Logged in safely? A news advisory explains why your mobile banking session could still be at risk
Cybersecurity company Protectt.ai urged banks to keep assessing application, device and transaction risks after login, warning that valid credentials do not guarantee a safe session
19 October, 2026
TT
16
A successful mobile banking login does not necessarily mean a customer’s session remains secure, cybersecurity company protectt.ai. warned on Monday, urging financial institutions to monitor risks continuously before money or sensitive data moves.
The mobile application security, fraud prevention and digital trust company said fraudsters were increasingly working around authentication by manipulating customers or compromising their devices after access had been granted.
A customer could use a bank’s genuine application on a registered phone and log in with valid credentials while a remote-access tool, screen-sharing application, overlay or another form of compromise allowed someone else to observe, influence or control activity during the session, it said.
The advisory comes as UAE financial institutions expand mobile-first services, instant payments and connected financial experiences. Protectt.ai said banks needed to reassess trust across the application, device and transaction throughout each session.
Fraud risk beyond the login screen
Research by the Global Anti-Scam Alliance, conducted with Trend Micro and published on January 27, surveyed 1,000 UAE residents. One in three respondents reported losing money to scams in the preceding year, across digital and communication channels. The finding concerns scams broadly, rather than mobile banking fraud alone.
Separately, Gartner’s public abstract for its August 3 research, How to Enhance Application Security by Deploying Application Detection and Response, argued that application security testing and frontline controls alone were insufficient. It highlighted the need to protect applications while they are running.
“Authentication confirms that a recognised customer has entered the application. It cannot, on its own, confirm that the device and the session remain safe throughout the transaction. Banks need visibility into what is happening while the application is running so they can recognise risky conditions and intervene before fraud is completed,” said Manish Mimani, founder and CEO of Protectt.ai.
The company identified potential warning signals including remote-control or screen-sharing tools operating during banking sessions, rooted or jailbroken devices, screen overlays, application cloning, runtime hooking and attempts to tamper with application behaviour.
Such conditions can emerge or change after authentication, making a single security decision at login less reliable as a session continues, it said.
When a transfer needs another check
Protectt.ai recommended treating device integrity as part of transaction risk.
A high-value transfer from a device showing signs of remote control, tampering, or abnormal execution should carry a different risk profile than the same transfer on a healthy device, it said.
Banks should also connect security signals detected within applications to their fraud and transaction-monitoring systems.
Assessing those technical indicators alongside behavioural and transactional anomalies could help institutions decide whether to allow an action, request further verification, pause a transaction or suspend a session.
“Mobile applications are now the primary financial front door for many customers in the UAE. The challenge is to protect that experience without adding unnecessary friction. A risk-based response allows banks to intervene proportionately when the application or device shows signs of compromise while keeping routine journeys smooth for genuine customers,” said Pushkar Singh, country head, Middle East and Africa at Protectt.ai.
The company said visibility into applications while they are running complemented existing investment in secure development, identity, network defence, application programming interfaces and transaction monitoring.
Detecting manipulation or unsafe device conditions during use could allow a bank to intervene while a session remained active, rather than investigating only after a fraudulent payment had been completed.
Protectt.ai, which operates across India, the Middle East and North Africa, Southeast Asia and the US, said it covered more than 350 sensitive mobile applications and over one billion unique devices, had safeguarded more than 100 billion sessions and had prevented over eight billion threats.




















