Faced with scams, FranceConnect promises to strengthen its security

FranceConnect will have to step up its game: the tool, which allows you to connect to many public services from a single account (for example, linked to the tax site or health insurance), is in fact hijacked by scammers to steal money from users from Internet. .

By putting all eggs in one basket, FranceConnect allows a hacker who has gained access to their victim’s public finance platform to also access their Ameli account and hundreds of other services. With Tech & Co, FranceConnect announces the deployment of new security measures.

Training account scams

This promise follows the “disconnection” of the Health Insurance site (Ameli) from the tool, due to too many frauds in recent months, revealed by the Chained Duck on August 31.

The tool, which now has 39 million users, is also facing “increasing fraud.” The interministerial digital department (Dinum), in charge of developing FranceConnect, mentions “a few hundred reports per month”. Remember that no public service contacts Internet users to obtain identifiers or passwords and that such procedures are always fraudulent.

To reinforce its security, FranceConnect announces to Tech & Co that a change to its new FranceConnect+ tool for procedures that “allow access to financial payments” will begin in the coming weeks. So the formation account should be concerned, but so should Ameli and the tax site.

The main interest of FranceConnect+ is greater access security thanks to double authentication: at each connection, and after entering their password, the Internet user also receives a notification on their mobile that they must validate.

However, for the time being, the use of FranceConnect+ requires the creation of a “Digital Identity” account with La Poste. FranceConnect+ will also be compatible with the future France Identity application, based on the new biometric identity card, which currently benefits only a few million French people.