Tag Archive for: security

How does the FATF help fight financial crime?

01-12-2020 | treasuryXL | Refinitiv |

The Financial Action Task Force (FATF) plays a crucial role in the global fight against crime, corruption and terrorism through its Mutual Evaluation assessment. How has the FATF evolved since its birth 31 years ago, and what role does it play in anti-money laundering (AML) and countering the financing of terrorism (CFT)?

  1. The FATF is an intergovernmental body that oversees global efforts to combat money laundering and the financing of terrorism.
  2. To become part of the FATF group, a country must undergo a ‘Mutual Peer Review’ to determine its levels of compliance with FATF’s Recommendations.
  3. The FATF’s methodology change, introducing the Effectiveness Assessment, is yielding more accurate results of a jurisdiction’s levels of compliance with its AML/CFT global standard.

The FATF is an inter-governmental body that was established in 1989 by the G7 nations to combat money laundering. For the first 12 years, of its existence it was a little-known organization. However, it came to prominence after 9/11 when its mandate was expanded to include additional Recommendations to combat the financing of terrorism and the financing of the proliferation of weapons of mass destruction. Since then, the FATF mandate and Recommendations have been endorsed by different UN resolutions, and it has been transformed to adapt to different emerging threats. In 2008, after the global financial crisis, FATF’s role as an international standard policy-making body in AML and CFT was expanded by the G20. It was given the ‘soft power’ to generate the necessary political will to bring about legislative and regulatory reforms in countries.

The FATF Mutual Peer Review

Countries wishing to become members of the FATF group must commit to a ‘Mutual Peer Review’ system. This will determine the country’s levels of deployment and compliance with the FATF Recommendations, which have been set as the international AML/CFT standard. The FATF oversees these reviews in conjunction with different international members and observers such as the IMF, the World Bank, the OECD, and the European Commission.                                                                                       
In addition to the information received from the assessment team performing the review, the FATF Mutual Evaluation’s Effectiveness Assessment also considers information from the FATF team that visits the country being evaluated. The Mutual Evaluation team comprises highly trained experts drawn from FATF member countries and international bodies.

 

Recommendations focus on effectiveness

Until 2013, the results of the FATF review were largely focused on the technical implementation of the Recommendations into the local legislations. However, because of the high levels of money laundering (ML) and financing of terrorism (FT) globally, the FATF decided to enhance its methodology to focus more on effectiveness rather than just technical compliance. This revised methodology helped to produce the expected tangible results in the fight against AML/CFT. It shed light on many countries that had previously been evaluated, but who under the new methodology began to show serious weaknesses in the fight against ML and FT. This resulted in the number of countries and jurisdictions on the FATF Grey List — those who were placed under increased monitoring — to start growing.

The FATF Mutual Evaluation employs peer pressure from other countries, as well as bodies such as the IMF and the World Bank, which impels the assessed countries to act. Negative mutual evaluation outcomes not only seriously damage the reputation of the assessed countries and embarrass its governments, but might also generate replicated systemic risks of coercion by other international institutions such as the European Commission. And the new methodology is working. In recent years, the Effectiveness Assessment is yielding more accurate results of a jurisdiction’s levels of compliance with FATF’s AML/CFT global standard. Many jurisdictions are now finally realizing the coercive power of the Mutual Assessment.

New evaluation methodology

The fourth round of Mutual Evaluations from FATF continued the shift towards concentrating on how effectively regulations are deployed rather than mainly focusing on technical compliance and whether country laws and regulations are in place in accordance with the FATF Recommendations.

This can be very challenging for a number of countries in many sectors, including some that have previously been assessed to be complying with the standards before the introduction of this new evaluation methodology.

The pressure to ensure that legislation was changed and that industry sectors complied with the Recommendations was achieved by targeting the industry sectors that posed the highest AML/CFT risk. At least this was the case in the Middle East and Africa. The early years concentrated on the banking and financial sectors, including the capital markets. This focus was later broadened to non-banking remittances and payments organizations and money exchanges. This was followed by the insurance sector and so on.

Non-financial sectors under the spotlight

The last few years has seen Mutual Evaluation reports focus on the designated non-financial business and professions (DNFBPs) sectors — real estate, lawyers, accountants, gold and precious stone dealers, for example — that had been previously overlooked area by past evaluations. For example, the EU Fifth Anti-Money Laundering Directive, which came into effect in January 2020, further strengthened its AML/CFT legislation to fall in line with the FATF, when it included a number of new sectors.

The non-financial sector often has the misconception that AML/CFT regulations are solely for the banking and financial sectors. A key shortcoming identified by FATF across many jurisdictions in emerging markets is that DNFBPs are falling short of FATF expectations. Recent evaluation reports from several countries show that DNFBPs have less comprehensive, and sometimes limited or no understanding, of AML/CFT regulations and the risks that they are facing.

However, the new approach of measuring effectiveness rather than technical compliance might keep many countries’ institutions and companies to consider: “Are our sanctions and transactions screening just a checklist process, or do they show the real effectiveness of our AML/CFT risk process as defined by FATF?”

Identity fraud, COVID-19 and the Pivotal role of Digital Identity

16-11-2020 | treasuryXL | Refinitiv |

Financial crime, including identity fraud, is growing as sophisticated criminals exploit the ever-expanding capabilities of emerging technology. The COVID-19 crisis has only served to increase opportunities for criminals to benefit from fear, uncertainty and desperation, but digital identity solutions offer banks and financial institutions (FIs) a chance to fight back.


Financial crime and identity fraud: fueled by the digital revolution

As digital connectivity continues to redefine every aspect of our lives, quick, seamless digital experiences have come to embody our new normal. This digital revolution is being driven by a host of interconnected factors, including a changing regulatory landscape and emerging technology that creates an environment with low barriers to entry. Other factors are also at play, including ever-increasing connectivity between entities, increased cross-border activity, and tech-savvy consumers who demand choice, fairness, flexibility, and an omnichannel experience across all areas of their lives. Consumers accustomed to digital retail experiences expect the same 24/7/365 digital experience in other areas of their lives, such as banking and wealth management. Moreover, they increasingly expect tailored, highly personalized experiences.

The result of enhanced connectivity, convenience and increased consumer engagement is a real need to protect against highly sophisticated financial criminals who are harnessing the same digital capabilities to defraud both organizations and individuals. Put simply, the technological advancements that make our lives easier can also benefit criminals, making it easier for them to commit financial crime. According to the World Economic Forum, fraud and financial crime constitute a trillion-dollar industry, and private companies spent approximately US$8.2 billion on anti-money laundering (AML) controls alone in 2017.

Refinitiv’s own research, presented in our 2019 report, Innovation and the fight against financial crime, confirms that financial crime is indeed pervasive and costly. Our findings were collated from a survey of more than 3000 managers with compliance-related responsibilities at large global organizations. We found that nearly three-quarters (72%) of respondents were aware of financial crime taking place in their global operations during the 12 months preceding the survey, even though the same companies spent an average of 4% of turnover on customer and third-party due diligence checks. Looking specifically at identity fraud, the Federal Bureau of Investigation (FBI) has revealed that synthetic identity fraud – where criminals manufacture a new identity using both legitimate and false information – is the fastest growing crime in the U.S.2

COVID-19 has upped the ant

Following the rapid spread of the epidemic , financial crime has accelerated as criminals have found new opportunities to exploit fear, uncertainty and desperation. The FBI provides various innovative examples relating to how criminals are using COVID-19 to defraud individuals, including government impersonators who aim to extract personal information for illegal purposes. And work-from-home fraud, in which victims are asked to send or move money, effectively becoming money mules and enabling criminals.

Forward-thinking banks and FIs are already beginning to accelerate their existing digital transformation programs to mitigate the higher levels of risk anticipated during and after the pandemic. In particular, we expect a significant uptick in the use of digital onboarding and digital identity solutions as more consumers are forced to transact online as a result of lockdown and social distancing requirements; choose to do so for fear of contracting or spreading the virus; and/or are seeking better security when asked to prove their identity.

Even before the pandemic, many firms were increasingly using digital innovation to fight financial crime, including digital identity solutions in the client identification space. Digital identity solutions offer fast, reliable digital identity verification and screening; transcend geographies; boost operational efficiency; and remove the human error factor. Moreover, digital identity helps financial institutions optimize compliance models, improve risk mitigation and protect customers from identity fraud. As the world grapples with the effects of the pandemic, banks and FIs have a real and immediate opportunity to review their systems and controls, while simultaneously accelerating digital transformation and moving away from old-school manual Know Your Customer (KYC) processes.

The far-reaching effects of identity theft

Organizations across the financial services industry are facing a range of common challenges, including rising competition, tightening margins, strict regulatory expectations, the need for greater operational efficiency, and pressure to reduce costs. There is the added fundamental requirement to ensure that the client experience is positive. Customer abandonment levels remain unacceptably high, with over half (56%) of consumers in the UK abandoning bank applications in 2018. Our research suggests that traditional KYC and due diligence processes – which can be time-consuming, inefficient and costly – have contributed to this.

While firms are increasingly aware of the need to ensure better experiences for clients, they also need to consider the ever-growing security threats such as large-scale data breaches, phishing and social engineering attacks. These crimes have made it easier for fraudsters to assume the identities of legitimate account owners via account takeover fraud. The impact of identity fraud is far-reaching, with victims experiencing both financial and psychological damage that can severely impact their behavior and future brand loyalty.

There is therefore an urgent need for banks and FIs to prioritize customer identity protection alongside the accepted need to ensure a positive experience. Many banks and FIs are not moving fast enough to address this issue – and need to become more aware of the wider social risks of identity fraud.

On a more positive note, a highly encouraging finding from our survey was that technology, including digital identity solutions, is increasingly able to help organizations fight back against financial crime while improving client relationships. A significant 94% of survey respondents agreed that the technology they use to detect financial crime is also enhancing customer engagement.

Digital identity: who can benefit?

Digital identity solutions continue to grow in popularity and offer numerous benefits to different industry participants, including retail banks and wealth managers.

Retail Banking

Retail banks, for example, can benefit from enhanced speed, efficiency and security when using digital onboarding and digital identity solutions during customer account opening, where it is necessary to verify and prove the identity of new customers who apply for new bank products and services. Digital identity is also invaluable for customer re-verification and authentication in instances where existing customers seek to make changes to their personal information.

Wealth management

Turning specifically to the wealth industry, the benefits are equally clear. The wealth arena is operating against a backdrop of unprecedented uncertainty as wealth transfer from baby boomers to millennials brings far-reaching changes to business models, in line with the expectation that a new generation requires new strategies and alternative data.

We commissioned research from global research and advisory firm Aite Group, which collated the findings from executive interviews with leading wealth management firms around the globe. The research found that 100% of respondents consider wealth transfer to be one of their top-three concerns. This report also revealed that financial advisors are becoming less product-focused and more relationship-oriented. As the wealth industry continues to shift away from products and towards services, the role of financial planning is taking center stage in the client/advisor relationship. Advisors are increasingly shifting focus from administrative duties and investment selection to client service. Digital identities can enable the shift of work from financial advisor to less expensive parts of the value chain, enabling them to concentrate on areas of added value.

A strong belief in technology

Our research shows that firms overwhelmingly believe in the power of technology in the fight against corruption: 97% of all respondents in our innovation survey said that technology can significantly help with financial crime prevention. There are of course still challenges in adopting digital solutions – nearly three-quarters (73%) reported concerns or obstacles when harnessing technological advancements to reduce risks and costs.

Respondents revealed that only about half (51%) of the data and legal documentation needed to carry out due diligence is obtained, but creating more difficulties, only 54% of this is in a digitized format. While remedies will take time, the digitization outlook is positive with 60% of organizations prioritizing automation and digitization for investment. Respondents indicated that spending on customer and third-party due diligence checks was expected to increase by 51% in the year following the survey, with technology being the biggest investment area. This data was gathered prior to the onset of COVID-19 and is expected to accelerate further as a result.

Digital identity solutions deliver diverse benefits

Digital identity solutions tick many boxes, including:

  • Faster turnaround times. Using digital identity accelerates the pace of business, benefits all stakeholders, and means that banks and FIs can onboard and service more customers, more efficiently.
  • Improved accuracy. Human error is unavoidable in manual identity procedures, but digital equivalents reduce manual keying errors, ultimately leading to better compliance.
  • Better security. Old school security features, including passwords and knowledge-based authentication (KBA), not only cause high levels of frustration among clients, but are also often unsecure.
  • More streamlined operational costs. Digital identity solutions boost efficiency levels, leading to more optimal deployment of resources and cost savings.
  • A more favorable customer experience. Faster turnaround times, fewer touch points and a seamless digital experience all contribute to higher levels of customer satisfaction.

Refinitiv’s digital identification and verification solution, Qual-ID delivers in each of these areas. Built specifically for FIs, Qual-ID enables secure, digital identity verification and screening to boost compliance team efficiency. The solution focuses exclusively on consumer identity. Qual-ID helps with identity verification, document verification, enables anti-impersonation checks to be performed in a variety of robust yet consumer friendly ways.Qual-ID also leverages our market-leading World-Check Risk Intelligence Database to enable screening for financial crime risk within the same solution.

World-Check delivers accurate and reliable information compiled by hundreds of specialist researchers and analysts across the globe, adhering to the most stringent research guidelines as they collate information from reliable and reputable sources, including watch lists, government records and media searches. Incorporating World-Check capabilities into Qual-ID means that customers can verify identity against trusted sources, proof legal documents and screen for regulatory and financial risk – all in one transaction, via one API.
This unique combination of elements delivers a holistic digital identity and screening solution that assists our clients to comply with their legal and regulatory requirements at the time of onboarding.

Technology’s significant and tangible impact

Only 53% of respondents in our innovation survey confirmed that they conduct KYC checks on client identity during onboarding but worse still, only 46% of these checks are considered successful. While these figures are alarmingly low, our research did reveal that those organizations that use technology are almost twice as successful at performing KYC checks on client identity (47%) as their counterparts who don’t use technology (28%). These findings are a clear indication of the significant, tangible impact that the right technology can have in the client identity space, and ultimately in thwarting financial crime.

What is certain is that the digital transformation will continue to gather momentum – digital commerce is expected to grow globally at more than a 20% CAGR by 2022, reaching nearly US5.8 trillion in value. Alongside this growth, another certainty is that sophisticated criminals will continue to exploit emerging technology to advance their illicit activity, both now and after the COVID-19 pandemic. Forward-thinking banks and FIs must therefore harness the power of the best available technology and solutions to prevent financial crime and protect their customers – and digital identity solutions offer an immediate opportunity for success in this critical area.

How to stay ahead of emerging threats

| 03-10-2019 | treasuryXL | BELLIN

Cyber Fraud and Treasury
Company-wide strategies to understand and mitigate cyber fraud risk

Cyber fraud represents a rapidly-evolving threat. It is essential for treasury departments to be aware of the new types of fraud that are emerging because of online technologies. The global nature of cyber crime means every business must make sure that security systems are watertight. Gangs can now conspire to defraud corporations from different countries and jurisdictions across the globe.

Royston Da Costa of Ferguson Group assisted in drafting this immersive white paper titled “Cyber Fraud and Treasury: How to Stay Ahead of Emerging Threats,” which highlights how to prevent cyber fraud and the strategies on combating it. The white paper covers:

  • Cyber fraud consequences
  • Most common types of cyber fraud
  • How to prevent cyber fraud
  • How to respond to cyber fraud

DOWNLOAD WHITEPAPER

Accenture and blockchain: the accent on security issues

| 13-11-2017 | Carlo de Meijer |

My last blog was about IBM, triggered by a Juniper Research putting the company as the number one in the blockchain technology competition. One of the comments on this blog was that it looked like an IBM press release. But that is far beyond what is meant. I just looked at what the tech company was doing in the blockchain arena and why it could be adopted as the main blockchain model when blockchain adoption could become mainstream. In a previous blog I already talked about Microsoft’s CoCo platform, the number two in the Juniper Research asking myself if that could become a game changer (see my Blog: Microsoft CoCo Framework: blockchain game changer, August 29, 2017). Today I will go into some more detail in the blockchain activities of Accenture, number three according to the Juniper survey.

Accenture: where do they stand?

Looking at the various blockchain alliances or consortiums, of the top three in the Juniper Research, Accenture is the most broadly focused one. Being a member of both the Ethereum Enterprise Alliance and the Hyperledger Project as well as entered into alliance with Ripple and Digital Asset. Early this year Accenture also joined the Chamber of Digital Commerce (CDC), the world’s leading blockchain trade association. The CDC, aimed to “help educate, promote and accelerate the adoption of blockchain-enabled technologies” , is also the founder of the Smart Contracts Alliance, the Blockchain Alliance, the Global Blockchain Forum amongst others.

Compared to IBM (Hyperledger Project and Digital Asset) and Microsoft (Ethereum Enterprise Alliance and Ripple) that are more outspoken in their vision, the overall goal of Accenture is to leverage DLT innovations of all sorts to make the technology viable for enterprise IT use.

“Accenture strives to be at the forefront of blockchain innovation and its practical, real world application. We provide our clients with a complete view of the blockchain-based technology landscape and its potential business implications. Our global team of experts works with each client to help build smart strategies around effective use-cases, investment and implementation.”Accenture website

“Accenture is committed to supporting these efforts by leveraging our expertise across the company – from regulation to innovation – to make blockchain a reality for our clients.” David Treat, managing director of Accenture’s financial services industry blockchain

Accenture: focus on security issues

Accenture is especially focusing on security issues. These will be critical to the widespread adoption of blockchain technology. In February this year Accenture launched its new blockchain security hardware solution and recently the company has secured a patent related to its work on Editable Blockchain technology as of late September 2017.

Blockchain Hardware solution

Last February Accenture launched its new blockchain security hardware solution. In partnership with Thales e-Security and its hardware security modules (HSMs), Accenture has developed a Hyperledger Fabric-based patent-pending solution…..

Read the full article of our expert Carlo de Meijer on LinkedIn

 

Carlo de Meijer

Economist and researcher

 

How the ‘Cloud’ empowers treasurers

| 20-12-2016 | Kasja Reinders | GT News |

cloud‘The term ‘Cloud’ has become the buzzword for organisations interested in simplifying and transforming technology over the past several years. ‘The Cloud’ is used to describe a process or system of sharing technological resources to gain scale, efficiencies and reduce cost – or more simply put, using a network of computers to manage and process information, rather than a single computer or machine.’ According to GTNews in their article about how the ‘Cloud’ empowers treasurers.

Apparantly ‘Cloud’ adoption rates have been growing over the past several years in virtually every industry and in all parts of the world. How about the financial world and treasury in particular? Are treasurers reluctant to use the ‘Cloud’ or not? GT News states that ‘the endeavour of installing hardware and software is viewed by treasurers as too costly, resource-intensive and as leading to a longer overall implementation timeline. The cost effectiveness of the ‘Cloud’ is a major reason for treasurers to seek the cloud. Security is an issue of course. Treasurers are moving toward either private or public cloud deployments. ‘Some treasurers view private ‘Cloud’ environments as more secure than shared, public ‘Cloud’ environments; others are comfortable with recent developments in public ‘Cloud’ security’, according to GTnews.

 4 major reasons to use the cloud

To summarize their reasons, the 4 most important are:

  • Minimal internal treasury and IT support required for setup and maintenance.
  • The option of faster, more standardised implementations.
  • Significantly lower overall total cost of ownership.
  • Minimal upgrade effort and cost.

But how and to what extent does the ‘Cloud’ really help treasury departments to innovate and improve? GT News: ‘The ‘Cloud’ allows treasurers to move further away from operational, non-value added tasks such as those related to the maintenance of technology (implementing, upgrading, supporting), to more analytical and strategic initiatives. Frequent and seamless updates and enhancement of the technology allows treasurers to utilise the latest functionality without the need for a significant upgrade process. This is key, because it allows treasurers to consume new and innovative technologies as quickly and easily as possible.’

GT News concludes: ‘Corporate treasurers should demand that vendors in the treasury technology space stay ahead of the cloud curve, by providing the most secure, functionally powerful and innovative ‘Cloud’ solutions.’

We asked our expert, Kasja Reinders, to comment on this topic:

The ‘Cloud’….. some consider it ‘something untouchable’,  others really love it.
My opinion… for some companies the ‘Cloud’ is not really interesting because they have their own IT department with a good back up system and employees who will take care of it and know what they are doing.
If you are working in the ‘Cloud’ it is actually nothing else then putting your information on another server which is managed by a different company. That means that you are outsourcing your IT servers and you will miss the control on it.  The problem is that you aren’t sure if the company that will take care of your information is doing this in the way you want it.
But I imagine that for a lot of companies this will work well and that is why they are using the ‘Cloud’.
For treasury departments I think it won’t be usefull. Treasury managers as I are working with confidential information and therefore I would rather not work in the ‘Cloud’.
It is this feeling I have that tells me it is not save, but maybe we treasurers need to keep pace with times and start using the ‘Cloud’. The future will tell us if it is save or not.
Kasja ReindersKasja Reinders – Treasury/Cash Manager

[button url=”https://www.treasuryxl.com/community/experts/kasja-reinders/” text=”View expert profile” size=”small” type=”primary” icon=”” external=”1″]

[separator type=”” size=”” icon=””]