Determining Criminal Voices with AI... War Against Phishing [‘Tto’ e-Phishing]

④ Joint Response by Investigation, Communication, and Finance
Need to Expand Victim Relief and Private Sector Roles

Artificial intelligence (AI) and malicious application (app) blocking technologies are being introduced to prevent voice phishing. However, since criminal organizations also use the latest technologies, it is not easy to completely block the damage. Ultimately, there are calls for active discussions on relief measures for victims.

Introduction of Various Technologies, Efforts for Complete Blockade

According to the intergovernmental task force (TF) on voice phishing response on the 1st, the investigation, telecommunications, and financial sectors are jointly responding to eradicate phishing crimes. The task force is composed of the Ministry of Science and ICT, the Korea Communications Commission, the National Police Agency, the Supreme Prosecutors' Office, the Financial Supervisory Service, and the Korea Internet & Security Agency (KISA).

In particular, the telecommunications and financial sectors are preparing to launch phishing response services utilizing AI technology through memorandums of understanding (MOUs) with private companies. Using 20,000 criminal call data held by the Financial Supervisory Service, the technology detects crimes and warns users with voice and guidance messages if the conversation during a call is suspected to be voice phishing. This service is developed with on-device AI, so it is used only during calls without the risk of wiretapping. The service is expected to be sequentially launched by the three major telecommunications companies starting early this month. A service that can completely block the installation of malicious apps that hijack mobile phones is also being implemented.

The Financial Supervisory Service has started a safe blocking service for credit transactions that can prevent illegal loan damage. This service preemptively blocks new personal credit transactions such as credit loans, credit card issuance, and insurance contract loans to prevent users from suffering financial damage due to loans executed without their knowledge. A Financial Supervisory Service official said, "Since applications are currently made face-to-face, the subscription rate among the 20s and 30s generation appears low, so we plan to improve it to allow non-face-to-face applications within this year," adding, "We also plan to expand it to other non-face-to-face financial transactions beyond loans."

The National Police Agency established a Phishing Crime Investigation Division within the Criminal Affairs Bureau of the National Investigation Headquarters this year to respond to phishing crimes. Additionally, the response system has been unified under the criminal division to strengthen investigation functions for phishing crimes, enabling dedicated handling from tracking to investigation and arrest. Furthermore, the agency is re-pushing for the enactment of the 'Basic Act on Fraud Prevention,' which allows temporary measures such as temporary suspension requests for suspected fraudulent accounts or phone numbers in new types of fraud like illegal investment leading rooms and purchase agency part-time job scams.

Victim Relief Still in Early Stages

Relief for voice phishing victims is still in its early stages. Since last year, Shinhan Bank, the Financial Supervisory Service, and Good Neighbors have been providing 10 billion KRW annually for three years to vulnerable groups. In the first phase, 6.4 billion KRW was provided as living expenses to 2,300 vulnerable victims, along with 367 cases of legal consultation and litigation support, 26 cases of psychological counseling, 232 prevention education sessions, and 926 cases of free insurance support for voice phishing damage prevention.

Experts unanimously emphasized the expansion of victim relief and the role of the private sector. Professor Hwang Seok-jin of Dongguk University Graduate School of International Information Security said, "In many cases, voice phishing victims are ridiculed when they talk about their damage, and many suffer silently, sometimes leading to extreme choices. The state should step in to help not only with financial recovery but also by operating victim recovery centers under local governments or the National Police Agency to heal mental trauma."

Professor Jung Yoo-shin, head of the Digital Economy and Finance Institute and professor of business administration at Sogang University, explained, "As the methods and means of voice phishing crimes have diversified, real-time response and monitoring are most important. However, it may be difficult for public sectors like the police or the Financial Supervisory Service to conduct 24-hour real-time monitoring, so there are limitations. If a system is established for private sectors to participate, it could industrialize voice phishing prevention and blocking, creating a market where private companies can generate profits. Utilizing security and fintech (finance + technology) companies could reduce the damage."