PDCOB 5.4 Disclosure warnings about the possibility of scams
1On each occasion that the customer uses the pensions dashboard platform, a firm must display the following:
- (1)
a message warning the customer that if they are approached by a third party who asks for the customer’s data or asks to screen share, the customer should check who they are dealing with;
- (2)
a message warning the customer about the risks of:
- (a)
screen sharing with a third party; and
- (b)
giving a third party access to the customer’s device, including remote access;
- (a)
- (3)
an explanation that a third party with control of the customer’s device can access and control more than what is visible on the screen, including one or more examples of what a third party can access remotely on a customer’s device; and
- (4)
a reminder to the customer:
- (a)
to think carefully about whether the third party needs to see the information on the screen; and
- (b)
that pensions dashboard view data is sensitive, valuable and should be kept safe.
- (a)
1Firms should consider warning customers to use the Financial Services Register to check whether a third party that claims to be authorised or exempt is who they say they are.
1Firms are reminded of the notification requirement relating to scams in PDCOB 15.2.