Jamaica’s move towards a cashless economy has come under renewed scrutiny following news of a cyber-attack on a banking payments network, coming less than a week after a representative of the Jamaica Bankers Association sought to reassure Christian leaders about the safety of electronic transactions.
The Jamaica Electronic Transfer Services Limited (JETS), operator of the MultiLink debit card and Automated Clearing House (ACH) payment networks, has disclosed that a cyber-attack affected a limited part of its internal administrative systems this week.
The disclosure has heightened concerns among Christians and other Jamaicans already apprehensive about the country’s increasing dependence upon digital banking, particularly as financial institutions move away from the use of cheques.
JETS, which is jointly owned by leading commercial banks in Jamaica, has maintained that neither the MultiLink debit card network nor the ACH system was affected. Both services, it said, remain fully operational.
But the company acknowledged that certain historical administrative records had been exposed, including the names of some customers who received bank transfers between 2019 and 2022, together with some debit card numbers.
JN Bank has said it cannot yet confirm whether the information of any of its members was among the records exposed.
The bank also stated that JETS does not store personal identification numbers (PINs), card verification values (CVVs) or card expiry dates, and that these details would not have been affected.
Nevertheless, the incident has brought fresh attention to the warnings of Christian organisations, some of which have been questioning the wisdom of a wholesale transition to digital payments.
At a webinar hosted last Monday by the Association of Christian Communicators and Media (ACCM), Shawn Wenzel, a consultant representing the Jamaica Bankers Association, sought to defend the banking industry’s preference for electronic transactions over cheques.
The discussion took a pointed turn when Byron Buckley, president of the ACCM, questioned the claim that cheque fraud was more prevalent than fraud involving online transactions.
Wenzel maintained that the rate of fraud associated with cheques was higher, adding that the Bankers Association kept records on the matter.
But when pressed by the webinar’s moderator, Jenni Campbell, to produce supporting figures, he acknowledged that he did not have the statistics immediately available.
Campbell cited a statement by the Minister of Technology that Jamaica had recorded more than 5.4 million attempted online fraud incidents during the first three months of the year.
She then challenged Wenzel to say whether a comparable number of cheque-fraud attempts had been recorded over the same period.
Buckley expressed doubt that the figures for cheque fraud could approach those reported for online fraud.
The exchange exposed a central question in the debate: whether the convenience of electronic payments sufficiently outweighs the risks associated with the growing concentration of financial activity within digital systems.
The subsequent disclosure of the JETS cyber-attack has given added weight to calls for greater transparency and accountability from the banking sector.
The debate comes at a time when the discontinuation or withdrawal of cheque services by banks has caused difficulties for some churches and micro-businesses, many of which continue to depend upon cheques for collecting, depositing and disbursing funds.
Church organisations have raised objections to the changes, with some groups having taken legal action in an effort to prevent the discontinuation of cheque services.
For congregations accustomed to receiving offerings and making payments by cheque, the transition to digital methods may bring additional administrative burdens, increased fee payments and concerns about access, security and accountability.
Small enterprises, too, may find themselves compelled to adapt to new arrangements, even where their customers, suppliers or operating practices have long depended upon traditional banking methods.
For Christian leaders, the question extends beyond convenience. It touches upon the freedom of churches and individuals to conduct legitimate financial affairs without becoming wholly dependent upon electronic systems.
The cyber-attack has also raised questions about the extent to which customers can be assured that their personal and financial information will remain secure as the banking industry presses ahead with technological change.
SUE THE BANK FOR BREACHES
Attorney-at-law Charles Ganga-Singh has argued that customers whose private information is exposed through a breach may have grounds to bring legal proceedings against the institutions responsible.
He stressed that a digital system does not remove deposit taking institutions underlying duty to safeguard customers’ funds and interests.
Ganga-Singh indicated that a person affected by a breach could have grounds upon which to sue, although the success of any such claim would depend upon the particular circumstances and the applicable law.
His remarks are likely to be of interest to customers concerned not only about the possibility of unauthorised access to their accounts, but also about the exposure of personal information which could be used to facilitate fraud or otherwise cause harm.
The JETS disclosure does underline the importance of clear information about the nature of a breach, the records involved and the measures taken to protect customers.
In its advisory to customers, JN Bank urged vigilance and recommended that account holders monitor their transactions for unfamiliar activity.
Customers were also advised to exercise control over online purchases through the JN MYCard application, avoid sharing PINs, passwords and one-time security codes, and refrain from clicking suspicious links.
The bank further cautioned customers against responding to unsolicited communications requesting account information, advising them instead to make contact through official channels.
The JETS incident has not brought the MultiLink or ACH networks to a halt, and there is no indication in the disclosure that either system has ceased operating. But the exposure of historical administrative information has served as a reminder that digital systems are not beyond the reach of attack.
As Jamaica continues its march towards a digital economy, the concerns voiced by churches, small businesses and other customers are unlikely to increase.