In part two of The [Dot] Brand Tribes we argued that introducing new branded generic Top-Level Domains (gTLDs) would bring value to brand owners and have positive effects on customer recognition. In this last post we'll continue that theme and talk about how brand owners can come together to provide shared spaces using the banking industry as an example.
The digital age has provided both banks and consumers with new opportunities to create relationships and entanglements beyond the traditional high street branch. Money is now electronic. We save time by paying bills online, trading stocks, checking balances all from our computers or mobile devices. Banks save money on physical locations and create new products and innovative services that add to their bottom line. It is a win-win. But there is risk.
I'm not talking about the banking practices of certain institutions with our money, which I am no expert in. I'm talking about the risk faced online. Most commonly this risk is called "identity theft" which is enabled by a practice (amongst others) called "phishing".
Phishing is big business. The modern day equivalent of stealing your credit card from your pocket, it has become a worldwide financial concern. The Anti Phishing Working Group (APWG) in a study of attacks during the 1st half of 2009 stated that phishing "remains a dangerous criminal activity involving great losses of money and personal data". Domain names and the domain name system are intrinsically linked to phishing. The study suggests that phishing attacks in the 1st half of 2009 came from over 170 individual TLDs, with malicious registrations in 57 TLDs and the majority of those in just the 5 top TLDs. 3.6% of malicious registrations contained a brand or variation of a brand. Most concerning was that the majority of attacks came from hijacked domain names where the owner was almost always unaware of the activity.
The banking industry has come together over the past few years and made considerable strides to reduce the volume of phishing attacks in order to stem the loss of consumer confidence in online banking. Along with marketing and education, technology has helped. SSL Encryption has secured the flow of information. Tokens allow only the right people to gain access; passwords and CAPTCHA have limited hacking. Even browsers are now designed to flag suspicious sites. However criminals are innovative, technology is cheap and because of the potential ROI, are often well funded. So what are the next steps for financial institutions when it comes to protecting consumers and ultimately their ability to make money?
I believe that new gTLDs will be able to help banks. As previously discussed, a Dot Brand TLD for an institution such as HSBC (and for that matter all top brands) will promote the brand but it will also protect it. Combined with existing authentication technology and controls, the ownership of their own TLD registry will allow banks to control all interactions online between themselves and their customers. As discussed in previous posts it will take education, adoption and commitment. But in the long run it will be a win-win.
Think of the following slogan "If it's not a [dot] HSBC it's not [dot] Safe". Now consider the opportunities.
Product Domains – www.checking.hsbc
Location Domains – www.hongkong.hsbc
Marketing Domains – www.theworldslocalbank.hsbc
Your tribe needs the ultimate battlements and this gives you that, a moat, bows and arrows, and even a wizard. Maybe even think a little outside of the box and consider account number domain names. What if customers were given their own banking URL with their account number (e.g.www.45869302.hsbc)? This would directly navigate to a secure login for their account. Am I blowing your mind yet?
What about the idea of coming together for a common goal to fight identity theft. Remember we are only as strong as the sum of our parts. We've seen this work well in the .mobi extension. Global telecommunications companies coming together to back an innovative solution to mobile browsing. Together you can cultivate, share ideas and innovate. Bringing .bank for example to the domain space gives you the ability to control the security policies and innovations as a group. Here are some examples:
www.hsbc.bank
www.citi.bank
... you get the idea.
Now think "If it's not [dot] bank it's not [dot] safe". Having control allows you to implement the highest levels of security, create dedicated spaces and protect your tribes. Stringent rules and criteria will promote trust within customers. Of course the naysayers will no doubt shout that "criminals will find a way past this!" Maybe, but at least it will be on your playing field and remember if we don't innovate we die.
These will not suit all sectors but some are ideally suited to this. Remember that tribes that came together become empires. In the next series of posts we'll discuss some ideas for prospective TLD applicants to consider.
Written by Robert Rozicki, One of those domain name types
Follow CircleID on Twitter
More under: Cybercrime, Cybersquatting, Domain Names, Domain Registries, ICANN, Security, Top-Level Domains