Banesco Banco Universal: Scaling Phishing-Resistant Authentication to 2.2 Million Users

Why It Matters

The shift eliminates shared‑secret vulnerabilities, dramatically improving security while cutting support costs—a blueprint for banks seeking scalable, phishing‑resistant authentication.

Key Takeaways

• 2.2 million users (92% of active base) now use passkeys
• 12 million passwordless transactions processed this year
• Identity‑theft fraud reports fell 65% after rollout
• Fraud alerts can be self‑resolved, cutting support calls
• Phased deployment ensured cross‑channel consistency and low‑risk testing

Pulse Analysis

Passkeys, built on the FIDO2 standard, are reshaping digital banking by removing the need for shared secrets such as SMS OTPs. Banesco’s migration illustrates how a large‑scale, multinational bank can integrate asymmetric cryptography into legacy core systems without disrupting the customer journey. By aligning with a global security strategy, the bank ensured that the same credential set works seamlessly on both mobile apps and web portals, addressing a long‑standing cross‑channel consistency gap.

The operational impact has been striking. With 2.2 million users authenticating via passkeys, the bank recorded 12 million passwordless transactions, of which 8.3 million were high‑value transfers. More importantly, identity‑theft fraud reports fell 65%, and customers can now resolve fraud alerts directly on their device, eliminating costly support calls. This self‑service model not only boosts satisfaction—security and ease‑of‑use now rank as top drivers in the bank’s surveys—but also frees contact‑center resources for higher‑value interactions.

Banesco’s experience offers a roadmap for other financial institutions. A disciplined, three‑phase rollout—technical evaluation, low‑risk pilot, then mass deployment—allowed the bank to iron out edge cases before scaling. Education on biometric storage and early focus on high‑friction use cases, such as fraud‑alert resolution, accelerated adoption. Looking ahead, Banesco plans to extend passkeys to phone banking and in‑branch services, moving toward a fully passwordless ecosystem that could become the new industry baseline for secure, frictionless digital finance.