E-Banking Risk and Mitigation
E-Banking Risk and Mitigation
Sara BIXHAKU
M.sC. ,"Eqrem Çabej" University, Gjirokastra, Albania
sarabixhaku@gmail.com, ORCID: 0009-0005-6084-2175
Antoneta POLO
Assoc.Prof.,"Eqrem Çabej" University, Gjirokastra, Albania
neta_polo@yahoo.com, ORCID: 0000-0003-2126-5019
Ilirjana ZYBERI
Assoc. Prof.,"Eqrem Çabej" University, Gjirokastra, Albania
izyberi@yahoo.com, ORCID 0000-0003-0591-1738
Enkela CACA
Assoc. Prof.,"Eqrem Çabej" University, Gjirokastra, Albania
ebabaramo@yahoo.com, ORCID: 0009-0003-8363-9191
Abstract
Electronic banking has transformed the financial industry by offering convenient, fast, and cost-effective
services to consumers and businesses. However, the digitalization of financial transactions also introduces a
range of risks and security concerns. Key challenges include phishing attacks, identity theft, malware, and
system vulnerabilities, which can lead to financial loss and erosion of customer trust. Additionally, the rapid
evolution of technology and increasing regulatory demands pose significant operational hurdles for banks.
This paper explores the major risks associated with electronic banking, highlights the most pressing
cybersecurity threats, and examines both technical and administrative strategies to mitigate them. Rapid
technological development makes the Internet the best way to provide customers with banking services
regardless of time and geographic boundaries. Compared to traditional banking, electronic banking provides
ease, convenience and access to their customers so that they can use the banking site for all types of
transactions in a secure environment. Customers can interact with the banking site 24 hours a day and seven
days a week. Despite the many benefits offered by this service, it remains a double-edged sword and is not
used by every customer, because the growing distance between the bank and customers can lead to a lack of
trust and increased concerns for safety. A particular risk comes with trying to integrate new channels with
existing channels. An important step that banks must take before undertaking any kind of transformation is to
ensure that online banking risk is properly addressed. Addressing e-banking risk includes a number of
measures that banks and users can take to minimize and manage these risks. The purpose of this chapter is to
identify the types of risks associated with electronic banking and to propose some of the main methods for
dealing with these risks. These include multi-factor authentication, data encryption, customer awareness
programs, and robust regulatory compliance. Addressing these challenges requires a holistic approach that
combines technology, policy, and stakeholder collaboration. By strengthening digital security infrastructures
and fostering a culture of cyber awareness, financial institutions can better protect their systems and
customers in an increasingly digital financial ecosystem.
Keywords: operational risk, interest rate risk, transaction risk, reputation risk, strategic risk
Citation:
Bixhaku S., Polo A., Zyberi I., Caca E., 2025. “Electronic banking risks: Challenges, security concerns, and
mitigation strategies”, Sustainable Regional Development Scientific Journal, Vol. II, (1), pp. 44-53
45 Bixhaku S., Polo A., Zyberi I., Caca E., Sustainable Regional Development Scientific Journal, Vol. II, (1), pp. 44-53
1. Introduction
Perceived risk has long been an important factor influencing customers' decision-making when purchasing
products or consuming services. This concept becomes particularly important in the context of electronic
banking, where the use of technology is often perceived as an uncertain and complicated process. According
to various studies, including those by Mitchell [1] and Davidow [2], customers often face ambiguity and
uncertainty due to the nature of technology, which brings new and unfamiliar stimuli.
When they decide to use electronic banking, customers are exposed to various risks, such as the availability
of services, their performance and security. This perception of risk is supported by empirical research, such
as those of Ho and Ng [3] and Lockett and Littler [4], which confirm that the use of electronic banking
systems is closely related to the sense of risk.
In this context, operational risk, credit risk, interest rate, liquidity, price, exchange rate and transaction risk
are among the main risks that banks and their customers encounter in electronic services. These risks have a
significant impact not only on the operation of banks, but also on the customers' perception of their safety
and reliability.
The paper explores these aspects of risk in electronic banking, analyzing the main factors that contribute to
them and the impact they have on the performance of financial institutions and the customer experience.
Furthermore, it examines the importance of effectively managing these risks to ensure that banks provide
quality services and maintain their reputation in an increasingly competitive market.
2. Literature review
E-banking is defined as "an online portal through which consumers can perform various types of banking
services ranging from paying bills to making investments" [5]. With the exception of cash withdrawals,
internet banking gives customers access to almost any type of banking transaction at the click of a mouse [6].
Indeed, the use of the Internet as a new alternative channel for the distribution of financial services has
become a competitive necessity instead of just a way to achieve competitive advantage with the advent of
globalization and fierce competition [7, 8].
Banks use online banking as one of the cheapest channels of providing banking products [5]. Such a service
also saves time and money of the bank with an added benefit of minimizing the possibility of bank teller
errors [9]. Wise and Ali [10] argued that many banks in their country want to invest in ATMs to reduce the
cost of branches since customers prefer to use them instead of using a branch to do business. The financial
impact of ATMs is a marginal increase in fee income significantly offset by the cost of a significant increase
in the number of customer transactions. The increase translates into improved customer loyalty leading to
customer retention and increasing the value of the organization. E-banking is a lower cost delivery channel
and a way to increase sales. Karjaluoto et al. [11] argued that "electronic banking is no longer limited by
time and geography. Customers worldwide have relatively easy access to their accounts, 24 hours a day and
seven days a week". The author further argued that, with online banking, customers who used to think that
bank branches take too much time and effort are now able to transact at the click of their fingers. Robinson
[12] believes that offering Internet banking services enables banks to establish and expand their relationships
with customers. There are many other advantages for banks offered by online banking such as, mass
customization for each user, innovation of new products and services, more effective marketing and
communication at lower cost [13], development of non-core products such as insurance and stock production
as an expansion strategy, improving market image, better and faster response to market evolution [9].
Stewart [14] asserted that despite the advantages of e-banking there is a possibility of its failure and this is
mainly attributed to the lack of trust of consumers towards electronic channels. There are several other
theories about customer behavior that can explain the rate of adoption and acceptance of e-banking.
Interesting is the study of Doll [15], who also claimed that the content of product information in the design
and presentation of the web are also important factors that affect customer satisfaction.
Mattila and Mattila [16] also asserted that security has been widely recognized as one of the main barriers to
Internet adoption and it depends on the availability of Internet service and a number of other social and
psychological factors. In the banking industry, customer-bank-corporate relationships remain a key issue
where businesses invest to maintain a higher competitive edge in the market [17]. The relationship between
banks and corporate clients is the most important factor in the success of new financial services. In
conclusion, several empirical studies have examined the impact of internationalization and corporate e-
banking on firm performance [18].
Bixhaku S., Polo A., Zyberi I., Caca E., Sustainable Regional Development Scientific Journal, Vol. II, (1), pp. 44-53 46
The growing popularity of e-banking has drawn attention to legal and illegal online banking practices.
Criminals focus on stealing a user's online banking credentials because the username and password
combination is relatively easy to obtain and then relatively easy to use fraudulently to access a bank account
in internet and to commit financial fraud. To notify users, many banking sites are now including Security
Indicators (Si) on their sites. Hua, Guangying [19] conducted an experiment to investigate how users'
perception of online banking is affected by the perceived ease of use of the Internet and the privacy policies
provided by the Internet banking website. In this study, he also examined the relative importance of
perceived ease of use, privacy, and security. Perceived ease of use is of lesser importance than privacy and
security. Security is the most important factor influencing user adoption. A particular risk arises with the
attempt to integrate new channels with existing channels [20].
Slowly but steadily, bank customers are moving towards internet banking. An important step that banks must
take before undertaking any kind of transformation is to ensure that online banking risk is properly
addressed. This is very difficult for both customers and banks to determine the best way to use online
banking. Also trust plays a very important role. It is very difficult to analyze trust as a phenomenon and it
can be almost impossible to analyze trust in the context of e-commerce because of the complexity and risk of
e-commerce. Trust will be the deciding factor for the success or failure of e-banking.
inappropriate and previously untested systems. In order to avoid this category of risk as much as possible,
banks should:
do occasional market research
implement database systems that ensure sufficient and flexible capacities to cope with changes in
demand
undertake promotional campaigns and
Ensure sufficient staff and development of a suitable business plan
2. Identity Theft: Identity theft means stealing someone else's identity information (such as the personal
number on credit cards). As in the case of fraud, identity theft is done to help commit other crimes such as
stealing bank accounts, paying for various purchases on the Internet, etc.
The second category includes the publication of illegal content on the Internet
The third category includes new types of crimes that are committed precisely as a result of the development
of new technologies such as computers and the Internet. Examples of these crimes are:
Spamming - These are advertisements that appear automatically during normal browsing on the Internet or
various e-mails that may come to our e-mail address that have an advertising content.
Hacking - Hackers are individuals who possess special computer skills and who manage to intervene inside
systems, computer programs or websites by discovering and exploiting the cracks that may be in their
security systems.
Malware - Is a category of harmful programs that include viruses, logic/time bomb/Trojan horse, sniffer
programs, denial of service attacks, data manipulation, Web spoofing, and Web site defacements. Generally
these are carried out by anonymous individuals who can mask their IP addresses, and use someone else's
identity.
Investigating such matters is almost impossible, and requires the most trained computer experts who are
usually hackers employed by the state itself.
who focus exclusively on rates. An institution can control this potential volatility and extended geographic
reach through its deposit contracts and open account practices, which may include face-to-face meetings or
the exchange of correspondence.
Internet Banking can increase the volatility of deposits for customers who keep their accounts only based on
rates or terms. Assets/Liabilities and loan portfolio management system should be suitable for products
offered through internet banking. Increased monitoring of liquidity and changes in deposits and loans may be
necessary depending on the volume and nature of accounts opened online.
received any financial benefit. This affects not only the bank in question, but can also undermine confidence
in the security of e-banking in general and therefore slow down development in this area.
that the system does not have. The marketing program must present the product accurately and fairly.
National banks should carefully consider how links to third parties are presented on their Web sites.
Hypertext links are often used to enable customers to connect to a third party. These links may represent an
endorsement of third-party products or services in the eyes of customers. It should be made clear to
customers when they leave the bank's Web site, so that there is no confusion about the specific service or
product provider or about the security and confidentiality standards that apply. Likewise, statements must be
made so that customers can distinguish between insured and uninsured products. Parent banks should ensure
that their business continuity plans (BCPs) include the e-banking business. Regular testing of the business
continuity plan, including press and public communications strategies, will help the bank ensure that it can
respond effectively and quickly to adverse customer or media reactions.
4. Conclusions
The rapid development of information technology after the 70s of the last century and especially its use in
society in the framework of the technical-scientific revolution could not leave out the banking sector. Every
day it is used more and more by banks to serve customers with speed, convenience, efficiency and at an ever
lower cost. E-banking has become an integral part of modern banking due to lower transaction costs, twenty-
four hour services, increased control over transactions, higher volume of transactions in less time, facilities
remote transactions and a much wider group of banking products and services. But in addition to these
possibilities, e-banking operations increase the different levels of risk for banks. Furthermore, clients who
rely on e-banking services may have a greater lack of tolerance for a system that is unreliable or that does not
provide accurate and current information. Through online services, clients have a greater choice and do not
need to be connected to one financial institution or another. Clearly, the longevity of e-banking depends on
its security, reliability and accountability.
One of the biggest problems with e-banking seems to be the security and protection of information
exchanged between the client and the bank. In fact, banking systems always express concern that the use of
electronic banking may expose banks, customers and their transactions to electronic interception and
possibly fraud interventions. Therefore, banks need to carry out regular risk assessments, keep customers
informed and, possibly, prepare to offer compensation if private information becomes public. For this reason,
all risks related to e-banking will be recognized, addressed and managed by banking institutions in a careful
manner. These risks can be mitigated by adopting a comprehensive risk management program that includes a
sound strategic plan. It is important that the extent of the risk management program in a financial institution
should be proportional to the complexity and sophistication of the activities in which it engages. E-banking
requires new administrative controls and potentially increases the importance of existing controls.
Management should evaluate its administrative controls to maximize the availability and integrity of e-
banking systems. Effective incident response mechanisms are important to minimize operational, legal and
reputational risks arising from unexpected events, including internal and external attacks that may affect the
provision of e-banking systems and services.
New technologies, especially the Internet, can lead to rapid changes in competition. Therefore, the strategic
vision should determine the way a product that will be offered on the Internet is designed, implemented and
monitored. The freedom and global reach of the Internet opens up the threat of increased competition from
new members who will not need a network of branches to operate effectively in any given market. Poor
investment planning and decisions for e-banking can increase the strategic risk of a financial institution. For
this, financial institutions should pay attention to the problems of continuous investments in IT. Electronic
(cyber) crime, which is getting stronger every day, is today a phenomenon that also accompanies electronic
banking, therefore, to protect against it, continuous cooperation with the information technology bodies, as
well as those specialized for the fight against cybercrime. The information technology systems designed for
electronic banking must be audited continuously, giving constant importance to their audit, why not also
using hackers to prove its stability against attacks of any kind. Continuous cooperation with the Bank of
Bixhaku S., Polo A., Zyberi I., Caca E., Sustainable Regional Development Scientific Journal, Vol. II, (1), pp. 44-53 52
Albania, as the highest specialized and independent regulatory entity in the banking system, is a continuous
necessity for electronic banking as a whole.
References
Aljlfri, H.A., Pons, A. and Collins, D. (2003). Global e-commerce: a framework for understanding and overcoming the
trust barrier. Information Management & Computer Security, 11 (3), 130-138.
Annavarjula, M. and Beldona, S. 2000. Multinational-performance relationship: A review and
reconceptualization. International Journal of Organizational Analysis, 8 (1), 48-67
Clow, K. E., Baack, D., and Fofliasso, C. (1998) “Reducing Perceived Risk Through Advertising
Service Quality Cues”, Service Marketing Quarterly, 16(2), pp.151-162.
DeYoung, J. 2001 “The Internet's place in the banking industry‟, Chicago Fed Letter, No.163, pp.1-
4.
F Beha, D Sina, F Ruxho, 2024. “The effect of institutional quality on tourism in designated European Union
Mediterranean states”, Journal of Infrastructure, Policy and Development 8 (6), 3412
F Beha, F Ruxho., 2024. “The impact of public debt on the economic growth. Evidence for Kosovo”, Global Business
& Finance Review 29 (3)
Falvian C., Torres E and Guinaliu M (2004), "Corporate Image Measurement: A Further Problem for
the Tangibilization of Internet Banking Services», International Journal of Bank Marfating,
Vol. 22, No. 5, pp. 366-384.
FJ Teixeira, SSPV Pescada, F Ruxho, C Palma, F Beha, 2024. “GLAMPING IN LOW-DENSITY TERRITORIES:
THE CASE OF SANTO ALEIXO DA REASTAURA?? O, Regional Science Inquiry 16 (1), 71-80
Gan, C and Clemes, M. (2006). A logit analysis of electronic banking in New Zealand. International
Journal of Bank Marketing, 24 (6), 360-383.
Ho, S. S. M., and Ng, V. T. F. (1994) “Customers’ Risk Perceptions of Electronic Payment
System.”, The International Journal of Bank, 12(8), pp.26- 39.
Hua, Guangying 2009.An Experimental Investigation of Online Banking Adoption in China, Journal
of Internet Banking and Commerce, April, Vol. 14.
Jayawardhena, C., & Foley, P. (2000). Changes in the banking sector – the case of Internet banking
in the UK. Internet Research: Electronic Networking Applications and Policy, 10, (1), 19-30.
Kandampully, J. and Duddy, R. 1999.Competitive advantage through anticipation, innovation and
relationships. Management Decision, 37 (1), 51-56.
Karjaluoto, H., Mattila, M., & Pento, T. 2002. Factors underlying attitude formation towards online
Internet banking in Finland.International Journal of Bank Marketing, 20(6), 261-272.
Krupavicius, A., Šarkute, L., Krasniqi, A., Ladias, Christos Ap. 2024. “Perceived and desired images of society: how
(un)equal is society?” Regional Science Inquiry, 16(1), pp. 55-70
Ladias C.A., Ruxho F., Teixeira F., Pescada S., 2023, “The regional economic indicators and economic development
of Kosovo”, Regional Science Inquiry, Vol. XV, (1), pp. 73-83
Ladias, C.A., and Ruxho F., 2024. "Utilizing Regional Economic Indicators to Identify and Mitigate
Economic Disparities in Kosovo." Regional Science Inquiry 13 (1): 45–57
Lampreia M., Teixeira F., Pescada S. P. V., 2024. “The predictive power of technical analysis: evidence from the
gbp/usd exchange rate”, Sustainable Regional Development Scientific Journal, Vol. I, (3), pp. 67-75
Lincaru C., Tudose G., Cosnita D., Pirciog S., Grigorescu A., Ciuca V., 2024. “Clusters as engines of sustainable
employment growth in Romania1”, Sustainable Regional Development Scientific Journal, Vol. I, (3), pp. 10-
27
Lockett, A., and Littler, D. (1997) “The Adoption of Direct Banking Services”, Journal of Marketing
Management, No. 13, pp. 791-811.
Mattila, A. and Mattila, M. 2005.“How perceived security appears in the commercialisation of
internet banking” Int. J. Financial Services Management,Vol. No 1, pp 23-34.
Mitchell, V. W. (1998) “A Role of Consumer Risk Perceptions in Grocery Retailing”, British Food
Journal, 100(4), pp. 171.
Papajorgji P., Tordi A., 2024. “Using quantitative tools to understand political issues”, Sustainable Regional
Development Scientific Journal, Vol. I, (3), pp. 28-35
Polo A., Caca E., Zyberi I., Ladias C.A, Ruxho F., 2025. “Foreign direct investment in real estate in Albania and its
impact on GDP”, Regional Science Inquiry, Vol. XVII, (1), 2025, pp. 135-142
Ruxho F., 2024. “Kosovo employee’s perception of economic growth and decent work according to sustainability”,
Sustainable Regional Development Scientific Journal, Vol. I, (3), pp. 53-66
Ruxho F., Ladias C.A, 2022 “Increasing funding for the regional industry of Kosovo and impact on
economic growth” Regional Science Inquiry Journal, Vol. XIV. (1), pp. 117-126
Ruxho F., Ladias C.A, 2022. “Increasing funding for the regional industry of Kosovo and impact on economic growth”
Regional Science Inquiry Journal, Vol. XIV. (1), pp. 117-126
Ruxho F., Ladias C.A, Tafarshiku A., Abazi E., 2023. “Regional employee’s perceptions on decent work and
53 Bixhaku S., Polo A., Zyberi I., Caca E., Sustainable Regional Development Scientific Journal, Vol. II, (1), pp. 44-53
economic growth: labour market of Albania and Kosovo”, Regional Science Inquiry, Vol. XV, (2), pp.13-23.
Ruxho F., Ladias C.A., 2022. “The logistic drivers as a powerful performance indicator in the development of regional
companies of Kosovo” Regional Science Inquiry Journal, Vol. XIV. (2), pp. 95-106
Ruxho F., Petropoulos D., Negoro D.A. 2024. “Public debt as a determinant of the economic growth in Kosovo”,
Sustainable Regional Development Scientific Journal, Vol. I, (1), pp. 55-67
Ruxho, F., Ladias, C. A, Tafarshiku, A., & Abazi, E., 2023. Regional employee’s perceptions on
decent work and economic growth: labour market of Albania and Kosovo. Regional
Science Inquiry, 15(2), pp.13-23
Sarin, S., Sego, T., and Chanvarasuth, N. (2003) “Strategic Use of Bundling for Reducing
Consumers’ Perceived Risk Associated with the Purchase of High-Tech Products”, Journal
of Marketing Theory and Practice, 11(3), pp. 71-83.
Sepetis A., Krupavičius A., Ladias Ap. C. 2024 “Social protection in Greece and sustainable development leaving no
one behind”, Sustainable Regional Development Scientific Journal, Vol. I, (1), pp. 83-92
Sequeira T., Rego C., Dionisio A., 2024. “Investment and productivity in the agro-industrial sector: a case study”,
Sustainable Regional Development Scientific Journal, Vol. I, (2): Special Issue, pp. 13-26
Stavara M., Tsiotas D., 2024. “A combined graph theoretic and transport planning framework for the economic 10
Sustainable Regional Development Scientific Journal, Vol. I, (2): Special Issue, Oct. 2024 and functional
analysis of large-scale road networks”, Sustainable Regional Development Scientific Journal, Vol. I, (2):
Special Issue, pp. 27-40
Teixeira F., Pescada, S.S.P.V., Ladias C.A., Hulaj M., Ruxho F., Machado V., 2025. “Stablecoin dp2p: innovation and
sustainability in fiat currencies”, Regional Science Inquiry, Vol. XVII, (1), pp. 95-106
Tsiotas D., Giannakis E., Papadas C., 2025. “A modularity decomposition model of evolving input-output sectorial
structure, Regional Science Inquiry, Vol. XVII, (1), pp. 107-133
Tsiotas, D., Krabokoukis, T., & Polyzos, S. 2020. “Detecting interregional patterns in tourism seasonality of Greece: A
principal components analysis approach”, Regional Science Inquiry, 12(2), 91-112.
Tsiotas, D., Polyzos, S., 2024. “Transportation networks and regional development: the conceptual and empirical
framework in Greece”, Sustainable Regional Development Scientific Journal, Vol. I, (1), pp. 15-39