Authorized Push Payment Fraud
Authorized Push Payment Fraud is a fraud or abuse pattern that deceives a payer into willingly instructing a legitimate transfer to an…
Security, Risk & Compliance
Security controls, fraud, operational risk and regulatory compliance.
673Terms
0Reviewed
Terms (673)
Backup and Restore
Backup and Restore is the controlled creation of recoverable copies of data, configurations, keys, software, and system state together with verified procedures…
Backup Security
Backup Security is a security mechanism or control discipline that reliably protects copied data and recovery systems from unauthorized access, alteration, deletion,…
Bank Account Verification
Bank Account Verification is the process of confirming specified facts about a bank account, such as validity, ownership or control, status, routing,…
Bank Secrecy Act (BSA)
The Bank Secrecy Act is a United States legal framework requiring covered financial institutions to keep records and report certain financial activity.…
Bearer Token
A bearer token is an authorization credential that grants access to whoever presents it in the required request format. Bearer-token authorization is…
Beneficiary Name Check
Beneficiary Name Check is a pre-payment comparison between the beneficiary name supplied by the payer and the name associated with the destination…
BIN Attack
BIN Attack is a fraud or abuse pattern that systematically tests payment card details sharing a bank identification number to discover combinations…
Biometric Authentication
Biometric authentication verifies identity using measured physical or behavioral characteristics such as fingerprints, faces, voices, or typing patterns. It may be used…
Blind Signature Risk
Blind Signature Risk is a measurable uncertainty or exposure that arises when privacy-preserving signing prevents the signer from seeing the message, enabling…
Blockchain Forensics
Blockchain forensics is the investigative use of on-chain records, tracing methods, attribution data, and external evidence to examine fraud, theft, sanctions exposure,…
Blockchain Screening
Blockchain screening is the process of checking wallet addresses and transactions against sanctions data, risk indicators, service labels, and suspicious activity patterns…
Blockchain Transaction Screening
Blockchain Transaction Screening is the automated or manual evaluation of transfers, addresses, counterparties, and exposure paths against sanctions, illicit-finance, fraud, and internal-policy…
Blocked Person
Blocked Person is a person or entity whose property and interests in property must be frozen or blocked under an applicable sanctions…
Blocked Property
Blocked Property is property or interests in property that must be frozen and may not be transferred, withdrawn, paid, exported, or otherwise…
Bot Attack
A Bot Attack is the malicious use of automated software to perform high-volume, repetitive, evasive, or coordinated actions against a website, application,…
Breach and Attack Simulation (BAS)
Breach and Attack Simulation (BAS) is the controlled and repeatable execution of adversary-like techniques to test whether security controls can prevent, detect,…
Bridge Audit
A bridge audit is an independent security review of cross-chain contracts, validators, messaging, custody, governance, and operational dependencies. Bridge Audit must define…
Bridge Exploit
Bridge Exploit is an attack or weakness pattern that abuses a weakness in cross-chain verification, custody, contracts, keys, or governance to steal…
Bridge Risk
Bridge risk is the combined technical, economic, custody, governance, and operational exposure introduced when transferring assets or messages across blockchains. Bridge Risk…
Bridge Security
Bridge Security is a security mechanism or control discipline that protects cross-chain assets and messages through sound verification, key management, contract design,…
Bridge Wallet Risk
Bridge wallet risk is the possibility that wallets holding or operating bridged assets are compromised, mismanaged, unavailable, or controlled by colluding parties.…
Broken Function Level Authorization (BFLA)
Broken Function Level Authorization (BFLA) is an API authorization flaw that allows a user or service to invoke a function, operation, or…
Broken Object Level Authorization (BOLA)
BOLA is an API vulnerability where changing an object identifier lets a user access or modify another user's protected resource. Broken Object…