Japan’s Sumitomo Mitsui Trust Bank (SuMiTB) is moving its mobile banking customers to cloud-based FIDO authentication through a deployment led by systems integrator SCSK and security vendor OneSpan, marking a notable shift toward passkey-style authentication in the Japanese retail banking sector. The implementation is described as Japan’s first deployment of OneSpan’s cloud FIDO solution for consumer banking.
According to the companies, SuMiTB is adopting OneSpan’s FIDO Cloud Authentication solution to protect both login and transaction flows in its mobile banking app. The goal is to replace legacy authentication mechanisms that have proved vulnerable to phishing and account takeover with device-bound FIDO credentials that can withstand credential theft and replay attacks. SCSK is providing integration and delivery support, highlighting the project as part of its broader strategy to bring advanced authentication to the Japanese financial sector.
The deployment is being framed in the context of rising fraud losses and regulatory pressure in Japan to strengthen anti-phishing measures. SuMiTB and its partners emphasize that the FIDO rollout is intended not only to raise security but also to simplify the user experience, reducing reliance on one-time passwords and SMS codes while still meeting strict financial sector requirements for strong customer authentication. The bank plans to extend FIDO authentication deeper into transaction-level controls, which would allow it to step up security based on risk while maintaining a consistent sign-in experience for most customers.
SuMiTB’s move is another indicator that cloud-delivered FIDO services are becoming acceptable for large-scale consumer banking, including in markets that have historically relied on proprietary token solutions. The project raises familiar questions about cloud vendor risk, data residency, and incident response, but it also demonstrates a path to modern, phishing-resistant authentication that can be rolled out through existing mobile channels. Observers will be watching closely to see how quickly Japanese banks follow suit and how regulators respond to wider adoption of passkeys and FIDO-based controls in consumer finance.
Sources: OneSpan, Nasdaq, Retail Banking International
—
By the ID Tech Editorial Team
