From payment prompts to channel locks, leading providers are using carefully placed friction to help customers spot risk, act earlier and recover with confidence.

Friction has become one of digital banking’s most charged design words. Teams measure success through speed and the removal of unnecessary steps. In fraud and security, however, the quickest experience is not always the safest.

The better question is whether friction earns its place. A protective pause should capture attention at a meaningful moment, provide relevant context and lead to clear action. Otherwise, it is simply another obstacle.

Five priorities stand out across the global journeys tracked by RFI Global’s iSky Radar UX platform. They are less about adding security content than making each intervention more purposeful.

1. Understand context before intervening     

Security journeys are often designed around what the institution needs a customer to complete. Onboarding checklists are a familiar example. This can miss the factors shaping how an individual understands and manages risk.

Accessibility needs, travel, bereavement, financial hardship and household changes can alter the support a customer needs. So can digital confidence. Terms such as ’autofill’ or ’device registration’ may be obvious to a product team and meaningless to the person receiving a warning.

The opportunity is to adapt language, depth and format. Singlife’s former ’Simplify for me’ option pointed to a useful model: offer the same essential message in a form that matches the customer’s capability. Effective security communication starts with the person, not the process. A message customers cannot decode cannot change behaviour.

2. Interrupt at the point of decision 

Digital needs restraint. Long fraud explanations, dense login copy and generic scam carousels can all be accurate yet easy to ignore. They compete with the customer’s task.

Account-summary space is especially valuable. Using it for important security or operational communication, rather than routine sales, can teach customers that what appears there deserves attention. Every message still needs a clear call to action.

At higher-risk moments, the interruption should be direct. Garanti BBVA uses login to surface recent failed attempts and the last transaction date. In payments, TSB asks customers to consider their relationship with the recipient, while First Direct challenges a close payee-name match. These prompts interrupt autopilot while harm may still be preventable.

Good friction is active, specific and proportionate. It asks the customer to make an informed decision.