digital bank, SHIELD provides the intelligence and resilience needed to stay ahead of evolving threats, ensuring growth that is secure, sustainable, and privacy-preserving.