Uncategorised
The FATF and the virus - some 'best practice' for banks and regulators

The Financial Action Task Force, the world's anti-money-laundering/AML standard-setter, has published a paper in response to the unprecedented and rapidly evolving public health crisis that is sweeping the globe. Its findings on the subject are likely to evolve as the crisis deepens.
The FATF has found that the increase in crimes related to the virus, such as fraud, cyber-crime and the misdirection or exploitation of funds belonging to governments and funds that they want to send abroad to help foreigners, is creating new sources of proceeds for criminals.
How is the virus affecting criminals?
Steps that governments are taking to contain the infection (lockdowns, restrictions on transport etc) are having their effect on the earnings of criminals and changing their behaviour, forcing them to turn to fresh forms of illegal conduct. According to Europol, a close ally of the FATF's, governmental actions against the spread of the virus are changing the behaviour of criminals by causing:
- immobility;
- a spike in home teleworking;
- fears for the future among people which might make them vulnerable to hoaxes such as adapted versions of telephone frauds, supply scams and decontamination scams;
- a high demand for certain goods such as protective gear and pharmaceutical products; and
- a decrease in the supply of illegal drugs.
How is the virus affecting the authorities?
The pandemic is also hampering efforts by governments and banks to fight money launderers and terrorist financiers. Regulators cannot always regulate, supervise or co-operate with overseas regulators and most are placing "policy reform" (the FATF's phrase for changes to rules, which involve the gathering of information and consultation), while banks are finding it harder to send off the right suspicious transaction reports and international co-operation.
What are the criminals doing?
The FATF fears that (but displays an alarming lack of knowledge of whether) these problems are resulting in:
- criminals finding ways to bypass "know your customer" controls;
- more and more people misusing online financial services and virtual assets to move and conceal dirty money;
- the exploitation of "economic stimulus measures" (the collossal handouts that governments are giving to firms large and small, the self-employed and the working population) to conceal and launder dirty money;
- a stepping-up of the use of the unregulated financial sector - something that one might think counter-intuitive in an age when banks are struggling to keep their AML controls in good order;
- the misuse and misappropriation of something that the FATF calls "domestic and international financial aid and emergency funding";
- criminals and terrorists moving into new cash-intensive and highly 'liquid' lines of business in poor countries.
Europol gives one example of a typical fraud in the age of the virus. One of its investigations centred on the transfer of €6.6 million by a European company to a company in Singapore in order to purchase alcohol gels and FFP3/2 masks. The goods were never received.
What should governments do?
The FATF looks forward to governments all over the world taking steps to deal with these problems of which it is worryingly ill-informed. These include:
- "domestic co-ordination" (presumably this refers to governments doing things in their own countries) to assess the effect of the virus on AML/ATF risks and systems;
- more communication between the public and private sectors;
- encouragement for banks and other financial firms to make full use of a risk-based approach to knowing their customers; and
- support for electronic and digital payments.
In relation to KYC controls, the FATF approves of the following things that supervisors have done, or might do.
- Apply "simplified due diligence" measures to deal with the lower end of any money-laundering risks that firms have spotted. These include accounts created specifically to facilitate government payments to individuals or businesses and offering access to digital/contactless payment solutions.
- Say, in fresh guidelines, that customers may have legitimate reasons (perhaps being confined, under quarantine or ill) for not providing information for the purposes of "ongoing due diligence" or KYC refreshers and that the usual processes for dealing with these situations (such as an abrupt end to the relationship with the customer) may not be appropriate at this time.
- Allow reporting entities to accept recently-expired government-issued identifying documents until further notice in order to verify the identities of individuals (although still requiring them to determine the authenticity of each identification).
- Delay verification for new business relationships, perhaps by setting transaction limits. Reporting entities can accept digital copies of documents as a temporary measure, with money-laundering reporting officers (MLROs) being able to see the originals physically in due course.
As an additional way of encouraging the full use of a risk-based approach to KYC, the FATF is encouraging the use of "responsible digital identity and other responsible innovative solutions for identifying customers at onboarding and while conducting transactions." It recently told the intelligence community that non-face-to-face onboarding tehcniques and transactions conducted using trustworthy digital ID were not necessarily highly risky and could even pose a standard or even a low risk.
This happened in an acronym-laden paper that the FATF published in March entitled 'Digital Identity.'