Financial Crime Enforcement Archive
| Bank Secrecy Act | |
| Compliance Points | 2008 2007 |
| Articles | 2008 2007 |
| Q&A | 2008 2007 |
Identity Theft |
|
| Compliance Points | 2008 2007 |
| Articles | 2008 2007 |
| Q&A | 2008 |
Information/Data Security |
|
| Compliance Points | 2008 |
| Articles | No archived content available. |
| Q&A | No archived content available. |
Miscellaneous |
|
| Compliance Points | No archived content available. |
| Articles | 2007 |
| Q&A | No archived content available. |
Mortgage Fraud |
|
| Compliance Points | No archived content available. |
| Articles | No archived content available. |
| Q&A | No archived content available. |
Office of Foreign Assets Control (OFAC) |
|
| Compliance Points | 2008 |
| Articles | No archived content available. |
| Q&A | 2008 2007 |
Privacy |
|
| Compliance Points | 2008 2007 |
| Articles | 2007 |
| Q&A | 2007 |
Regulator Guidance/Enforcement Action |
|
| Compliance Points | 2008 2007 |
| Articles | 2008 2007 |
| Q&A | No archived content available. |
07/22/2008 - FinCEN Announces Plans to Retire Magnetic Media Filing Program
In a press release the Financial Crimes Enforcement Network (FinCEN) has announced its intention to retire the BSA Magnetic Media Filing Program. Current Magnetic Media filers must transition to BSA Electronic Filing (E-Filing) no later than December 31, 2008.
07/02/2008 - FinCEN Issues Ruling on Correspondent AccountsFinCEN has issued administrative ruling FIN-2008-R008 which clarifies: (1) whether a fully disclosed clearing agreement between a U.S. clearing firm and a foreign introducing firm is a correspondent account for the purposes of regulations implementing section 312 of the USA PATRIOT Act (the "correspondent account rule"); (2) whether a clearing firm is obligated to regard the fully disclosed accounts of a foreign introducing firm as its own accounts for the purposes of complying with the customer identification program regulations (the "CIP rule"); and (3) whether a clearing firm is expected to obligate the foreign introducing firm to comply with the obligations of the CIP rule, the correspondent account rule, and other U.S. anti-money laundering regulations respecting any accounts it may introduce to the clearing firm on a fully disclosed basis.
06/02/2008 - FinCEN Releases SAR Activity Review - By The NumbersFinCEN has issued the latest edition of The SAR Activity Review - By The Numbers. This report compiles the numerical data gathered from Suspicious Activity Reports (SARs) filed through the 2007 calendar year. While this report does not analyze specific trends, changes in the reporting of some suspicious activities are of note and should be of interest to all financial institutions.
05/19/2008 - FinCEN Publishes SAR Activity ReviewFinCEN has released Issue 13 of its SAR Activity Review, Trends, Tips and Issues. This edition reflects several important topics relevant to SAR filers and SAR users. Among other things, it highlights three recent FinCEN SAR analytical reports: Insurance Industry Suspicious Activity Reporting: An Assessment of Suspicious Activity Report Filings; Mortgage Loan Fraud: An Update of Trends based Upon an Analysis of Suspicious Activity Reports, and; Money Laundering in the Residential Real Estate Industry: An Assessment Based Upon Suspicious Activity Report Filing Analysis.
04/29/2008 - FinCEN and OCC Assess BSA Penalties Against NY Branch of the United Bank for AfricaFinCEN and the OCC have announced the assessment of concurrent civil money penalties, each $15 million, against the New York Branch of United Bank for Africa, PLC (“the Branch”) for violations of the Bank Secrecy Act (BSA). This enforcement action stems from an earlier Cease and Desist Order issued in January 2007. During a target examination conducted in November 2007, examiners determined that the Branch had failed to comply with the previous Order's terms and that significant BSA program deficiencies remained pervasive and systemic, including internal control and audit deficiencies, as well as the Branch's continued failure to identify and report suspicious activities.
04/24/2008 - FinCEN Issues proposed CTR Exemption RegulationsThe Financial Crimes Enforcement Network (FinCEN) is proposing to significantly simplify the current requirements for depository institutions to exempt their eligible customers from currency transaction reporting. FinCEN announced the proposal and request for comments in a Notice of Proposed Rulemaking submitted for publication in the Federal Register.
04/18/2008 - FinCEN Releases Foreign Corruption SAR GuidanceFinCEN has published guidance to help financial institutions to file more precise Suspicious Activity Reports in areas of foreign corruption.
04/10/2008 - FinCEN Announces Retirement of Magnetic Media ProgramIn preparation for the retirement of the Magnetic Media Program, FinCEN has announced that it is no longer accepting new applications to batch file BSA forms using tapes and/or diskettes. New users who wish to batch file their BSA forms should submit these files using the BSA E-Filing system.
04/04/2008 - FinCEN Releases Updated Mortgage Fraud ReportIn a press release, FinCEN has announced the release of an update its November 2006 mortgage loan fraud assessment. This assessment is based upon analysis of suspicious activity reports (SARs) provided by the financial industry. The previous study examined a statistical sample of SARs reporting mortgage fraud filed between April 1996 and March 2006. This updated study continues the analysis for reports filed through March 2007.
03/25/2008 - FinCEN Issues Money Laundering Threat GuidanceFinCEN has issued several advisories regarding money laundering threats in various countries. Financial institutions operating in the United States should take the risk arising from these threats into account and consider increased due diligence with respect to correspondent accounts maintained for foreign financial institutions.
02/12/2008 - FinCEN Releases Ninth Issue of SAR Activity Review - By The NumbersThe Financial Crimes Enforcement Network has issued the latest edition of the SAR Activity Review - By The Numbers. This report presents a compilation of numerical data gathered from Suspicious Activity Reports (SARs) filed through the first six months of the year. The suspicious activity characterization Mortgage Loan Fraud increased 35% from the corresponding six-month period in 2006. FinCEN is preparing a more comprehensive analysis of mortgage fraud to be released in the near future. In addition, Structuring/Money Laundering continues to be the predominant characterization of SARs filed by depository institutions, at 48%. However, Check Fraud (10.5%), Counterfeit Check (8.9%), Credit Card Fraud (4.8%), Mortgage Loan Fraud (3.9%), Check Kiting (3.3%), Identity Theft (2.4%) and other types of fraud are consistently represented. By The Numbers further categorizes this data by state and by year so that users can compare numbers which are relevant to their areas of interest.
02/05/2008 - FRB Issues BSA Written AgreementThe Federal Reserve Board has entered into a Written Agreement with Salin Bank and Trust located in Indianapolis, IN for violations of the Bank Secrecy Act. The FRB cited Salin Bank and Trust for deficiencies in their AML policies and procedures, customer due diligence practices, risk management processes, internal audit program and internal control environment.
02/01/2008 - FinCEN Issues Correspondent Account Rules GuidanceFinCEN has issued interpretative guidance FIN-2008-G001 to clarify how rules implementing section 312 of the USA PATRIOT Act (the correspondent account rule) apply to a covered financial institution presenting a negotiable instrument for payment to another financial institution.
01/30/2008 - California MSB Fined $15 Million AML PenaltyIn a press release, the Financial Crimes Enforcement Network (FinCEN) has announced the assessment of a civil money penalty in the amount of $12 million against Sigue Corporation and Sigue, LLC, a money services business headquartered in San Fernando, California, for violations of the Bank Secrecy Act (BSA). Sigue, without admitting or denying the allegations, consented to the civil money penalty. Concurrently, the Department of Justice announced today that Sigue has also entered into a deferred prosecution agreement on charges of failing to maintain an effective anti-money laundering program and will forfeit $15 million to the U.S. government. FinCEN’s penalty will be deemed satisfied by a portion of the $15 million payment to the Department of Justice.
FinCEN determined that Sigue failed to establish and implement an anti-money laundering program reasonably designed to ensure compliance with the Bank Secrecy Act which led, in turn, to a failure by management at Sigue to implement measures to respond to continued patterns of suspicious activity, with repeated common characteristics, at certain agent locations. According to FinCEN, Sigue’s failure to implement effective internal controls, training or independent testing to manage the risk of money laundering was "serious, longstanding and systemic".
While this enforcement action involves a MSB, there are significant BSA compliance lessons to be learned by all financial institutions.
01/29/2008 - FinCEN Issues New RulingFinCEN has issued administrative ruling FIN-2008-R001 to clarify the currency transaction report ("CTR") filing obligations when reporting transactions involving sole proprietorships.
10/29/2007 - FinCEN Releases SAR Activity Review
FinCEN has released Issue 12 of its SAR Activity Review – Trends, Tips & Issues. Issue 12 includes over 120 indexed law enforcement case examples.
10/12/2007 - FinCEN Addresses Common Errors in SAR FilingsFinCEN has issued a publication that explains the 10 most common errors in the filing of Suspicious Activity Reports (SARs) and ways to remedy the problems.
09/17/2007 - FinCEN Director Offers Compliance Tips in NAFCU SpeechIn a recent speech before the National Association of Federal Credit Unions, FinCEN Director James H. Freis, Jr. provides compliance information on the Bank Secrecy Act and an update on how the regulatory agencies use data from CTR and SAR filings.
08/24/2007 - FFIEC issues revised BSA/AML exam manualThe Federal Financial Institutions Examination Council (FFIEC) has released the revised Bank Secrecy Act/Anti-Money Laundering (BSA/AML) Examination Manual. According to the FFIEC's press release—link to Agencies Release Revised Bank Secrecy Act/Anti-Money Laundering Examination Manual (8/24/07), the revised manual reflects the ongoing commitment of the federal and state banking agencies and the Financial Crimes Enforcement Network (FinCEN) to provide current and consistent guidance on risk-based policies, procedures, and processes for banking organizations to comply with the BSA and safeguard operations from money laundering and terrorist financing. The 2007 version further clarifies supervisory expectations since the July 28, 2006, update.
08/09/2007 - FinCEN issues final section 312 ruleThe Financial Crimes Enforcement Network (FinCEN) has issued a final rule to implement the enhanced due diligence requirements for correspondent accounts for certain foreign banks set forth in section 312 of the PATRIOT Act. This final rule is effective September 10, 2007. On February 5, 2008, the enhanced due diligence provisions of this final rule will apply to correspondent accounts for certain foreign banks established on or after such date. On May 5, 2008, the enhanced due diligence provisions of this final rule will apply to correspondent accounts for certain foreign banks established before February 5, 2008.
According to a FinCEN press release the final rule clarifies the risk-based procedures that U.S. financial institutions should use in tailoring their enhanced due diligence to assess the risks of some foreign banking relationships.
08/07/2007 - American Express Fined $65 Million for BSA ViolationsAmerican Express Bank International (AEBI), based in Miami, has been fined a total of $65 million for violating the Bank Secrecy Act (BSA) by failing to maintain an effective anti-money laundering program, the Department of Justice (DOJ) announced.
The government will recommend the dismissal of the charge in 12 months, provided the bank fully implements significant anti-money laundering measures required by the agreement.
The Treasury Department's Financial Crimes Enforcement Network (FinCEN), which acted in conjunction with the DOJ, determined that AEBI repeatedly failed, over the course of several years, to adequately respond to certain supervisory findings with respect to the effectiveness of account monitoring controls to ensure compliance with the BSA.
FinCEN also found that AEBI failed to implement adequate internal controls, failed to conduct adequate independent testing, and failed to designate compliance personnel to ensure compliance with the BSA. According to FinCEN, AEBI operated in certain high-risk jurisdictions and business lines without adequate systems and controls to detect and report money laundering and other suspicious activity in a timely manner, as well as manage the risks of money laundering, including the potential for illicit drug trafficking-based transactions.
"Banks and other financial institutions must uphold their responsibility to safeguard financial markets from the illegal activities of international drug cartels and professional money launderers," said Assistant Attorney General Alice S. Fisher of the DOJ's Criminal Division. "An effective anti-money laundering program is critical to law enforcement efforts to detect and cut off the flow of drug money."
Karen P. Tandy, head of the Drug Enforcement Administration, said "American Express and all legitimate banking organizations must take every step possible to avoid becoming entangled in the web of international drug money laundering. Today the message is loud and clear: due diligence-don't take money without it."
For more information, click on the appropriate links:
- Federal Reserve Board
Order of Assessment of a Civil Money Penalty
- Financial Crimes Enforcement Network
Assessment of Civil Money Penalty
- U.S. Department of Justice deferred prosecution agreement (1.1 MB PDF)
Sarah Borchersen-Keto, ComplianceHeadquarters Washington Correspondent and Reporter for CCHGroup, Inc.
07/23/2007 - Regulatory Agencies Issue Statement on Enforcement of BSAThe federal financial regulatory agencies have issued a statement setting forth the agencies’ policy for enforcing specific anti-money laundering requirements of the Bank Secrecy Act (BSA). The purpose of the Interagency Statement on Enforcement of Bank Secrecy Act/Anti-Money Laundering Requirements is to provide greater consistency among the agencies in enforcement decisions in BSA matters and to offer insight into the considerations that form the basis of those decisions. Click on the appropriate regulator for a copy of the Statement: FDIC | FRB | OCC | OTS | NCUA
07/20/2007 - House Lawmakers Request More Information on BSA EffectivenessHouse Financial Services Committee chairman Barney Frank, D-Mass., and other House lawmakers have asked the Government Accountability Office (GAO) for a report on the mission and operational capacity of the Treasury Department's Financial Crimes Enforcement Network (FinCEN), focusing on the increasing volume of Bank Secrecy Act (BSA) filings, including Suspicious Activity Reports (SARs) and Currency Transaction Reports (CTRs).
GAO is already conducting a review of the filing and use of CTRs, but House members are now asking for a more comprehensive look at the current framework for achieving the goals of the BSA.
With regard to FinCEN, Frank and House Financial Services Committee ranking member Spencer Bachus, R-Ala., and Rep. Stephen Lynch, D-Mass., want to know how FinCEN's mission has evolved in response to statutory, technological, or other changes. Other areas of interest include whether there are any constraints on FinCEN's ability to achieve its mission arising from its cooperative arrangements with the Internal Revenue Service in maintaining BSA data.
Meanwhile, the House members are asking for more information on the factors that have contributed to the rise in the number of SARs filed in recent years, and to what extent current SAR forms are appropriate for law enforcement needs. Lawmakers also wish to know the impact of the BSA/AML Examination Manual on the examination process.
"Is there a more effective or efficient way to provide law enforcement with useful financial data and otherwise meet the goals of the Bank Secrecy Act, or if not, to significantly reduce the burden of providing the information," the lawmakers state in their letter to the GAO.
Sarah Borchersen-Keto, ComplianceHeadquarters Washington Correspondent and Reporter for CCHGroup, Inc.
06/25/2007 - FinCEN issues SAR Activity ReviewIn a press release FinCEN announced it has issued the latest edition of the SAR Activity Review - By The Numbers. This issue introduces a number of visual enhancements aimed at providing financial institutions with more information on the geographical dispersion of the Suspicious Activity Report filings. The enhancements unveiled in Issue 8 include representations of the numerical depository institution SAR data for individual states; charts and graphs highlighting SAR filing trends and patterns between April 1, 1996 and December 31, 2006 for each state and territory; and maps for calendar year 2006.
06/25/2007 - FinCEN issues statement on BSA initiativesFinCEN has issued a Fact Sheet that outlines steps it plans to take to increase the effectiveness and efficiency of the Bank Secrecy Act. Included in the fact statement is a discussion of risk based exams for smaller institutions, money service business exam materials and FinCEN efforts to provide feedback to the industry.
| 07/02/2008 | CTR exemption proposal takes risk based approach |
| 04/30/2008 | A new proposal from FinCEN streamlines the CTR exemption process |
| 10/11/2007 | In today’s market, AML compliance requires an automated system |
| 09/14/2007 | The 2007 annual update to the the BSA/AML Exam Manual is released. |
| 07/17/2008 | Do the CIP regs apply to requests for wire transfers? |
| 07/10/2008 | Do we need to retain records on dormant accounts for purposes of the CIP regs? |
| 07/03/2008 | How long do we have under the CIP regs before we must close an account for lack of verification of the identity of the person opening the account? |
| 06/19/2008 | Must we notify our board of directors when we file a Suspicious Activity Report? |
| 06/12/2008 | Under the CIP rules, whose identity must be verified when a new account is opened for a social club, bowling league, or similar group that is not a legal person? |
| 05/22/2008 | When a customer starts asking questions about how much they can deposit without any paperwork, what do we tell them? Can we refer them to any consumer resources? |
| 05/15/2008 | Are we required to apply our customer identification program to entities which are publicly traded or to wholly owned subsidiaries of a U.S. publicly traded company? If so, would documentary evidence such as a corporate resolution suffice for verification purposes? |
| 05/08/2008 | We live in a rural community where many of our customers have PO Boxes. Sometimes physical addresses are not present. Are we required to collect a physical address for CIP purposes? |
| 05/01/2008 | Who should be notified if a SAR is filed on an insider? |
| 04/24/2008 | If a check payable to a third party is endorsed over to our customer, and our customer deposits it, does CIP require us to record and verify identity information regarding the third party payee? |
| 04/17/2008 | Do withdrawals of cash and deposits of cash need to be aggregated to determine whether a currency transaction report (CTR) should be filed? |
| 04/10/2008 | If a non-customer furnishes an incorrect social security number when cashing a check for more than $10,000 and ignores mailed requests to give us the correct number, is there a resource we can use to get the correct number? |
| 04/03/2008 | Who is considered a “customer” for purposes of the customer identification program regulation—co-signers, safe deposit box signers, account beneficiaries? |
| 03/27/2008 | What is the time frame for filing a Suspicious Activity Report? |
| 03/13/2008 | When using a driver’s license to verify the identity of a new account opener, do we have to search any databases to confirm the validity of the driver’s license? |
| 02/14/2008 | Our IRA accounts roll to an IRA beneficary accounts automatically after we receive death certificates. For purposes of CIP, is the IRA Beneficiary considered a customer at the time we "set" up the account for them or do they become our customer when they actually contact us to withdraw the funds? |
| 02/07/2008 | When a trustee opens a trust account, whose identity must be verified? |
| 01/31/2008 | We recently discovered a situation where we should have filed a CTR but didn’t. The date for filing has passed, should we still submit a CTR even though it will be late? |
| 01/24/2008 | What is required under CIP for opening an account for a legal entity such as a corporation when it comes to the individual signers? Do we need to collect social security numbers, date of birth, and driver's licenses, home address, etc. on each signer? |
| 01/17/2008 | When completing the currency transaction report (CTR), are we required to list the social security number of the employee who is conducting the deposit transaction on behalf of our customer? |
| 01/10/2008 | I attended a BSA/AML Seminar in April of 2007 and it was said that a NEW SAR form was to be issued by the end of the year. Has this happened, or has it been delayed? |
| 01/03/2008 | Does the responsibility to file a SAR turn on whether or not our institution has incurred a financial loss? |
| 12/27/2007 | Are we required to obtain personal information on authorized signers for a publicly held corporation? |
| 12/13/2007 | I have been trying to create a list of identification documents that could be used for accounts opened for a minor customer. State ID, student/school ID, birth certificate, social security card--can you think of any others that would be acceptable? |
| 12/06/2007 | Does the customer identification information that is collected need to be notarized if the customer is not face-to-face with a bank representative? |
| 11/29/2007 | How many forms of ID are required at account opening? |
| 11/15/2007 | Are we required to apply our CIP to government agencies such as the USDA? |
| 11/12/2007 | Can we open a deposit account without a taxpayer identification number(social security number) as long as it is non-interest bearing and will not require year end 1099 reporting to the IRS? |
| 11/08/2007 | Is a CTR required when a cashier's check over $10,000 is purchased by debiting an account and providing the check to a third party for the purchase of a vehicle? |
| 11/01/2007 | When filing a SAR, we are required to maintain supporting documentation for the filing and provide that to FinCEN or other law enforcement upon request. What constitutes “supporting documentation”? |
| 10/18/2007 | Does our credit union need to comply with BSA provisions if we do not handle any cash? |
| 10/11/2007 | We have a customer who deposits $6,000 in cash to his personal account and later his secretary deposits $5,000 cash in his sole proprietorship account. Should a CTR be filed? |
| 10/04/2007 | In regards to CIP compliance, do we need to obtain identification information on a beneficiary on an account? |
| 09/27/2007 | If a member brings in a check for $15000, deposits $3000 into their account and receives the remaining $12000 cash back, what should be checked on the CTR form? |
| 09/13/2007 | I am responsible for filling out the Currency Transaction Reports (CTR's) for our bank. We have a courier service that goes out and picks up our business deposits and brings them to the office for deposit. There are a couple of businesses that require a CTR to be filled out daily. When filling out the CTR form, do I need to put our couriers name for the person conducting the transaction, or someone from the business? I am confused on this from what I have heard from other financial institutions in our area. |
| 09/06/2007 | Can we something other than a driver's license to verify identify—say a credit card? |
| 08/30/2007 | As far as CIP goes, who all do you have to obtain information on? We are wondering if you have to get information on every signer on an account. |
| 08/23/2007 | For an Entity with a DBA, do we need to complete section A for both the Entity and the DBA's physical addresses on the currency transaction report? |
| 08/09/2007 | Our customer, a sole proprietor gas station owner, has recently formed an LLC and changed the name of his company from his name to the name of the LLC.-same EIN. He has had an exemption for about 3 years. Do we need to refile his exemption papers to reflect the name change? |
| 08/02/2007 | Is it a conflict of interest if the BSA Compliance Officer is the Director of Internal Audit and supervisor of the Internal Auditor? |
| 07/26/2007 | What type of taxpayer identification number should be obtained for a nonresident alien? |
| 07/19/2007 | What are the differences between the Bank Secrecy Act and the Money Laundering Laws? |
| 07/12/2007 | Is law enforcement prohibited from disclosing the filing of an SAR as the basis for their investigation? We recently were informed by a customer on whom we had filed SARs that the IRS informed him that the basis for their investigation was that "his bank filed an SAR". |
| 07/05/2007 | Is a tax preparer that cashes its own tax refund checks over 1,000.00, an MSB? These are not payroll checks. |
| 06/28/2007 | Has the SAR form been revised and if so when do we need to start using the new form? |
02/18/2008 - OFAC Issues Guidance
OFAC has issued guidance on entities owned by persons whose property and interests in property are blocked.
| 05/29/2008 | As an originator bank on a wire transfer are we required to obtain the final beneficiary’s place of domicile for OFAC purposes? |
| 03/20/2008 | Can we open an account for a person on OFAC’s SDN List? |
| 03/06/2008 | Do we need to check the OFAC Specially Designated Nationals and Blocked Entities list before cashing a check for a non-customer that is drawn on our institution? |
| 02/28/2008 | Are we required to pull an OFAC on all parties to a US Savings Bond - the purchaser, the owner, the co-owner and/or beneficiary? |
| 10/25/2007 | Is OFAC compliance tied to any dollar limits? |
01/14/2008 - FTC Staff Seeks Comments on Credit Freezes
In a press release, the Federal Trade Commission staff states that it is seeking comments on the impact and effectiveness of credit freezes as part of a multi-pronged approach to combat identity theft. Comments must be received on or before February 25, 2008.
12/18/2007 - Proposed Section 312 Regulations Issued
The federal banking regulators have jointly issued a notice of proposed rulemaking pursuant to section 312 of the FACT regarding the accuracy and integrity of information about consumers for use by entities that furnish such information to a consumer reporting agency. The agencies also are proposing regulations that would require each such entity to establish reasonable policies and procedures for implementing the guidelines.
10/31/2007 - Regulatory Agencies Issue Final Affiliate Marketing RulesThe regulatory agencies have issued final rules on affiliate marketing under section 214 of the FACT Act. The final rules generally prohibit a financial institution from using certain information received from an affiliate to make a solicitation to a consumer unless the consumer is given notice and a reasonable opportunity to opt out of such solicitations, and the consumer does not opt out. The rules are effective January 1, 2008, with compliance mandatory by October 1, 2008.
06/25/2007 - Social Security Numbers Still Vulnerable to Identity Thieves, GAO WarnsIdentity thieves may still be able to reconstruct full social security numbers (SSNs) by combining different truncated versions of the SSN available from public and private sources, a new report from the Government Accountability Office (GAO) warns.
"Truncation does not provide complete protection against identity theft," the report concludes, adding that Congress may wish to further improve SSN protection by enacting truncation standards or assigning an agency to do so.
The report also noted that the Internal Revenue Service and Department of Justice are the only federal agencies that commonly provide records containing SSNs to state and local public record keepers, and in recent years both have taken steps to truncate or remove SSNs in those records. But despite these steps, "full SSNs remain in the millions of lien records provided to public record keepers before the agencies implemented these changes," the GAO said. Increased access to these records through bulk sales to private companies and Internet access also creates the potential for identity theft, the report adds.
At a House Ways and Means subcommittee hearing June 21, Sen. Charles Schumer, D-N.Y., who had requested the GAO report, testified that SSNs provide "the golden key that opens all doors," adding that "we need public access that doesn't expose people to identity theft." Schumer said he is proposing legislation that would require the Social Security Administration (SSA) to determine which method of SSN truncation to use – either hiding the first five digits or the last four. Schumer said his bill would also require that state and local record-keepers do not post complete SSNs on the Internet.
SSA Inspector General Patrick O'Carroll told the hearing that the agency has very few mechanisms to curb the improper, or unnecessary, use of a SSN. "We read about these occurrences in the newspaper every day, but we’ve yet to develop meaningful ways to stem the tide," he said.
O’Carroll told members that the SSA needs more help. "We believe the time has come to consider legislation limiting the collection and use of SSNs to those purposes mandated by federal law, or otherwise reducing the use of SSNs as convenient identifiers."
Sarah Borchersen-Keto, ComplianceHeadquarters Washington Correspondent and Reporter for CCHGroup, Inc.
| 12/20/2007 | Our bank would like to implement a customer referral program whereby we would give an existing customer a gift card if they refer a new customer who opens a deposit account with us. Do privacy laws preclude us from mentioning the new customer’s name in the thank you card to the referring customer? |
06/02/2008 - FinCEN Releases SAR Activity Review - By The Numbers
FinCEN has issued the latest edition of The SAR Activity Review - By The Numbers. This report compiles the numerical data gathered from Suspicious Activity Reports (SARs) filed through the 2007 calendar year. While this report does not analyze specific trends, changes in the reporting of some suspicious activities are of note and should be of interest to all financial institutions.
05/19/2008 - FinCEN Publishes SAR Activity ReviewFinCEN has released Issue 13 of its SAR Activity Review, Trends, Tips and Issues. This edition reflects several important topics relevant to SAR filers and SAR users. Among other things, it highlights three recent FinCEN SAR analytical reports: Insurance Industry Suspicious Activity Reporting: An Assessment of Suspicious Activity Report Filings; Mortgage Loan Fraud: An Update of Trends based Upon an Analysis of Suspicious Activity Reports, and; Money Laundering in the Residential Real Estate Industry: An Assessment Based Upon Suspicious Activity Report Filing Analysis.
04/29/2008 - FinCEN and OCC Assess BSA Penalties Against NY Branch of the United Bank for AfricaFinCEN and the OCC have announced the assessment of concurrent civil money penalties, each $15 million, against the New York Branch of United Bank for Africa, PLC (“the Branch”) for violations of the Bank Secrecy Act (BSA). This enforcement action stems from an earlier Cease and Desist Order issued in January 2007. During a target examination conducted in November 2007, examiners determined that the Branch had failed to comply with the previous Order's terms and that significant BSA program deficiencies remained pervasive and systemic, including internal control and audit deficiencies, as well as the Branch's continued failure to identify and report suspicious activities.
04/28/2008 - Wachovia Agrees to 143.8 Million Dollar Settlement for Telemarketing FraudThe OCC has entered into a settlement agreement with Wachovia Bank, National Association that directs the bank to make restitution to consumers harmed by its relationships with several telemarketers and third party payment processors.
According to the OCC’s press release, the bank has agreed to make restitution to all consumers harmed who have not been previously reimbursed and who file claims under the processes set out in the settlement. The estimated maximum amount of potential claims is $125 million; actual claims may result in restitution in a lesser amount. In addition to the restitution payments, the bank will also be required to contribute approximately $8.9 million to consumer education programs directed at the elderly, and to pay a $10 million civil money penalty to the U.S. Treasury. In reaching the settlement, the OCC concluded that the bank engaged in unsafe or unsound practices during the course of its relationships with the payment processors and telemarketers, and unfair practices within the meaning of the Federal Trade Commission Act.
04/18/2008 - FinCEN Releases Foreign Corruption SAR GuidanceFinCEN has published guidance to help financial institutions to file more precise Suspicious Activity Reports in areas of foreign corruption.
04/10/2008 - FinCEN Announces Retirement of Magnetic Media ProgramIn preparation for the retirement of the Magnetic Media Program, FinCEN has announced that it is no longer accepting new applications to batch file BSA forms using tapes and/or diskettes. New users who wish to batch file their BSA forms should submit these files using the BSA E-Filing system.
04/04/2008 - FinCEN Releases Updated Mortgage Fraud ReportIn a press release, FinCEN has announced the release of an update its November 2006 mortgage loan fraud assessment. This assessment is based upon analysis of suspicious activity reports (SARs) provided by the financial industry. The previous study examined a statistical sample of SARs reporting mortgage fraud filed between April 1996 and March 2006. This updated study continues the analysis for reports filed through March 2007.
04/03/2008 - Treasury Releases Blueprint for Stronger Regulatory StructureThe U.S. Treasury Department has released its Blueprint for an improved financial regulatory structure. This structure is designed to strengthen consumer protections, improve tools for market stability and enhance financial innovation. Treasury's Blueprint for a Modernized Financial Regulatory Structure also presents a series of short-, intermediate- and long-term recommendations for reform of the U.S. regulatory structure.
03/25/2008 - FinCEN Issues Money Laundering Threat GuidanceFinCEN has issued several advisories regarding money laundering threats in various countries. Financial institutions operating in the United States should take the risk arising from these threats into account and consider increased due diligence with respect to correspondent accounts maintained for foreign financial institutions.
02/12/2008 - FinCEN Releases Ninth Issue of SAR Activity Review - By The NumbersThe Financial Crimes Enforcement Network has issued the latest edition of the SAR Activity Review - By The Numbers. This report presents a compilation of numerical data gathered from Suspicious Activity Reports (SARs) filed through the first six months of the year. The suspicious activity characterization Mortgage Loan Fraud increased 35% from the corresponding six-month period in 2006. FinCEN is preparing a more comprehensive analysis of mortgage fraud to be released in the near future. In addition, Structuring/Money Laundering continues to be the predominant characterization of SARs filed by depository institutions, at 48%. However, Check Fraud (10.5%), Counterfeit Check (8.9%), Credit Card Fraud (4.8%), Mortgage Loan Fraud (3.9%), Check Kiting (3.3%), Identity Theft (2.4%) and other types of fraud are consistently represented. By The Numbers further categorizes this data by state and by year so that users can compare numbers which are relevant to their areas of interest.
02/05/2008 - FRB Issues BSA Written AgreementThe Federal Reserve Board has entered into a Written Agreement with Salin Bank and Trust located in Indianapolis, IN for violations of the Bank Secrecy Act. The FRB cited Salin Bank and Trust for deficiencies in their AML policies and procedures, customer due diligence practices, risk management processes, internal audit program and internal control environment.
02/01/2008 - FinCEN Issues Correspondent Account Rules GuidanceFinCEN has issued interpretative guidance FIN-2008-G001 to clarify how rules implementing section 312 of the USA PATRIOT Act (the correspondent account rule) apply to a covered financial institution presenting a negotiable instrument for payment to another financial institution.
01/30/2008 - California MSB Fined $15 Million AML PenaltyIn a press release, the Financial Crimes Enforcement Network (FinCEN) has announced the assessment of a civil money penalty in the amount of $12 million against Sigue Corporation and Sigue, LLC, a money services business headquartered in San Fernando, California, for violations of the Bank Secrecy Act (BSA). Sigue, without admitting or denying the allegations, consented to the civil money penalty. Concurrently, the Department of Justice announced today that Sigue has also entered into a deferred prosecution agreement on charges of failing to maintain an effective anti-money laundering program and will forfeit $15 million to the U.S. government. FinCEN’s penalty will be deemed satisfied by a portion of the $15 million payment to the Department of Justice.
FinCEN determined that Sigue failed to establish and implement an anti-money laundering program reasonably designed to ensure compliance with the Bank Secrecy Act which led, in turn, to a failure by management at Sigue to implement measures to respond to continued patterns of suspicious activity, with repeated common characteristics, at certain agent locations. According to FinCEN, Sigue’s failure to implement effective internal controls, training or independent testing to manage the risk of money laundering was "serious, longstanding and systemic".
While this enforcement action involves a MSB, there are significant BSA compliance lessons to be learned by all financial institutions.
10/24/2007 - FinCEN Director Addresses Money Laundering Conference
In a speech before the ABA/ABA Money Laundering Enforcement Conference, FinCEN Director James H. Freis Jr. made several comments regarding compliance with the Bank Secrecy Act. Among other things, Freis noted that the regulatory agencies are taking a risk based approach to examinations and are outreaching to money services businesses. In addition, Fries commented on the use of BSA data and new FinCEN developments.
10/18/2007 - FinCEN Warns of Iranian Money Laundering ThreatFinCEN has issued advisory FIN-2007-A001 which offers guidance to U.S. financial institutions so that they may guard against threats of illicit Iranian activity related to money laundering, terrorist financing and weapons of mass destruction proliferation financing.
09/19/2007 - Regulators Assess BSA PenaltiesFinCEN and the OCC have announced the assessment of concurrent civil money penalties, each $10 million, against Union Bank of California, N.A. of San Francisco, California, for violations of the Bank Secrecy Act. Union Bank also consented to issuance of a Cease and Desist Order by the OCC.
09/17/2007 - FinCEN Director Offers Compliance Tips in NAFCU SpeechIn a recent speech before the National Association of Federal Credit Unions, FinCEN Director James H. Freis, Jr. provides compliance information on the Bank Secrecy Act and an update on how the regulatory agencies use data from CTR and SAR filings.
| 07/09/2008 | New overdraft services regs may require opt-out |
| 04/30/2008 | A new proposal from FinCEN streamlines the CTR exemption process |
| 09/14/2007 | The 2007 annual update to the the BSA/AML Exam Manual is released. |
07/10/2008 - FTC Reminds Institutions of Red Flag Regulatory Requirements
The FTC has updated its website with a reminder that all financial institutions are covered by the Red Flags Rules. According to Lydia Parnes, Director of the Bureau of Consumer Protection at the Federal Trade Commission, "We encourage all organizations that have ongoing accounts or relationships with consumers to keep an eye out for red flags that signal identity theft.”
Check out the Red Flag Resource Center for information and solutions on implementing an ID theft prevention program.
11/02/2007 - Agencies Issue Final Rules on Identity Theft Red Flags
The federal financial institution regulatory agencies have sent to the Federal Register for publication final rules on identity theft “red flags” and address discrepancies. The final rules implement sections 114 and 315 of the Fair and Accurate Credit Transactions Act of 2003.
10/04/2007 - FTC Hosts Social Security Number WorkshopIn a press release, the FTC announced it will host a public workshop, “Security in Numbers: SSNs and ID Theft,” to explore the uses of Social Security numbers in the private sector and the role of SSNs in identity theft. The workshop will be held on December 10 and 11, 2007 and will provide a forum for public-sector, private-sector, and consumer representatives to discuss the various uses of SSNs by the private sector, the necessity of those uses, alternatives available, the challenges faced by the private sector in moving away from using SSNs, and how SSNs are obtained and used by identity thieves.
09/20/2007 - FTC Testifies on Identity Theft InitiativesIn a press release addressing a speech made before the Maryland Task Force on Identity Theft, the FTC discusses identity theft issues and ways to combat the problem.
| 06/06/2008 | Red Flag ID Theft Programs can leverage off existing systems. |
| 05/06/2008 | As of Nov. 1 , 2008 auto dealers must comply with red flag rules |
| 12/06/2007 | Security freezes used to thwart ID theft |
| 11/28/2007 | Final reg implementing the FACT Act ID theft program rules issued |
| 06/26/2008 | Do we need to include our business accounts under the new ID theft red flag provisions? |
| 04/12/2008 | Is a bank required to verify signatures on large checks. For example, greater than $5,000? |
| 02/21/2008 | I understand that the Red Flag regulations contain a training element. What exactly is required? |
05/13/2008 - OCC Issues Application Security Bulletin
The OCC has released Bulletin 2008-16 which reminds banks and their technology service providers that application security is an important component of their information security program.
04/28/2008 - Wachovia Agrees to 143.8 Million Dollar Settlement for Telemarketing FraudThe OCC has entered into a settlement agreement with Wachovia Bank, National Association that directs the bank to make restitution to consumers harmed by its relationships with several telemarketers and third party payment processors.
According to the OCC’s press release, the bank has agreed to make restitution to all consumers harmed who have not been previously reimbursed and who file claims under the processes set out in the settlement. The estimated maximum amount of potential claims is $125 million; actual claims may result in restitution in a lesser amount. In addition to the restitution payments, the bank will also be required to contribute approximately $8.9 million to consumer education programs directed at the elderly, and to pay a $10 million civil money penalty to the U.S. Treasury. In reaching the settlement, the OCC concluded that the bank engaged in unsafe or unsound practices during the course of its relationships with the payment processors and telemarketers, and unfair practices within the meaning of the Federal Trade Commission Act.
03/21/2008 - FFIEC Issues Business Continuity Planning GuidanceThe Federal Financial Institutions Examination Council (FFIEC) has issued updated guidance for examiners, financial institutions, and technology service providers to identify business continuity risks and evaluate controls and risk management practices for effective business continuity planning. The guidance is an update to the “Business Continuity Planning Booklet,” which was issued in March 2003.
