Case Studies

Slovenská Sporiteľňa: Real-time fraud disruption for Slovakia's largest commercial bank. - ThreatMark

ThreatMark — Tue, 05 May 2026 23:00:00 GMT

Slovenská sporiteľňa is the largest commercial bank in Slovakia, serving millions of clients with a focus on digital innovation and security. To stay ahead of increasingly sophisticated social engineering and automated attacks, the bank implemented ThreatMark’s Behavioral Intelligence Platform to secure its digital banking ecosystem.

DOWNLOAD PDF

https://50136759.fs1.hubspotusercontent-na1.net/hubfs/50136759/HAL/resources/videos/21aaa5278528-Video-A_-Miroslav-Jasicki-Standalone-1-NEW-V02.mp4

Key Challenges

Sophisticated Social Engineering Attacks.
Limitations of Parameter-Based Detection.
Balancing High-Volume Security with User Experience.

The Motivation

As Slovakia’s market leader, Slovenská sporiteľňa faced constant pressure from evolving fraud patterns that traditional, static security tools struggled to identify. The bank needed a solution that could analyze the “how” behind a user session—not just the “what”—to identify subtle behavioral anomalies that signal fraud before a transaction is ever authorized.

The Solution

By integrating ThreatMark, Slovenská Sporiteľňa transitioned from reactive alerts to proactive fraud disruption. The platform captures deep behavioral signals—including mouse movements, typing cadence, and device interaction—to create a unique behavioral blueprint for every client. This allows the bank to detect session takeover and manipulation in real-time, even when the login credentials appear valid.

Key Results

Significant reduction in successful social engineering attempts.

Real-time behavioral session monitoring across millions of users.

Decreased false positives through high-fidelity behavioral signals.

Enhanced operational efficiency for the fraud investigation team.

Partners Bank: Modern, cloud-native fraud disruption for the Czech Republic’s first advisory bank - ThreatMark

ThreatMark — Wed, 29 Apr 2026 23:00:00 GMT

Partners Bank is the first advisory bank on the Czech financial market, built using modern technologies and serving more than half a million Czechs. By implementing ThreatMark’s Behavioral Intelligence Platform, Partners Bank has ensured its infrastructure is secure by design, allowing the institution to protect its clients from Day 1 without the overhead of traditional legacy systems.

DOWNLOAD PDF

https://50136759.fs1.hubspotusercontent-na1.net/hubfs/50136759/HAL/resources/videos/aa25cf0c5aa1-Video-A_-Pavel-Sikola-Standalone-1.mp4

Key Challenges

Rapid Time-to-Market
High Internal Development Costs
Cloud-Native Infrastructure Requirements

The Motivation

Building a new full-service banking environment in a highly regulated and threat-heavy environment presented a unique challenge: Partners Bank needed a sophisticated fraud detection system that could be deployed instantly. To maintain their “lean” operational model, the primary goal was to avoid the high costs and long timelines associated with building an internal fraud engine.

The Solution

Partners Bank selected the ThreatMark Platform for its cloud-native architecture and seamless deployment capabilities. Unlike “big tech” vendors that offered rigid, one-size-fits-all tools, ThreatMark provided a platform that could be specifically tailored to the bank’s unique digital environment. By choosing a cloud-based detection system, Partners Bank achieved a rapid time-to-value. They moved from concept to a live, fraud-disrupting environment without the burden of unnecessary internal development.

Key Results

Zero internal development costs for fraud detection

100% Cloud-native deployment

Seamless integration with new banking infrastructure

Trinity Bank: Disrupting APP Fraud and Remote Access Scams through Behavioral Intelligence. - ThreatMark

ThreatMark — Wed, 29 Apr 2026 23:00:00 GMT

Trinity Bank is a premier Czech financial institution dedicated to providing high-touch service and robust security to its growing client base. In an era where social engineering is becoming the primary weapon of fraudsters, Trinity Bank has taken a proactive stance.

DOWNLOAD PDF

https://50136759.fs1.hubspotusercontent-na1.net/hubfs/50136759/HAL/resources/videos/b28c75c473a0-Video-B_-Vincent-Tomasko-Standalone-1.mp4

Key Challenges

Authorized Push Payment (APP) Fraud
Remote Access Tool (RAT) Manipulation
Limitations of Internal Legacy Systems

The Motivation

Trinity Bank faced a rising challenge: sophisticated scammers were bypassing traditional security by manipulating customers directly. These Authorized Push Payment (APP) scams involved fraudsters convincing clients to authorize transfers themselves, often while using Remote Access Tools (RAT) to guide them. The bank recognized that their internal systems struggled to identify when a legitimate user was acting under the influence of a scammer.

The Solution

Trinity Bank turned to ThreatMark to move beyond the limitations of their internal systems. The most significant shift was the transition from Detection to De-manipulation. With ThreatMark’s real-time fraud monitoring, Trinity Bank’s fraud team can now see exactly when a client is being manipulated, allowing them to pause suspicious sessions and reach out to the customer with specific evidence of the scam.

Key Results

Zero internal development costs for fraudEnhanced detection of APP and RAT-based fraud detection

Real-time visibility into customer manipulation

Reduced financial losses from social engineering

Improved client trust through proactive intervention

Banca Comerciala Romana: Leveraging ThreatMark to Combat RAT Fraud - ThreatMark

ThreatMark — Sun, 31 Aug 2025 23:00:00 GMT

Banca Comerciala Romana (BCR), a major Erste Group operation in Central and Eastern Europe, was hit by a surge in remote access attacks—putting customer funds and the bank’s reputation on the line.

DOWNLOAD PDF

Key Challenges

Remote access tool (RAT) fraud

Background

Remote access attacks (RAT fraud) surged by 230% globally in 2022, with Romania hit especially hard. Shared language with neighboring Moldova made it a prime target for cross-border fraud. As attacks spiked, BCR faced growing pressure to protect its customers and reputation.

“When the wave of RAT fraud hit, we were handling hundreds of cases each week. Most involved fake investment offers on social media, luring victims with promises of sky-high returns. All they had to do was grant remote access to their device—and unfortunately, many did,” explains Denis Adrian Bunda, Security Manager of the Department of Secure Management and Business Continuity in BCR.

Adding to the challenge was Romania’s position at the forefront of these attacks, forcing the bank’s fraud prevention team to rely on their own expertise while taking swift, decisive action to protect customers.

How did the bank overcome these challenges?

Recognizing the need for a strong response, BCR fully integrated the ThreatMark Platform to maximize its anti-fraud capabilities—especially in detecting and preventing RAT attacks. The ThreatMark Platform provides a comprehensive set of advanced tools designed to counter these sophisticated schemes.

“Even before the wave of RAT attacks, we had integrated the ThreatMark Platform into our operations, following a recommendation from colleagues at Erste Group. At first, we used it to detect malware and flag access from high-risk countries under AML regulations. But as threats grew more sophisticated, we saw the need to unlock its full potential—and enhanced our implementation to make the most of its capabilities,” says the bank’s Security Manager.

To combat RAT fraud, BCR adopted a two-layered approach. First, it flags the use of remote access applications as a risk factor. Second, it leverages the ThreatMark Platform’s remote screen sharing detection—if screen sharing is active, the digital banking platform is immediately locked down, disabling both login and transaction functions.

Thanks to the ThreatMark Platform, BCR successfully reduced RAT fraud. The result? Higher customer satisfaction, a stronger reputation, and lower costs tied to victim compensation and potential litigation.

Additional Benefits of the ThreatMark Parternship

The bank also gained a deeper understanding of the evolving fraud landscape. “The ThreatMark Platform helps us understand the threats we face, how to address them, and gives us more options for tracking security issues as they arise,” adds Denis Adrian Bunda.

This insight is crucial for the bank—not just for its anti-fraud strategy, but also in preparing for upcoming European legislation, PSD3. “With PSD3 on the horizon and increasing fraud liability for financial institutions, having detailed data on specific fraud cases will be essential. ThreatMark is perfectly positioned to provide that,” says Bunda.

For Bunda, ThreatMark’s integration has become more than just a business decision. “ThreatMark has become a passion project for me because I see its direct impact on our customers. Knowing how much they’re losing makes it more than just business—it’s about protecting their money. You can truly see the difference ThreatMark makes in real life,” he emphasizes.

He also values ThreatMark’s customer-centric mindset and its efforts to foster industry collaboration. “Another aspect I appreciate is the Banking Fraud Summit initiatives. They’ve given me valuable insights and a chance to connect with others in the anti-fraud community. Sharing information helps everyone—at the end of the day, we’re all in this together.”

WHAT’S AHEAD FOR BANCA COMERCIALA ROMANA?

In the future, BCR plans to further automate fraud detection. This includes replacing phone calls with pop-up alerts to warn users about financial malware. The bank also aims to implement the ThreatMark Platform’s active phone call detection during banking sessions to catch fraud without a remote access component— such as authorized push payment scams.

“Looking ahead, our main concern is deepfakes and fraudsters using them to access accounts. This might happen at some point; we don’t know when. Nevertheless, if new fraud vectors emerge, we will utilize the ThreatMark Platform to combat them,” concludes Denis Adrian Bunda.

Reduction in RAT Attacks

Improved insights on comprehensive fraud data

Improved customer satisfaction

ThreatMark Helps Tipsport Reduce Investigation Time By 90% - ThreatMark

ThreatMark — Tue, 29 Jul 2025 23:00:00 GMT

Tipsport, a leader in the Central European gaming market, serving over a million active users internationally, partnered with ThreatMark to stay ahead of evolving fraud threats and ensure a seamless user experience.

DOWNLOAD PDF

By implementing ThreatMark’s Behavioral Intelligence Platform, Tipsport reduced investigation time by 90% and significantly improved the detection rate.

Key Challenges

Account takeover
Bonus abuse
Account sharing
BOT activity

The Game Has Changed

Founded in 1991, Tipsport has grown from a traditional retail bookmaker into a technology-driven company offering a broad portfolio of sports betting, live betting, and online gaming services. As its digital footprint expanded, so did the sophistication of fraud threats. Tipsport faced increasingly complex fraud vectors, including account sharing, bonus abuse, and automated bot attacks. These threats were often part of coordinated fraud rings using social engineering and scripted automation to evade traditional controls. The situation was further complicated by users frequently sharing accounts, often for fraudulent purposes.

Managing hundreds of detections daily across multiple applications revealed the need for a more structured approach and deeper understanding of fraud patterns. Investigations consumed significant internal resources, often delaying responses to emerging threats. At the same time, dedicated bots for automated betting placed wagers, allowing dishonest bettors to scale their fraudulent operations programmatically and scrape betting data for unfair advantage.

How Did Tipsport Overcome These Challenges?

Tipsport implemented the ThreatMark Platform in mid-2024 across its international digital properties including Tipsport, Chance, Maxa, and Pluso. The rollout was swift and smooth, thanks to ThreatMark’s streamlined implementation process and strong collaboration between teams.

“Despite its complexity and robustness, the implementation of the ThreatMark Platform was remarkably swift. It began delivering actionable intelligence almost immediately after the project kickoff, clearly demonstrating its value early on,” says Petr Hustava, Information Security Manager at Tipsport.

The ThreatMark Platform provided a unified view of customer activity across applications and channels, enabling deep behavioral profiling and forensic context.

Dramatic Impact For Tipsport

The ThreatMark Platform quickly delivered beyond initial expectations, reducing investigation times, automating detection, and surfacing high-risk activity earlier in the fraud lifecycle.

Tipsport’s anti-fraud team reduced fraud investigation time for complex fraud cases by 90%, from 5 hours to 30 minutes. The Mean Time to Detect (MTTD) dropped by nearly 98%, from 16 hours to 20 minutes. This efficiency boost allowed the team to shift from reactive investigation to proactive detection.

Detection accuracy improved across all major fraud vectors. Tipsport significantly increased its True Positive Rate (TPR) for ATO and bonus abuse scenarios while cutting the False Positive Rate (FPR) from 30% to 5%. Detection of sophisticated bots, used for scraping and automated betting, also improved, giving Tipsport a stronger ability to block programmatic abuse.

The ThreatMark Platform also enabled improved mapping of customer behavior across digital apps, platforms, and user journeys. By collecting consistent behavioral signals across Tipsport’s ecosystem, the ThreatMark Platform helped accurately distinguish between legitimate and fraudulent activity without disrupting the user experience.

These improvements also translated into faster case resolution and better analyst confidence. With higher-quality alerts and fewer false positives, Tipsport’s fraud team can spend less time on dead ends and more time taking decisive action. The result is not only increased efficiency, but also stronger protections for customers and the business.

What’s Ahead for Tipsport?

Operational efficiency improved across the board. The ThreatMark Platform helped identify connections between suspicious accounts, streamline team workflows, and unify behavioral data from across the Tipsport Group’s six brands. As a result, Tipsport now saves an estimated 950 man-hours annually. Combined with the enhanced detection rate, it positions ThreatMark as a solution with a highly favorable Return on Investment (ROI).

“With the ThreatMark Platform, we have achieved a 10× faster investigation of complex incidents and drastically reduced detection time of sophisticated fraud from 16 hours to just 20 minutes,” says Marek Havlín, Security Engineering Team Leader at Tipsport. The collaboration also fosters an agile response model between Tipsport and ThreatMark.

As new fraud patterns emerge, ThreatMark rapidly adapts detection logic and provides updates tailored to Tipsport’s evolving risk landscape. This flexibility allows Tipsport to stay ahead of new threats without overhauling internal processes.

“The return on investment is unquestionably strong. We consider ThreatMark a strategic partner in our fight against fraud.” Marek Havlin Security Engineering Team Leader at Tipsport.

Key Results

90% reduction of average incident investigation time

5% false positive rate since implementing ThreatMark

10× faster investigation of complex incidents

Nearly 1,000 hours of manual incident review saved annually

ThreatMark Helps CSOB Prevent 63% More Fraud Losses

ThreatMark — Tue, 27 May 2025 23:00:00 GMT

Faced with a surge in phishing and vishing attacks, Ceskoslovenska obchodni banka (CSOB) turned to ThreatMark’s Behavioral Intelligence Platform to bolster its defenses.

DOWNLOAD PDF

Faced with a surge in phishing and vishing attacks, CSOB turned to ThreatMark’s Behavioral Intelligence Platform to bolster its defenses. The results were immediate: the bank increased prevented fraud losses by 63%, improved its detection success rate by 29%, and significantly reduced the average loss per customer. With these successes, CSOB plans to harness ThreatMark’s fraud intelligence even further as it prepares for the upcoming PSD3 regulations.

Key Challenges

Phishing
Vishing
Scams

Background

The rise in fraud at CSOB started to escalate in 2020, initially driven by phishing attacks. Fraudsters tricked clients into entering their login details on fake phishing sites, allowing them to access and drain victims’ bank accounts.

By late 2020, vishing attacks emerged, further complicating the fraud prevention strategies in place. Fraudsters impersonated bankers, police officers, or IT support staff, manipulating customers into revealing sensitive information such as CVV codes. These tactics were often paired with remote access tools, allowing criminals to execute unauthorized transactions.

With fraud cases increasing in volume and sophistication, CSOB recognized the need for a more advanced fraud prevention solution capable of distinguishing legitimate transactions from fraudulent ones.

How Did CSOB Overcome These Challenges?

After evaluating potential solutions, CSOB selected ThreatMark as its anti-fraud partner. The implementation of the ThreatMark Platform was seamless, supported by collaborative workshops between the bank and ThreatMark’s team.

The impact was immediate. In 2022, before implementing the ThreatMark Platform, CSOB’s fraud detection success rate was around 50%, leaving a significant gap in its defense strategy. By 2023, following integration, that rate dramatically improved, with 63% more fraud losses prevented, even as fraud cases tripled. In 2024, the ThreatMark Platform further enhanced detection accuracy and helped reduce the average financial loss per customer by 30%.

“We use the ThreatMark Platform to detect all types of fraudulent attacks, including fraudulent activations of our mobile authentication app and voicebot phishing, which would otherwise be difficult to catch,” explains Lukas Eberl, FDS Product Owner. The bank’s new practice of pairing devices via Bluetooth to transfer the authentication app has significantly reduced phishing incidents.

ThreatMark has also kept pace with increasingly sophisticated vishing. Initially, fraudsters used remote access tools, which the ThreatMark Platform detects by identifying RATs and screen-sharing activity, combined with behavioral intelligence. As tactics shifted toward social engineering, ThreatMark evolved too, detecting when customers were on the phone with scammers while using the banking app.

Additional Benefits of the ThreatMark Partnership

Beyond enhanced fraud detection, CSOB values the proactive and customer-centric approach of the ThreatMark team.

“Their responsiveness and ability to rapidly develop new detection capabilities based on emerging fraud trends is a significant advantage,” notes Jakub Cerny, Online Fraud Analyst.

According to the bank, another benefit of the partnership is the participation in ThreatMark’s Banking Fraud Summits, exclusive events where fraud specialists collaborate on strategies to combat emerging threats. The Summits provide an opportunity for industry professionals to exchange insights on the latest fraud trends, discuss best practises, and explore new detection methodologies.

“We see great value in the Summits. Demonstrating real detection scenarios on actual data would, in our view, further strengthen industry efforts in combating fraud,” adds Jakub Cerny.

“Improving detection scenarios is just one of the benefits of the ThreatMark Platform. By reducing false positives, we’ve been able to streamline our work. This is especially important as the number of attacked clients continues to grow, with an 11% increase during the first half of 2024.”

Preparing for PSD3: Future Outlook

Looking ahead, CSOB remains committed to intensifying its efforts in the fight against fraud, especially in light of upcoming regulatory changes with PSD3. “The shift in responsbility for fraud losses and the need to compensate defrauded clients will present a significant challenge. That’s why we are currently testing the transaction monitoring module of the ThreatMark Platform. Reliable fraud detection and robust data analytics will be crucial in preventing financial and reputational damage,” explains Lukas Eberl on behalf of fraud prevention team at CSOB.

Educational initiatives to raise fraud awareness among clients are another integral part of the bank’s strategy, as customers play a key role in the fight against fraud.

“Even with the best fraud detection tools, customer awareness is essential, as some clients still proceed with transactions despite clear warnings. Ultimately, our role is to detect fraudulent activity without hindering legitimate banking operations—ThreatMark is instrumental in achieving this balance,” concludes Lukas Eberl.

Key Results

Increase in prevented fraud losses

Increase in detection success rate

Reduction in false positives

What Are the Banking Fraud Summits?

Banking Fraud Summits are exclusive events where banking professionals connect in a secure, sales-free environment to discuss emerging fraud trends, share real-world insights, and collaborate on effective prevention strategies.

Learn More About the ThreatMark Platform

How CPN Ecuador Eradicated New Account Fraud with ThreatMark - ThreatMark

ThreatMark — Tue, 27 May 2025 23:00:00 GMT

With a strong focus on security and trust, the cooperative has reinforced its reputation as a safe and reliable institution by implementing ThreatMark’s Behavioral Intelligence Platform, significantly enhancing customer protection and reducing financial losses.

DOWNLOAD PDF

Cooperativa de la Policía Nacional (CPN) is a leading financial institution founded in 1976 to serve Ecuador’s National Police and their families. Now open to the public, CPN provides tailored financial services—including savings, loans, and investments—to nearly 200,000 members. With a strong focus on security and trust, the cooperative has reinforced its reputation as a safe and reliable institution by implementing ThreatMark’s Behavioral Intelligence Platform, significantly enhancing customer protection and reducing financial losses.

Key Challenges

New Account Fraud
Reputation Risk
Customer Friction

What Prompted CPN to Rethink Fraud Prevention

Before implementing the ThreatMark Platform, CPN faced significant challenges in preventing fraud, with new account fraud posing the most serious threat. Fraudsters exploited CPN’s loan services by creating accounts, obtaining quick loans, and rapidly transferring funds out of the bank. This resulted in significant financial losses within the first half of 2020.

With security processes relying on manual, parameter-based methods, CPN found it increasingly difficult to keep up with the sophisticated tactics fraudsters were using, allowing multiple instances of fraudulent account openings to go undetected. This considerable financial burden underscored the urgency for a solution that could halt losses swiftly and accurately.

The challenge of new account fraud was compounded by the need to maintain trust and satisfaction among CPN’s unique customer base, consisting largely of Ecuadorian police officers and their families. This clientele relies heavily on CPN for critical financial services and expects a seamless, secure banking experience that matches their distinct needs. With minimal tolerance for delays or disruptions, CPN needed a solution capable of preventing fraud in real time without introducing unnecessary friction. In a sector where both security and user experience are paramount, CPN recognized that balancing effective fraud prevention with high customer expectations was not merely beneficial—it was essential. Driven by the pressing need to safeguard its reputation and provide uninterrupted services, CPN embarked on a search for an adaptive and automated fraud prevention solution.

“Since implementing the ThreatMark Platform, we haven’t lost a single dollar to fraud. The difference has been remarkable. We went from facing hundreds of thousands in losses to complete security, giving both our team and our clients confidence that their money is safe with us.” – Andres Espinosa, Information Security Architect

How Did CPN Overcome These Challenges?

After a thorough evaluation of available technologies, CPN Ecuador selected the ThreatMark Platform for its adaptability, responsiveness, and proven performance during testing. “I investigated a lot,” said Andres Espinosa, Information Security Architect at CPN, noting how the platform was the clear choice for addressing the cooperative’s specific fraud challenges. Its ability to be tailored to CPN’s environment ensured a strong fit from day one.

With implementation of the ThreatMark Platform, CPN moved from manual controls to fully automated, real-time fraud detection. Advanced behavioral profiling enabled instant identification of suspicious activity, stopping fraudulent transactions before any financial impact could occur.

“Since implementing the ThreatMark Platform, we haven’t lost a single dollar to fraud,” Andres shared. “The difference has been remarkable. We went from facing hundreds of thousands in losses to complete security, giving both our team and our clients confidence that their money is safe with us.”

Within just one week, the ThreatMark Platform had also reduced false positives—allowing members to continue banking smoothly and securely. “There is no friction for our customers,” Andres added, highlighting how the platform provides strong protection without disrupting the member experience.

Beyond fraud prevention, the partnership brought lasting organizational benefits. CPN Ecuador reinforced its reputation as a trusted institution—especially important for a cooperative serving the law enforcement community. Member satisfaction increased as the fraud-free experience deepened confidence in CPN’s services.

“With CPN, I know my money is safe,” Andres emphasized. This sentiment, shared across the member base, has become a reflection of the cooperative’s strengthened security posture.

Operationally, the platform’s automation reduced manual workloads and freed up the security team to focus on strategic, proactive initiatives. This shift created space for professional growth and innovation within the bank.

The financial savings from stopping fraud have been reinvested into digital banking improvements, further enhancing the member experience. Additionally, the ThreatMark Platform has played a critical role in CPN’s compliance readiness—helping the institution meet evolving regulatory requirements efficiently and reinforcing its position as a forward-thinking, member-first organization.

Staying Ahead of Regulation and Risk

As Ecuador moves toward alignment with European data protection standards and evolving financial regulations, CPN Ecuador is well-prepared. The flexibility of the ThreatMark Platform ensures CPN can continue to meet complex compliance requirements, including advanced data protection and fraud prevention mandates.

This adaptability allows CPN to maintain a leadership position in a more tightly regulated environment—without compromising service quality or member trust.

Looking ahead, the ThreatMark Platform will remain central to CPN’s strategy. As the cooperative expands its digital offerings and strengthens its defenses, the platform provides the resilience needed to stay ahead of emerging threats and deliver continued security for its 200,000 members.

Key Results

100% elimination of new account fraud

Reduction in false positives

Decreased manual workload

Improved customer experience

LEARN MORE ABOUT THE THREATMARK PLATFORM

How ThreatMark’s AI-Powered Authentication Enhances Security for Slovenská sporiteľňa - ThreatMark

ThreatMark — Wed, 14 May 2025 23:00:00 GMT

Slovenská sporiteľňa, part of Erste Group, with over 1 million clients, decided to use ThreatMark’s AI-powered risk-based authentication to upgrade its business flow & enhance security. As a direct result, the bank now saves at least €1 million every year while providing enhanced user experience for its clients. It is fully protected against various types of cyber threats & fully compliant with Payment Services Directive (PSD2) RTS requirements.

DOWNLOAD PDF

Overview

Slovenská sporiteľňa knew that the majority of users access their internet banking platform for legitimate reasons, and yet, they are bothered by one-time-password SMS’s at every login. Many SMSs are sent in vain, and bank’s end-users are unjustifiably disrupted during their experience. On top of that, sending SMS’s is costly and it’s not secured, as the messages can be intercepted.

After consulting ThreatMark, the Slovenská sporiteľňa has decided to deploy ThreatMark’s Anti-Fraud Suite (AFS) for all their online channels. After a quick deployment, ThreatMark utilized data about devices, user behavior (behavioral biometrics), transactions, and other contextual data across digital channels. The collected data is then processed in real-time using state-of-the-art machine learning algorithms and as a result a Risk Score is generated. If the Risk Score is low, the authentication element is not activated; when high, the authentication method (SMS) is escalated & sent.

With ThreatMark’s adaptive user identification most users experience frictionless authentication & seamless transaction authorization. ThreatMark’s system invokes strong authentication for high-risk logins and transactions only, meeting the necessary PSD2 requirements.

As a result, less than 10% of logins would require manual multi-factor authentication, which reduces friction dramatically. High-risk logins or transactions are directly denied.

Per Ján Adamovský, the Bank’s CISO, the ThreatMark’s AI-Powered seamless authentication did not only help with the PSD2 compliance but also saved €1 million, otherwise spent on SMS’s (in comparison with previous years).

Previously, the bank’s end-users usually spent 10 seconds on the login page on average. With ThreatMark’s AFS, this time has been reduced by more than 50%. Moreover, having the contextual info about each session and transaction ThreatMark identified 100% cyber threats during the test.

ThreatMark showed a 70% better detection rate than the competition, preventing various types of cyber threats. The Bank’s Fraud Analysts also noticed a 90% drop in false positives as a result of an in-depth overview of every session recorded in the AFS.

Our case study shows that Slovenská sporiteľňa, with 1M end-users, saves €1 million yearly & provides seamless user experience by implementing ThreatMark’s AFS Solution

MAIN BENEFITS PROOFED BY SLOVENSKÁ SPORITEĽŇA

The bank Saves € 1 million yearly by reduction of SMS OTPs

Detection capabilities of the bank were improved by 70%

Time spent on the login page dropped by 50% for end-users

Number of False-Positives dropped by 90%

ThreatMark’s digital identity verification and fraud prevention solution is trusted by leading European banks protecting tens of millions of end-users and thousands of transactions every day.

How ThreatMark Ensured PSD2 Compliance at Creditas - ThreatMark

ThreatMark — Wed, 23 Apr 2025 23:00:00 GMT

Creditas, one of Central Europe’s fastest-growing banks, faced the challenge of meeting PSD2’s tough new compliance demands while protecting customers from fraud.

DOWNLOAD PDF

KEY CHALLENGES

PSD2 Compliance

Navigating PSD2 Compliance

In 2017, Creditas prepared for the revised Payment Services Directive (PSD2), which introduced stricter requirements for authentication, transaction monitoring, and communication standards. The challenge was to achieve compliance without disrupting the seamless experience customers expected.

“We were prepared for major discussions and work when the regulator came to the offices seeking compliance fulfillment. Considering the complexities of PSD2 and its objectives, we expected a tough process. When we shared with central bank auditors that we use the ThreatMark Platform, they were relieved. They confirmed it was an excellent choice, and after that the entire process went fast and everything was significantly easier.” mentioned Ing. Zdeněk Grossmann, Director of Digital Banking, Development & Innovation at Creditas.

Transforming Fraud Operations

To secure its growing digital banking channels, Creditas deployed the ThreatMark Platform into production in just three weeks. The platform continuously evaluates user identities, devices, and behaviors in real time, ensuring PSD2 compliance while protecting customers from advanced fraud schemes.

For the fraud team, the transformation was immediate. Where traditional analytical tools had been complex and resource-intensive, ThreatMark provided clarity and customization. Analysts could adapt their workspaces, streamline investigations, and reduce the dependency on senior specialists.

“In our department, we are used to working with analytical tools that can be very opaque to the operator, requiring a good knowledge of query language, extensive experience, and analytical skills. With ThreatMark it is different – our professionals appreciate the clarity of the dashboard and the possibility to customize the workspace view, which further increases the ergonomics of working with AFS.” Filip Dragoun, Director of IT & Cybersecurity at Creditas, shared.

This shift empowered junior staff to handle routine tasks while senior experts focused on the most complex cases. The result was faster case resolution, improved customer communication, and a stronger overall fraud defense.

Dragoun continued, “Working with the ThreatMark Platform is very user-friendly and simple, all the necessary tools required for our tasks are there. ThreatMark has allowed us to delegate many activities previously performed by senior analysts to junior staff, who can then assess the severity of the findings themselves and immediately inform the bank’s clients of impending threats.”

From Compliance Burden to Operational Advantage

For many banks, PSD2 represented a regulatory hurdle that added complexity and cost. For Creditas, the partnership with ThreatMark turned that burden into an advantage. By embedding compliance capabilities directly into its fraud strategy, the bank not only satisfied the regulator but also improved its day-to-day operations.

The Czech National Bank’s reaction was telling. Inspectors expected prolonged discussions around compliance but were reassured once they learned ThreatMark was securing Creditas’ digital banking. This trust accelerated the audit process and gave the bank confidence in its long-term compliance posture.

Internally, ThreatMark delivered equal value. Tasks that once demanded senior expertise were rebalanced across the team. Junior staff were empowered to contribute meaningfully, while experts gained more time for high-priority threats. This shift in workload distribution reduced bottlenecks, increased agility, and allowed the bank to respond to fraud attempts in near real-time.

By combining regulatory compliance with operational efficiency, Creditas strengthened both customer trust and internal resilience — proving that compliance can be a driver of innovation rather than a drag on resources.

Looking Ahead: A Scalable Foundation for the Future

While PSD2 compliance was the immediate objective, Creditas understood that fraud prevention is a moving target. New tactics — from phishing and malware to deepfake-enabled account takeovers — continue to emerge. With ThreatMark, the bank has built a foundation that adapts to these evolving risks.

The Platform integrates behavioral biometrics, device profiling, and transaction analysis, all working in real or near real-time. This multi-layered approach ensures that compliance requirements like strong customer authentication (SCA) and continuous monitoring are not just met, but exceeded.

“Czech National Bank was relieved to hear we use ThreatMark to secure our online banking. Thanks to ThreatMark, ensuring PSD2 compliance was significantly easier.” notes Ing. Zdeněk Grossmann, Director of Digital Banking, Development & Innovation at Creditas.

Looking to the future, Creditas sees ThreatMark not just as a compliance solution but as a strategic partner. The Platform’s adaptability means the bank can anticipate emerging fraud vectors and integrate new defenses as needed. By uniting compliance, customer experience, and security, Creditas is positioned to continue its growth while safeguarding the trust of every client.