Document ID: chunk:federal_register_of_legislation:F2022L00548:reg:13
Version: federal_register_of_legislation:F2022L00548
Segment Type: reg
Provision Reference: reg 13
Character Range: 41306–42600

13  Requirements to provide fraud mitigation protections
        (1) A carriage service provider must:
           (a) have systems in place to identify customers of the carriage service provider who are at risk of fraud in relation to their telecommunications service; and
           (b) provide those customers with fraud mitigation protections.
        (2) A carriage service provider must, in response to a reasonable request made by a customer of the carriage service provider who believes they are at risk of fraud in relation to their telecommunications services, offer the customer fraud mitigation protections.
        (3) In subsections (1) and (2), fraud mitigation protections means additional or tailored measures taken by a carriage service provider which are designed to prevent fraud in relation to the customer's telecommunications service and which may include:
           (a) notifying a customer of suspected fraudulent activity;
           (b) "flagging" the customer's account as at risk of fraud;
           (c) using multi-factor authentication in particular sale channels;
           (d) pausing certain high-risk customer transactions on a customer's account; or
           (e) sending notifications to a customer's authorised representative.

Part 5—General matters