Hong Kong’s Rakuten Securities enhances online trading security mechanisms

Maria Nikolova

The measures are introduced in response to new requirements outlined by Hong Kong’s Securities and Futures Commission.

How secure is your brokerage against cyber attacks?

Rakuten Securities Hong Kong Limited, a subsidiary of Japanese online trading expert Rakuten Securities, has published a notice on its website informing its clients of new online security measures.

For the purpose of enhancing online trading security, the broker will implement two-factor authentication (2FA) starting from late April 2018 and clients will be required to use 2FA for accessing Rakuten FX and Trading Station (TS). Otherwise, clients will not be able to access our trading platform. The second factor authentication will be in the form of a one-time passcode (OTP). For Rakuten FX Client, OTP will be sent by SMS. For TS Client, OTP can be received by SMS and “My Page App” mobile app.

The change is mandatory, the broker says.

The company explains that the new security measures are introduced in line with the new requirements outlined by the Securities and Futures Commission (SFC) on reducing cybersecurity risk associated with Internet trading issued on October 27, 2017. The new rules, effective April 27, 2018, include a mandatory requirement for licensed corporations to implement two-factor authentication mechanism for clients logging into their internet trading accounts.

Let’s recall that the new rules apply to companies engaged in:

  • Type 1 regulated activity (dealing in securities);
  • Type 2 regulated activity (dealing in futures contracts);
  • Type 3 regulated activity (leveraged foreign exchange trading);
  • Type 9 regulated activity (asset management).

In addition to 2FA, the entities should implement monitoring and surveillance mechanisms to detect unauthorised access to clients’ Internet trading accounts. Other requirements concern data encryption of sensitive information such as client login credentials (ie, user ID and password) and trade data during transmission between internal networks and client devices.

The rules also require from online trading companies to outline contingency plans for cyber incidents. The companies should make all reasonable efforts to cover possible cyber-attack scenarios such as DDoS attacks and total loss of business records and client data resulting from cyber-attacks (eg, ransomware) in the contingency plan and crisis management procedures.

Read this next

Digital Assets

Binance upgrades Bahrain license to offer full-suite of crypto services

The Central Bank of Bahrain (CBB) has granted Binance its Category 4 license as a fully-fledged crypto-asset service provider (CASP).

Digital Assets

BitMEX spot exchange hits $24 million in daily volume

The newly-launched spot market of crypto exchange BitMEX reported a record of $24 million in 24-hour trade activity on May 25.

Retail FX

Financial Commission certifies offering of trade copier 4X Solutions

The Financial Commission, an independent self-regulatory compliance specialist for the financial services industry, has certified the trading technology offered by trade copier 4X Solutions.

Industry News, Inside View

LIVE from Devexperts webinar for brokers on Fractional Trading

Finance Feeds is providing live coverage of the event that aims to help brokers discover fractional shares as a key tool for a successful brokerage business in today’s trading industry.

Industry News, Retail FX

ASIC celebrates retail ban on binary options as 68% of wholesale clients lose money

In the 13 months before the ban, between 74% and 77% of active retail clients lost money trading binary options. The product intervention order does not apply to wholesale clients.

Crypto Insider

Investing in crypto: how to stay away from weak players

The main reason behind the hacks of crypto exchanges is weak key management. For example, all 4 hacks that took place in 2021 were caused by the ability of hackers to obtain access to hot wallets. 

Retail FX

Vantage launches swap-free gold XAUUSD trades for all clients until end of July

“As the greenback continues to strengthen, we want to support traders who remain bullish on gold or seek short term trading opportunities amid the volatility”

Industry News

Broadridge launches ESG reporting solution ahead of European regulation SFDR

The Broadridge managed solution for EET adds to existing Broadridge services, including European PRIIPs Template, European MiFID Template, Solvency II Tripartite Template and many more across the European jurisdictions.

Industry News

iCapital to acquire embedded structured investment platform SIMON

SIMON’s platform, SPECTRUM, is a multi-dimensional allocation analysis and portfolio construction tool designed to evaluate how structured investments and/or annuities may fit into a portfolio.