Phishing and online fraud prevention

A non-transitory tangible computer program medium comprising computer program instructions executable by one or more computing devices comprising one or more processors, the computer program instructions, when implemented by the one or more processors, performing operations comprising:

• installing, by a user, software embodying the non-transitory tangible computer program medium for phishing and online fraud prevention, wherein the user is not required administration or root-level privileges to install the software embodying the non-transitory tangible computer program medium;
• establishing a virtual private network tunnel between a user's computing device and server;
• activating a website launcher on the user's computing device;
• decrypting and reading user credentials from a user smartcard;
• launching a browser in an isolated, sandboxed execution environment on the user's computing device;
• checking a local whitelist on the user's computing device against the requested website, and if the website is listed for access by the user, requesting a webpage from the server;
• determining at the server if the requested webpage is listed for access by the user;
• loading and sending the requested webpage to the user, via the virtual private network tunnel, if the requested webpage is listed for access by the user in the server;
• supplying the user credentials to the website;
• and
• presenting a webpage, a homepage, or a one-time password entry page for the website to the user.

A system for phishing and online fraud prevention comprising:

• a user computing device comprising one or more processors operatively coupled to memory comprising computer program executable by the one or more processors to implement operations comprising:
• installing, by a user, software embodying the system for phishing and online fraud prevention, wherein the user is not required administration or root-level privileges to install the software;
• establishing a virtual private network tunnel between the user computing device and a network operations center;
• activating a website launcher;
• decrypting and reading user credentials from a user smartcard;
• launching a browser in an isolated, sandboxed execution environment;
• requesting a webpage from the network operations center, via the virtual private network tunnel, if the requested website is listed on a local whitelist on the user computing device;
• supplying the user credentials to the website;
• and
• presenting a webpage, a homepage, or a one-time password entry page for the website;
• and
• a network operations center comprising one or more computing devices, each comprising one or more respective processors operatively coupled to respective memory, each memory comprising computer program executable by a processor to implement operations comprising:
• determining if a user requested webpage is listed for access by the user;
• consulting a local domain name system server if the requested webpage is listed for access by the user;
• and
• loading and sending the requested webpage to the user computing device, via the virtual private network tunnel
• wherein, the installation of the computer programs for the user computing device and the network operations center of the system does not require administration or root-level privileges.