What are the impacts of Financial Data Leaks?

Article by Stefano Siggia

In the past decade, a series of leaks from insider sources have shed light on the complex systems of money laundering, tax evasion, and fraud perpetrated by certain countries and wealthy individuals. The profound work carried out by international journalists in publishing the wrongdoings have shaken the foundations of the world of finance, AML, and tax regulation, leading to the disruption of old and corrupt structures.

Data leaks such as Panama Papers, Offshore Leaks, Swiss Leaks, or Paradise Papers have all had an impact on our perception of the world of finance and its seedy side. Their disclosures have exposed numerous financial misbehaviours from persons across the world – from politicians hiding exorbitant gains from their country’s taxation system, to celebrities masking their assets behind shell companies in far off lands, to the intrinsic web of offshore entities linked to individuals of power.

Transparency International estimates that tax evasion, theft, corruption, bribery, and other illicit activities costs developing nations $1.26 trillion each year, or roughly the equivalent of the economies of Switzerland, South Africa and Belgium combined. In the European Union, about $132 billion are lost to corruption on a yearly basis.

The tsunami of scandals and disbelief created by the various reports are helping to reshape the realm of finance, slowly chipping away the secretive systems that have been weakening global economies.

.

.

How were the financial leaks exposed?

The leaks and reports could not have existed without the help of brave whistleblowers. In 2016, a person by the pseudonym of Joe Doe leaked to the German newspaper Süddeutsche Zeitung 11.5 million documents with a total of 2.6 terabytes of data belonging to the law firm Mossack Fonseca, exposing the massive financial injustice that would be known as Panama Papers. In a public statement titled The Revolution Will Be Digitized, Doe explained that they had disclosed the documents to highlight global financial corruption and growing income inequality.

While most whistleblowers had noble intentions, there were some exceptions. In 2008, former HSBC Private Bank software engineer Hervé Falciani stole data that exposed the tax evasion scheme of 100.000 clients and 20.000 offshore companies that had accounts with HSBC. Known as Swiss Leaks, it is considered the biggest leak in Swiss banking history.

Mr. Falciani initially fled to Lebanon with the data, looking to make money by selling it to local banks and start a new life. He was found and arrested, and upon being let go following an interrogation, Mr. Falciani fled to France where he handed the information over to French authorities prompting a worldwide investigation.

.

How were the financial leaks published?

The majority of whistleblowers contacted journalists to hand over the data that they had obtained. The massive amount of information was impossible to go through by a handful of journalists and newspaper shared their evidence with the International Consortium of Investigative Journalists (ICIJ).

The ICIJ is a U.S.-based non-profit organization with a network of 267 investigative reporters from over 100 countries and territories. They also partner with over 100 media organizations including major companies such as the New York Times, the Guardian, and BBC, as well as smaller regional non-profit investigative organizations. The ICIJ not only analyses the data leaks but also publishes them on their website, making accessible to anyone the names of the individuals and companies exposed. The information is also available in screening feeds used by financial institutions.

To be able to sift through the gargantuan number of documents, ICIJ journalists employ various encrypted technological tools to aid them. The first of these is a secure forum, similar to a common social media app, which allows the journalists to post their discoveries. The second is Blacklight, a database used to search for names, countries, and sources, followed by the third tool known as Graph, an app that visualises the links between individuals and companies.

Recently, the ICIJ also began to employ an AI machine-learning model that is capable of finding similar documents amongst piles of records, such as tax filings or business forms of the same company.

In 2021, the ICIJ, together with the Global Alliance for Tax Justice, was nominated for the Nobel Peace Prize for exposing illicit flows and fighting against the circulation of dark money.

.

The complete list of data leaks

Below you will find a comparative chart on the various leaks that have been disclosed thus far:

.

Who was exposed in the data leaks?

Politicians, heads of state, actors, musicians, television celebrities, members of royal families, entrepreneurs, and other individuals of power were exposed in the various leaks. Below is a short list of some of the most curious or well-known names and in which leak they appeared in:

  • Formula One pilot Lewis Hamilton shielded millions of dollars in taxes on his luxury jet – Paradise Papers
  • Belgian-Israeli diamond tycoon Erez Dayelot who is connected to blood diamonds, bribery, and arms trafficking – Swiss Leaks
  • The king of Saudi Arabia Salman of Saudi Arabia – Panama Papers
  • Bono, vocalist of famed rock band U2, owned a Lithuanian shopping mall as a tax shelter – Paradise Papers
  • The estate of Queen Elisabeth II invested millions in an offshore portfolio which included companies accused of predatory lending – Paradise Papers
  • The Walt Disney Company, Skype, and Koch Industries held accounts in Luxembourg to receive massive tax deductions – LuxLeaks

.

What was the impact of the financial leaks?

The leaks and reports had beneficial impacts on national and international legislation, prompting state governments and international unions to take action to improve the state of the financial world. Below is a selection of some of the most important changes enacted after the scandals:

  • EU Special Committee on Tax Rulings – following LuxLeaks in 2015, the European Parliament set up a special committee on tax rulings. After an inquiry on several Member States and companies, the committee re-introduced the idea of the Common Consolidated Corporate Tax Base in Europe which would create a European common tax scheme. The same year, the European Commission also introduced the notion of a system of automatic exchange of information on tax rulings in the EU known as the Tax Transparency Package. The special committee was reactivated in 2016.
  • The EU Whistleblower Directive – the dangers that the many whistleblowers faced when exposing the various financial injustices prompted the EU to issue a whistleblower protection directive in 2019. The directive offers harmonization across EU Member States and brings about greater legal certainties and stronger rights and obligations towards whistleblowers in the private and public sectors.
  • Incorporation Transparency and Law Enforcement Assistance Act – Following Panama Papers, members of the U.S Treasury Department, House of Representatives of the state of New York, and others introduced a bill that would “ensure that persons who form corporations or limited liability companies in the United States disclose the beneficial owners of those corporations or limited liability companies.” The bill is yet to be approved.
  • BVI Public Register of Company Owners – The British Virgin Islands’ secrecy rules have played a prominent role in scandals such as Panama Papers, Paradise Papers, and Offshore Leaks. In 2020, the BVI’s premier and minister of finance, Andrew Fahie, announced at the House of Assembly that the government is currently working on “a publicly accessible register of beneficial ownership for companies.” The register will be adopted by 2023.

.

By Stefano Siggia,March 2021, published on pideeco.be

7 Creative Ways To Incorporate Storytelling In Compliance Online Training

Article by Learningpool

The customer experience

Authors: Kirstie Ball, Sally Dibb and Keith Spiller of the Open University Business School and Ana Canhoto of the Oxford Brookes University Business School.

The regulations around anti-money laundering (AML) place private sector organisations at the frontline of crime prevention and, in the case of counter terrorist financing (CTF), national security. Know Your Customer (KYC) and Customer Due Diligence (CDD) raise questions that concern not just regulatory compliance but also the impact of AML on core business processes and competitive advantage.

Financial services organisations monitor customer transactions both to detect suspicious activity and for marketing purposes. Customer relationship management (CRM) involves mining the information to anticipate and service customer needs over the longer term; it has proved highly effective, enabling firms to identify lucrative prospects, target messages and products, and generate revenue. As well as relying on the same data as CRM, AML employs similar statistical techniques to derive its results. CRM focuses on the attractive customers, whereas AML seeks to isolate the risky ones. The close parallels prompt questions: do organizations that know a lot about their customers through CRM prove equally competent at AML? How does AML, as it translates into operational requirements, affect the customer relationship? Recent opinion from Harvard Business School [1] suggests that business organisations have a duty to take their social responsibilities – including combating financial crime – as seriously as they do their commercial imperatives. But questions persist over the degree of responsibility and pressure that AML/CTF imposes on regulated businesses and, by extension, their customers.

Notes

1. Porter, M and Kramer M (2011) ‘Creating shared value: How to reinvent capitalism – and to unleash a wave of innovation and growth’, Harvard Business Review January – February, pp 62 – 77

Regulate Online Political ADs for Greater Political Integrity

10 March 2021, published on Transparency International

Governments must update election laws to ensure online political advertising is legitimate, its financing transparent, and microtargeting is kept to a minimum. And they need to hold platforms accountable.

Online platforms such as Facebook and Google have become prime virtual real estate for political advertising in recent years.

Such advertising has revolutionised the political process, opening up a world of opportunities for political actors to connect to voters. In turn, groups of constituents can use their own voices more effectively for civic participation. Online advertising can also help less conventional politicians with fewer resources, freeing them from reliance on wealthy donors.

Online political advertising – defined as paid digital communications that aim to influence voters’ or political office holders’ decisions on matters of public interest – has the potential to do even more.

Digital ad spending in the last general election in the US – the country with the biggest market – had hit a record US$1 billion by February 2020. By a few weeks before the November 2020 elections, at least US$3 billion may have been spent on online ads.

While online political advertising is more prominent in the US and Europe, it is quickly becoming a force to be reckoned with in other parts of the world too.

However, this potential force for good has rendered traditional political finance regulations obsolete. Six out of 10 countries worldwide do not have any restrictions on online political advertising at all. Without regulation, online political advertising threatens financial transparency and accountability in the political process.

A new report by Transparency International provides an overview of these risks and recommends five measures to help ensure that online political advertising serves the public good.

Just two companies dominate the multi-billion dollar online political advertising market worldwide – Facebook, which holds around 80 per cent of the share in social media platforms, and Alphabet (Google, YouTube, etc.) which has roughly 90 per cent in search engines. Such concentration without regulation leaves these big tech companies with enormous power in their hands.

Too often, such companies allow a high degree of opacity in online political ads. The public do not know who places an ad, who pays for it, or who it is being shown to.

The ill-effects are starting to show. From misinformation and disinformation, to cybersecurity risks and microtargeting – democracies around the world are feeling the effects of political content on digital platforms gone awry.

Disinformation – information that is deliberately false or misleading – can affect all parts of our society. Just last week, a fake YouTube channel created with the name Transparency International began paying to promote defamatory content about other anti-corruption organisations working on a case in the Democratic Republic of Congo. Platforms such as YouTube, which lack proper checks on these ads and who is behind them, not only undermine democracy and accountability but can facilitate attacks that threaten the work done by civil society organisations.

In order to realise the full potential of online potential advertising, we must first address the myriad transparency and accountability risks it poses.

Regulating online political advertising would be an important step towards removing undue influence from politics. We recommend:

  • Updating political financing regulations for the digital era, including an updated legal definition of political advertising.
  • Ensuring authentic political messaging through identity verification processes, the use of official accounts by political actors and the removal of inauthentic online content.
  • Holding online platforms and advertisers accountable for ad transparency.
  • Raising the bar for financial reporting by political actors and online platforms.
  • Restricting microtargeting and enhancing standards for trading personal data.

 

Debates about regulating online platforms often end up being about definitions: when is a platform a publisher, what counts as free speech? But when it comes to online political advertising, the important questions are more a matter of choice: Do we want a world where digital technologies serve the public interest, making politics more responsive to communities? Or are governments and tech companies happy to allow powerful and opaque vested interests to dominate the information we receive about issues that affect us all?

 

What is a Compliance Dashboard? What You Need to Know

Article by Michael Volkov

When you think of a dashboard, what comes to mind? Is it a panel containing instruments and controls that indicate the health of your vehicle, or charts that provide information and statistics? Simply, a dashboard provides a picture story in one view. Just like a car dashboard will show you your speed, RPMs, and gas level, a compliance dashboard should show you key metrics at a glance to clearly understand the health of your program.

 

What Are the Benefits of a Compliance Dashboard?

Investing in a compliance dashboard solution provides your company with the ability to integrate data collected from various systems utilized within your company. This collected data is stored in a central warehouse that can be extracted to create the visual story you wish to communicate. This would eliminate the time and resources it takes to request the data from your lines of business, analyze the data, and manually create reports.

Other key features of a compliance dashboard are the ability to filter and integrate the data to generate customized reports and to identify issues and trends in real-time. You can utilize the dashboard to measure efficiencies and inefficiencies within your organization. The collected data provides the end-user with the ability to drill down and filter the data to get the desired results to monitor key performance indicators (KPIs) and key risk indicators (KRIs) to share with management or other stakeholders. The generated reports also provide documentation of your compliance program monitoring efforts.

A compliance dashboard is utilized to tell a story. You determine what story you wish to deliver and apply the data to meet your needs.

.

Why is Having a Compliance Dashboard Important?

In today’s ever-changing regulatory environment, organizations that are subject to maintaining a compliance program must ensure their program is effective as outlined in the Evaluation of Corporate Compliance Programs issued by the Department of Justice (DOJ) in June 2020. The DOJ emphasized the use of data to track and test the effectiveness of compliance programs. More importantly, this guidance stipulates:

“Do compliance and control personnel have sufficient direct or indirect access to relevant sources of data to allow for timely and effective monitoring and/or testing of policies, controls, and transactions? Do any impediments exist that limit access to relevant sources of data and, if so, what is the company doing to address the impediments?”

Regulatory authorities are monitoring companies to determine how effective their compliance program is. For companies that failed to implement a viable compliance program, they collectively paid billions of dollars in penalties and were subject to criminal prosecution.

The following companies are examples of being subject to criticism and fined for not maintaining an effective compliance program:

  • Capital One recently assessed a $390M civil money penalty for failing to implement and maintain an effective Anti-Money Laundering program.
  • Sabre Corporation, a travel technology company, paid a $2.4M settlement with 27 State Attorneys General for a 2017 data breach involving hotel booking services. Sabre failed to adhere to state laws regarding data breach notification.
  • Goldman Sachs settled $3.9 billion in penalties with the DOJ and SEC to resolve FCPA charges related to the Malaysian sovereign wealth funds, 1Malaysia Development Berhard (1MDB). Goldman Sachs’ compliance and control functions failed when the culture of compliance was pushed aside over profitable deals and bribery payments.
  • Berkshire Hathaway paid $4.1 million for violating Iran sanctions because one of its subsidiaries knowingly sold products to intermediary companies in Turkey with the knowledge that the products would be resold to Iranian end-users.

With the DOJ’s compliance program guidance, it is more relevant and important to ensure your company’s compliance program is effective and works in practice, to avoid these types of violations. Compliance touches various areas within your organization—so how do you monitor to identify issues, risks, and threats before they become a problem? The compliance dashboard is your tool to centralize collected data and monitor your compliance program.

 

How to Develop an Effective Compliance Dashboard?

Create your story. Work with the various stakeholders in your company to identify the applicable compliance regulations that make up your program. Inventory the various systems and platforms utilized by the lines of business to collect and integrate the data required to make informed decisions on the effectiveness of your compliance program.

When designing your dashboard, consider the following components you wish to display to align with the strategic needs of your company and lines of business:

  • Perspective – who is the report intended for
  • Objectives of the compliance program
  • Measurements (KRIs and/or KPIs)
  • Indicators – color-coded symbols to provide a quick glance of the measured performance.

In addition, determine the best visuals that would link the data to the strategic objectives of the dashboard:

  • Heat maps
  • Charts (bar charts, line charts)
  • Trends (month over month or year to year comparisons)
  • Scorecards to monitor KPIs and trends.

Identify, track, and manage your KPIs and KRIs of every compliance process in areas such as:

  • Reputation
  • Sanctions
  • Legal
  • Financial
  • Operational
  • Regulatory
  • Third party
  • Distribution channel
  • Fraud

From the collected data, identify trends and correct these trends where necessary. Review your chosen metrics in real-time to identify issues before they become a problem, and develop snapshots to report the performance of the compliance program with the board of directors, management, and other stakeholders in your company.

Part of the storytelling is to determine the type of dashboards to design based on your business requirements. It helps to define the purpose of the dashboard, data to collect, and who will receive this report. Some examples of using a dashboard can be:

  • Strategic
    • Informational and provides an overview to the board and decision-makers to monitor the health and opportunities of the compliance program.
      • Across the enterprise or by company function (i.e., Information Technology, Human Resources, Supply chain/Distribution Channels, Operations, AML, etc.).
    • Provides a focus on high-level, measurements of performance and forecasts.
      • Indicate areas that need improvement.
      • Identify areas that are well-managed and effective.
      • Trends illustrated.
    • Presents a static snapshot of data (daily, weekly, monthly, and quarterly) that does not constantly change.
  • Analytical
    • Provide more context to the data to include comparisons and history, with performance evaluators.
    • Analyze the data to drill down to underlying details.
  • Operational
    • Monitor and measure activities and events that constantly change, such as:
      • The number of opened/closed screening alerts and the age of the alerts.
      • The number of failed quality inspections per hour of manufactured parts.
      • Employees that have completed training vs. training not completed.
    • Receive alerts through the dashboard that may require attention and respond at a moment’s notice.
    • Track for open and closed issues.

Compliance dashboards can be as simple or detailed based on the amount of data you wish to display and the message you intend to communicate. Ensure the data supports the company’s strategic plan, the information is meaningful, and is useful to the intended audience.

Leveraging Compliance Management Software and Compliance Dashboards

Compliance touches all areas within your organization. Data plays an integral role to gauge how well your company is performing. The desired result is to monitor how effective your compliance program is in real-time. The compliance dashboard helps tell your story and the right technology can go a long way in making this vision a reality.

 

By Michael VolkovFebruary 11, 2021, published on GAN Integrity

Anti-Money Laundering Acronyms

Article by KYC360

Confused by all the abbreviations and acronyms used in the world of financial crime prevention and AML compliance? Let KYC360 help…

A

ABC – Anti-Bribery and Corruption

ACAMS – Association of Certified Anti-Money Laundering Specialists

ACPR – French Prudential Supervision and Resolution Authority

AMF – French Financial Markets Regulator

AML – Anti-Money Laundering

AML/CTF – Anti-Money Laundering/Counter-Terrorism Financing Rules

AMLD – Anti-Money Laundering Directive

APG – Asia Pacific Group on Money Laundering

APTs – Asset Protection Trusts

ARS – Alternative Remittance System

ATMs – Automatic Teller Machines

AUSTRAC – Australian Transaction Reports and Analysis Centre

 

B

BIS – Basel Committee on Banking Supervision

BMPE – Black Market Peso Exchange

BO – Beneficial Ownership

BSA – Bank Secrecy Act

 

C

CCPA – California Consumer Privacy Act

CDD – Customer Due Diligence

CFATF – Caribbean Financial Action Task Force

CFT – Combating the Financing of Terrorism

CRO – Chief Risk Officer

CRS – Common Reporting Standard

CSP – Corporate Service Provider

CTR – Currency Transaction Reporting

 

D

DOJ – Department of Justice (US)

DNFBP – Designated Non-Financial Businesses & Professions

 

E

EAG – Eurasian Group on Combating Money Laundering & Financing of Terrorism

EDD – Enhanced Due Diligence

EFT – Electronic Funds Transfer

EGFIU – Egmont Group of Financial Intelligence Units

eIDV – Electronic Identification & Verification

ESAAMLG – Eastern & Southern African Anti-Money Laundering Group

EU – European Union

 

F

FATCA – Foreign Account Tax Compliance Act

FATF – Financial Action Task Force

FCA – Financial Conduct Authority (UK)

FinCEN – Financial Crimes Enforcement Network

FSRB – Financial Action Task Force Style Regional Bodies

FIU – Financial Intelligence Unit

FX – Foreign Exchange Market

 

G

GAFILAT – Financial Action Task Force on Money Laundering in Latin America

GCC – Gulf Cooperation Council

GRC – Governance, Risk & Compliance

 

H

HMT – Her Majesty’s Treasury (UK)

HNWI – High Net Worth Individual

 

I

ID&V – Identification & Verification

IVTS – Informal Value Transfer System

IBC – International Business Company

IMF – International Monetary Fund

ISIL – Islamic State of Iraq & The Levant

ISIS – Islamic State of Iraq & al-Sham

 

J

JMLIT – Joint Money Laundering Intelligence Taskforce

JMLSG – Joint Money Laundering Steering Group (UK)

 

K

KY3P – Know Your Third Party

KYC – Know Your Customer

KYCC – Know Your Customer’s Customer

KYE – Know Your Employee

 

L

LC – Letter of Credit

 

M

MiFID – Markets in Financial Instruments Directive

MOU – Memorandum of Understanding

MLRO – Money Laundering Reporting Officer

MSB – Money Service Business

MENAFATF – Middle East & North Africa Financial Action Task Force

MONEYVAL – Committee of Experts on the Evaluation of Anti-Money Laundering Measures & the Financing of Terrorism

MLAT – Mutual Legal Assistance Treaty

 

N

NGO – Non-Governmental Organisation

NPO – Non-Profit Organisation

NRA – National Risk Assessment

 

O

P

PATRIOT – The Uniting and Strengthening America by Providing Appropriate Tools required to Intercept and Obstruct Terrorism Act 2001

PEP – Politically Exposed Person

PIC – Private Investment Company

PSP – Payment Services Provider

 

R

RBA – Risk-Based Approach

RCA – Relative or Close Associate

 

S

SAR – Suspicious Activity Report

SDN – Specially Designated National

SIE – Special Interest Entity

SIP – Special Interest Person

STR – Suspicious Transaction Report

 

T

TBML – Trade-Based Money Laundering

TCSP – Trust & Corporate Service Provider

TF – Terrorist Financing

TI – Transparency International

 

U

UBO – Ultimate Beneficial Owner

UN – United Nations