Fraud could rise if retail customers use Facebook login

Online retailers should consider boosting their identity and access management controls considering that, by the end of 2015, half of new customers signing into merchant websites will be using their social networking credentials, according to Gartner.

The Stamford, Conn.-based IT research company on Tuesday released findings that an increasing number of users will access retail sites using linked social networking sites like Facebook.

Gartner highlighted a significant increase in this activity over the next couple of years: Today, less than 5 percent of retail customer identities are based on social networking profiles.

Ant Allan, research vice president at Gartner, said in a release that users desire the convenience of importing required registration information to retail sites. But this will carry risks, namely, including the increased likelihood of fraud.

"[T]he lack of identity proofing and weak authentication for social network identities can expose merchants to more fraud," Gartner said. "Service providers therefore have to defend themselves. They may allow social network registration, but augment the process with additional controls when a retail site provides access to sensitive data and monetary transactions."

The trend will, however, fuel higher demand of specialized vendors that support the use of social networking identities through “open standard,” or publicly available, authentication systems like OpenID or OAuth, which are used by sites like Twitter and Facebook, Allan said.

More in News

Privacy-bolstering "Apps Act" introduced in House

The bill would provide consumers nationwide with similar protections already enforced by a California law.

Microsoft readies permanent fix for Internet Explorer bug used in energy attacks

Microsoft is prepping a whopper of a security update that will close 33 vulnerabilities, likely including an Internet Explorer (IE) flaw that has been used in targeted website attacks against the U.S. government.

Weakness in Adobe ColdFusion allowed court hackers access to 160K SSNs

Up to 160,000 Social Security numbers and one million driver's license numbers may have been accessed by intruders.