# How we secure Monzo’s banking platform 🔒

**URL:** <https://community.monzo.com/t/how-we-secure-monzo-s-banking-platform/131141>\
**Category:** News & Updates\
**Created:** [5 April 2022 13:26 UTC](https://community.monzo.com/t/how-we-secure-monzo-s-banking-platform/131141 "2022-04-05T13:26:39Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![AlanDoe](https://dub1.discourse-cdn.com/monzo/user_avatar/community.monzo.com/alandoe/32/45031_2.png) [@AlanDoe](https://community.monzo.com/u/AlanDoe)\
**Post date:** [5 April 2022 13:26 UTC](https://community.monzo.com/t/how-we-secure-monzo-s-banking-platform/131141/1 "2022-04-05T13:26:39Z")

</div>

We’re taking a further look at the inner workings of Monzo 🔎

The engineering landscape moves fast, but our Security Infrastructure team moves faster 🚤

Read on to find out how they build security in a fast-paced engineering environment, and how they work with other teams to keep our customers and platform safe👇

> **[How we secure Monzo’s banking platform](https://monzo.com/blog/2022/03/31/how-we-secure-monzos-banking-platform/)**
>
> Our Security Infrastructure team introduces the principles we follow to build security in Monzo’s fast-moving engineering environment and how they work with other engineering teams to keep our customers and platform safe.

We’ve also been able to grab some time from the author @chongyang to answer any questions you might have 😄

---

<div class="post-metadata">

**Author:** ![AlanDoe](https://dub1.discourse-cdn.com/monzo/user_avatar/community.monzo.com/alandoe/32/45031_2.png) [@AlanDoe](https://community.monzo.com/u/AlanDoe)\
**Post date:** [5 April 2022 13:26 UTC](https://community.monzo.com/t/how-we-secure-monzo-s-banking-platform/131141/2 "2022-04-05T13:26:47Z")

</div>



---

<div class="post-metadata">

**Author:** ![FrancoJJameson](https://dub1.discourse-cdn.com/monzo/user_avatar/community.monzo.com/francojjameson/32/74096_2.png) [@FrancoJJameson](https://community.monzo.com/u/FrancoJJameson)\
**Post date:** [5 April 2022 21:50 UTC](https://community.monzo.com/t/how-we-secure-monzo-s-banking-platform/131141/3 "2022-04-05T21:50:08Z")

</div>

@chongyang Thank you for taking the time out to explain your role, how threat modelling is used to secure monzo. In your view, are there any additional technologies, security processes that could be developed to deal with bad actors who access accounts via data disclosure/social engineering? I appreciate its not a question easily answered but would appreciate hearing your thoughts.

---

<div class="post-metadata">

**Author:** ![chongyang](https://avatars.discourse-cdn.com/v4/letter/c/9e8a1a/32.png) [@chongyang](https://community.monzo.com/u/chongyang)\
**Post date:** [6 April 2022 09:36 UTC](https://community.monzo.com/t/how-we-secure-monzo-s-banking-platform/131141/4 "2022-04-06T09:36:58Z")

</div>

Hi @FrancoJJameson, thanks for your question.

In terms of defending against social engineering, there is both a human and a technical aspect of it. The human aspect involves security awareness and phishing training; and the technical aspect involves having effective security controls both in our platform and on our staff devices to make data loss difficult to happen.

For example, as mentioned in the blog post we use hardware token devices extensively at Monzo, as they are more resistant to phishing than many other types of multi-factor devices. Across the various security teams we’ve done a lot of work on these aspects and we are continuing to improve them.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/monzo/original/3X/a/e/aedf2f7852aef6ffcd99f29eac49128cfbd2ecc3.svg) [@system](https://community.monzo.com/u/system)\
**Post date:** [3 October 2022 09:37 UTC](https://community.monzo.com/t/how-we-secure-monzo-s-banking-platform/131141/5 "2022-10-03T09:37:54Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.