Categories
Regulatory Ramblings

Regulatory Ramblings: Episode 52 – AI vs. Financial Scams: Why Banks Aren’t Doing Enough in the Fight Against Sextortion and Fraud with Oonagh van den Berg

A lawyer by training and an entrepreneur by vocation, Oonagh van den Berg founded the compliance consultancy and training firm RAW Compliance. She is a highly regarded international compliance professional with two decades of experience in London, Hong Kong, and Singapore.

Growing up in Northern Ireland against the violent backdrop of “The Troubles” during the tumultuous 1980s, she’s a veteran at weathering the sharp, harsh curveballs that life sometimes throws us. She went on to become a lawyer, compliance officer, recruiter, and later, a consultant and educator despite the hardships she encountered as a young girl, such as the Irish Republican Army shooting her police officer father.

This episode of Regulatory Ramblings is topical, timely, and deeply poignant. Oonagh talks to our host, Ajay Shamdasani, about the need for artificial intelligence (AI), mainly by international banking and financial institutions and multinational corporations more generally, to combat financial scams, deep fakes, and sextortion:

It is an issue that hit close to home earlier this summer as Oonagh while working to raise awareness of the matter, learned that her 13-year-old daughter and a few of her school friends became the victims of blackmail because of some innocent photos shared on Snapchat. Raising awareness, Oonagh says, can help prevent others from experiencing the same thing. She shares that RAW Compliance has been working on important awareness videos about social media scams and sextortion targeting pre-teens, teenagers, and young adults.

A recent poll by Europol revealed that cybercriminals are increasingly exploiting new technologies to commit complex and dangerous crimes – and, in many instances, using AI to commit vile acts of violation against the unwitting. For example, malicious large language models (LLM) are used to develop scripts, phishing emails, and online fraud advertisements and to overcome language barriers that allow sex offenders to groom victims in any language and impersonate peers.

Then there is the threat of generative AI because AI-altered and fully artificial child sexual abuse materials are now so realistic and used in sextortion cases that it has resulted in the blackmail and subsequent suicide of some victims.

Additionally, AI deepfakes are becoming more sophisticated and accessible. Such technologies make it vexatious for law enforcement to identify victims and find the appropriate legal framework to charge criminals. Yet, law enforcement has grown more tech-savvy and started using more advanced detection tools. It is still an uphill battle, however, as the authorities are all too often playing catch-up.

Oonagh also discusses her firm’s groundbreaking collaboration to support victims of financial scams and help recover their assets. Together with Nick Leeson, the infamous former 90s-era Barrings trader, the pair combine their expertise to make a tangible difference in the fight against financial fraud. (Links below)

Oonagh says it matters because “Financial scams leave lasting impacts and destroy lives, with little to no help available. Recovery can feel overwhelming. By joining forces, we aim to turn the tide and provide the help and guidance victims need to reclaim their financial futures.”

In her view, banks are not doing enough to help victims of financial scams, mainly due to shortcomings in their technology and fraud detection systems. In the UK, for example, financial crime is a growing issue, with over 3.5 million people affected by scams annually, leading to losses exceeding £1.2 billion.

The problem is equally severe in continental Europe, with countries like Ireland and the Netherlands reporting significant increases in scam-related incidents, resulting in hundreds of millions of euros in losses.

Similarly, in the US, financial scams cost consumers over $3.3 billion annually.

The conversation continues with Oonagh fleshing out how financial institutions can navigate evolving regulations and effectively monitor child sexual abuse materials (CSAM). She also discusses the challenges and strategies for investigating CSAM and human trafficking in traditional and decentralized financial systems. She emphasizes the hurdles of global technology in combating such crimes and estimates the value of suspected CSAM transactions using fiat versus cryptocurrency.

The discussion concludes with Oonagh pointing out that the financial sector has often shirked its responsibility when it comes to anti-money laundering, ‘pig butchering,” human trafficking, and financial scams. The sad truth is that many victims will never truly be made whole.

She stresses that when it comes to law enforcement and investigators, the biggest takeaway for traditional financial crime compliance professionals and blockchain investigators is understanding suspicious red flags and other typologies supporting investigations.

We are bringing you the Regulatory Ramblings podcasts with assistance from the HKU Faculty of Law, the University of Hong Kong’s Reg/Tech Lab, HKU-SCF Fintech Academy, Asia Global Institute, and HKU-edX Professional Certificate in Fintech.

Useful links in this episode:

  • Connect or follow Oonagh van den Berg on LinkedIn

  • RAW Compliance: Webpage

  • Oonagh van den Berg with Nick Leeson, through FundsRehab.com, offers support and solutions for those impacted by financial scams, guiding them through asset recovery. Assistance is available for those in need. FundsRehab.com is dedicated to combating financial fraud and driving change, with updates on their efforts on the website.

You might also be interested in:

Connect with RR Podcast at:

LinkedIn: https://hk.linkedin.com/company/hkufintech 
Facebook: https://www.facebook.com/hkufintech.fb/
Instagram: https://www.instagram.com/hkufintech/ 
Twitter: https://twitter.com/HKUFinTech 
Threads: https://www.threads.net/@hkufintech
Website: https://www.hkufintech.com/regulatoryramblings 

Connect with the Compliance Podcast Network at:

LinkedIn: https://www.linkedin.com/company/compliance-podcast-network/
Facebook: https://www.facebook.com/compliancepodcastnetwork/
YouTube: https://www.youtube.com/@CompliancePodcastNetwork
Twitter: https://twitter.com/tfoxlaw
Instagram: https://www.instagram.com/voiceofcompliance/
Website: https://compliancepodcastnetwork.net/

Categories
Blog

Bank of America’s Corporate Culture Crisis: Part 5 – A Case Study for Compliance

Compliance professionals constantly seek to understand how systemic issues within corporate hierarchies can lead to severe consequences. The recent revelations about Bank of America’s (BoA) persistent workplace culture problems are a powerful reminder of compliance’s critical role in safeguarding employees and the organization.

This week, I have explored the BoA failure around workplace culture from various perspectives articulated by the Everything Compliance gang, including Karen Woody, Jonathan Armstrong, Matt Kelly, Karen Moore, and Jonathan Marks. This exploration included the failure of internal controls, failures by the Board and senior management, culture failures around highly driven, self-selecting employees, and the cultural miasma that is BoA from a perspective from across the pond. You can check out the full Everything Compliance episode here. We conclude our series with a summary of lessons learned for compliance and how compliance can use those lessons going forward.

The scandal at BoA involving the excessive hours worked by junior employees highlights a profound crisis in corporate culture that has significant implications for compliance professionals. Despite previous promises of reform following similar incidents, BoA’s failure to address these issues effectively reveals systemic problems that transcend mere policy implementation. The tragedy of junior banker Leo Lukenas, who died after working over 100 hours a week for multiple weeks in a row, underscores the urgent need for stronger internal controls, better communication between management levels, and a culture that genuinely prioritizes employee well-being.

This situation at BoA serves as a critical case study for compliance professionals, illustrating the dangers of a disconnect between senior management’s intentions and the actions of middle management. While senior executives may set policies to limit overwork, middle managers often circumvent these rules, perpetuating a toxic work environment. BoA’s manual control system’s failure, ineffective internal audits, and HR oversight further exacerbate the problem. Compliance professionals must ensure that internal controls are implemented, actively monitored, and enforced to prevent similar issues in their organizations.

A key lesson from the BoA crisis is the importance of addressing the role of incentive structures. In high-stakes environments like investment banking, where bonuses and career advancement are tied to deal closures, there is a significant risk of overwork becoming normalized. Compliance officers must advocate for realigning incentives to balance business goals with ethical standards and employee well-being. This involves addressing the symptoms of such crises and tackling the root causes, such as toxic corporate culture and misaligned incentives.

The BoA scandal highlights the critical role of internal controls in maintaining a healthy and sustainable corporate culture. Relying on self-reporting as a key control mechanism in this high-risk environment proved ineffective, as employees were pressured to underreport their hours. Compliance professionals must recognize that self-reporting should be supplemented with independent verification methods, such as automated time tracking and regular audits, to ensure accurate data collected and controls are effective.

A holistic approach to risk management and compliance must be considered. Internal controls must be integrated into a broader framework, including solid ethical leadership, ongoing employee education, and clear channels for reporting concerns. The failure of BoA’s control environment, monitoring, and remediation efforts allowed a culture of overwork to persist, ultimately leading to repeated tragedies. For compliance professionals, this underscores the need for continuous improvement and active management of internal controls.

The role of the board of directors in overseeing corporate culture is crucial. The BoA crisis demonstrates that board members must go beyond surface-level management reports and engage directly with employees to understand workplace challenges. A proactive approach, including regular reports on employee well-being metrics and internal audits focused on workplace culture, can help prevent such crises. Moreover, creating a culture where employees feel safe to voice concerns is essential for identifying and addressing risks before they escalate.

The Bank of America scandal is a stark reminder of the human cost of a toxic work culture and the vital role that compliance professionals play in safeguarding both employees and organizations. The lessons from this tragedy should guide efforts to create healthier, more sustainable work environments. Compliance is not just about preventing legal and regulatory risks but also about fostering a corporate culture that values integrity, transparency, and the well-being of all employees. By aligning business metrics with these values, companies can achieve sustainable success that benefits their bottom line and people.

Categories
Compliance Tip of the Day

Compliance Tip of the Day: Using Your Supply Chain to Enhance Compliance Communication

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements.

Whether you’re a seasoned compliance professional or just starting your journey, our aim is to provide you with bite-sized, actionable tips to help you stay on top of your compliance game.

Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law.

Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

In this episode, we explore how external stakeholders, such as your supply chain, can enhance your compliance communications.

For more information on the Ethico ROI Calculator and a free White Paper on the ROI of Compliance, click here.

To check out The Compliance Handbook, 5th edition, click here.

Categories
Business Integrity Innovations

Business Integrity Innovations – West Meets Africa: Business Integrity and Leadership with Patrick Obath

Business Integrity Innovations is brought to you by the Center for International Private Enterprise (CIPE) and the Compliance Podcast Network (CPN). This podcast is inspired by Ethics 1st, a multi-stakeholder initiative led by CIPE that creates pathways for accountable and sustainable investment in Africa. Companies can use Ethics 1st to standardize their business practices, develop sound corporate governance systems, and demonstrate their commitment to compliance and business ethics.

In this episode, host Tom Fox interviews Patrick Obath, a former CEO of Shell East Africa, who is now active in the business community as a coach and leader. Obath discusses his extensive career, his role in advocating for business associations in Kenya through the Kenya Private Sector Alliance (KEPSA), and strategies to improve corporate governance and financing for businesses. He emphasizes the importance of ethical behavior, combating the perception of corruption, and the necessity of robust compliance frameworks. The conversation also touches on the significance of leadership development, leveraging experiences from multinational corporations, and future challenges for business integrity in Kenya and other African markets.

Key Highlights: 

  • Business Advocacy and Corporate Governance in Kenya
  • The Role of Business Integrity
  • Compliance Standards and Anti-Bribery Efforts
  • Leadership Development and Training
  • Future Challenges and Opportunities in Business Integrity

Resources:

CIPE

KEPSA

Patrick Obath on Linkedin

Categories
Daily Compliance News

Daily Compliance News: August 29, 2024 – The Getting Ahead at Work Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen to the Daily Compliance News. All from the Compliance Podcast Network.

Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

In today’s edition of Daily Compliance News:

  • GenZ guide for getting ahead at work. (WaPo)
  • A whistleblower lawyer who used fake AI cases says no harm, no foul. (Reuters)
  • Criminal convictions in Switzerland for 1MDB scandal. (Reuters)
  • Treasury loosens AML requirements for financial advisors, real estate agents. (WSJ)

For more information on the Ethico ROI Calculator and a free White Paper on the ROI of Compliance, click here.

Categories
Everything Compliance

Everything Compliance: Episode 139, The Bank of America Episode

In this episode, we take up the recent imbroglio surrounding the Bank of America and its toxic workplace culture of 100+ hour work weeks. We have the full quintet of Matt Kelly, Jonathan Armstrong, Karen Woody, Jonathan Marks, and Karen Moore; all hosted by Tom Fox.

  1. Matt Kelly mines the matter for compliance lessons learned. He shouts out the GOP speakers at the recently concluded Democratic National Convention who bucked their party for the good of the nation.
  2. Jonathan Marks explores how internal controls were in place but not completely disregarded. He shouts out to researchers at the University of Pennsylvania for its work in CAR T cell therapy to treat certain types of cancer.
  3. Karen Moore considers the matter from the perspective of the Board of Directors and what their role should be. She shouts out to her students in the new semester of her class at Fordham Law School.
  4. Karen Woody takes a deep dive into the district court’s recent dismissal of the SEC complaint against Solar Winds. She shouts out the persons who ran the Democratic National Convention for a great Convention.
  5. Jonathan Armstrong reviews the entire matter from his UK perspective. He rants about Elon Musk and hate speech on X.
  6. Tom Fox shouts out to Rick Springfield and his hit song Jessie’s Girl as one of the two most well-known and sung songs from the 1980’s.

The members of the Everything Compliance are:

  • Karen Woody – Is one of the top academic experts on the SEC. Woody can be reached at kwoody@wlu.edu
  • Matt Kelly – Founder and CEO of Radical Compliance. Kelly can be reached at mkelly@radicalcompliance.com
  • Jonathan Armstrong –is our UK colleague and an experienced data privacy/data protection lawyer in London. He can be reached at his new law firm Jonathan.Armstrong@puntersouthall.law
  • Jonathan Marks can be reached at jtmarks@gmail.com
  • Karen Moore can be reached at Kmoore51@fordham.edu

The host and producer, rantor (and sometime panelist) of Everything Compliance is Tom Fox the Voice of Compliance. He can be reached at tfox@tfoxlaw.com. Everything Compliance is a part of the award-winning Compliance Podcast Network.

Categories
Magnificent 7 Rides Again

The Magnificent 7 Rides Again: Elaine Capers on Artistic Inspirations from West Texas

Welcome to The Magnificent 7 Rides Again, a captivating podcast series that delves into the vibrant world of seven talented female artists painting amidst the breathtaking landscapes, wildlife and vistas of the Texas Hill Country. Join us as we explore their creative journeys, uncover the inspirations behind their work, and celebrate their unique perspectives on art and life.

In this series, we will dive deep into the heart of the Texas Hill Country, where sweeping vistas and rugged beauty serve as the backdrop for artistic expression. Each episode will feature intimate conversations with these remarkable women, offering insights into their creative processes, the challenges they face, and the stories that shape their art.

In this episode, Tom interviews artist Elaine Capers. Elaine shares her journey into art, starting from her childhood in Fort Stockton, Texas, and her experiences with pastels and watercolors at the Annie Riggs Museum. She discusses the inspiration behind her work, often rooted in the rugged and desolate beauty of West Texas, particularly the Davis Mountains and Trans Pecos region. Elaine talks about the significance of primary colors in her palette and how they help her capture the essence of West Texas landscapes. Additionally, she reflects on her involvement with ‘The Magnificent Seven,’ a group exhibition at the Kerr Arts and Cultural Center in Kerrville. Elaine also highlights her interactions with young art enthusiasts and her purpose as an artist. The episode delves into the local art scene in Kerr County and Elaine’s expectations for the upcoming show.

Key Highlights:

  • The Influence of West Texas
  • The Colors of the Pecos Mountains
  • Elaine’s Purpose and Passion for Art
  • Inspiring the Next Generation
  • The Local Art Scene in Kerr County

Resources:

Elaine Capers on Instagram

Texas Hill Country Podcast Network

The Hill Country Artists Facebook Page

Categories
Blog

Bank of America’s Corporate Culture Crisis: Part 4 – A Tale of Metrics and Misalignment: Lessons for Compliance Professionals

Compliance professionals constantly seek to understand how systemic issues within corporate hierarchies can lead to severe consequences. The recent revelations about Bank of America’s (BoA) persistent workplace culture problems are a powerful reminder of compliance’s critical role in safeguarding employees and the organization.

This week, I will explore the BoA failure around workplace culture from various perspectives articulated by the Everything Compliance gang, including Karen Woody, Jonathan Armstrong, Matt Kelly, Karen Moore, and Jonathan Marks. This exploration will include the failure of internal controls, failures by the Board and senior management, culture failures around highly driven, self-selecting employees, and the cultural miasma that is BoA from a perspective from across the pond. In Part 4, we consider a misconnection of metrics. This issue is not merely a question of productivity but a fundamental concern about corporate culture, ethics, and long-term sustainability.

In corporate governance and compliance, aligning business metrics and ethical obligations often defines a company’s culture’s success or failure. The recent Wall Street Journal (WSJ) article about BoA and its investment banking metrics sheds light on a crucial disconnect that compliance professionals must address: the disparity between business performance indicators and employee well-being.

At the heart of the issue is the nature of the metrics used to evaluate success in different industries. In investment banking, the primary focus is often on closing deals. The logic is straightforward: deals drive revenue, and revenue drives the bottom line. This singular focus on deal-making creates an environment where the end justifies the means, potentially overlooking the toll it takes on employees.

Conversely, in law firms, the metric of success is often billable hours. Lawyers are compensated and promoted based on the number of hours they bill, which can lead to a different, yet equally problematic, set of behaviors. Over-inflating hours or working excessive hours becomes the norm because that is the path to career advancement.

Both systems create perverse incentives: investment bankers might underreport hours to avoid raising HR flags, while lawyers might overreport hours to enhance their career prospects. These behaviors highlight a crucial point for compliance professionals: the metrics set at the top of an organization inevitably shape the behavior throughout the company.

One of the first steps in addressing these issues is understanding the available data and how it is used. Compliance professionals must ask themselves, “What data do we have, and how can it be used to monitor and manage risks effectively?” By focusing solely on deal closure, companies are potentially neglecting data related to employee well-being, such as hours worked or stress levels.

In contrast, law firms have systems that track the minutiae of an employee’s workday, from time spent on tasks to keystrokes made during document review. This data is invaluable for billing clients and identifying patterns that may indicate overwork or burnout. Compliance professionals in investment banking could learn from this approach, using technology to track hours worked or monitor workload distribution, ensuring that employees are kept within reasonable limits.

The core issue is more alignment between business metrics and corporate culture risks. Compliance professionals must ensure senior management acknowledges overwork as a significant risk and takes proactive steps to monitor and mitigate it. This involves tracking the traditional success metrics and implementing metrics that reflect the company’s values and culture.

For example, if overwork is recognized as a risk, metrics such as average hours worked, employee turnover rates, and employee satisfaction surveys should be regularly monitored and reported. This dual approach allows a company to pursue business success while ensuring its corporate culture remains healthy and sustainable.

The responsibility of aligning these metrics rests not solely with middle management, compliance officers, or senior management; it extends to the board of directors. The board’s oversight role is crucial in ensuring that the company’s culture is preserved in pursuing financial success. For boards everywhere, the recent scrutiny BoA received in the WSJ article serves as a lesson.

Board members must go beyond the surface level of management reports and delve into the realities of the workplace culture. This requires more than attending board meetings in luxurious settings and listening to pre-prepared presentations. It involves engaging directly with employees at all levels, understanding their challenges, and prioritizing their well-being.

A practical approach could involve the board requiring regular reports on employee well-being metrics, mandating internal audits focused on workplace culture, or even conducting anonymous employee surveys to get an unfiltered view of the corporate environment.

An effective compliance program also hinges on creating a culture where employees feel safe to voice their concerns. A speak-up culture is essential in identifying issues before they escalate into major risks. Management and the board should encourage employees to report inconsistencies between policy and practice and take these reports seriously.

For instance, if employees consistently report working beyond reasonable hours, this should trigger an investigation and subsequent action from the board. Such feedback mechanisms help identify risks and reinforce the company’s commitment to ethical practices.

Lastly, when issues do arise—such as the tragic death of a young employee in the Bank of America case—the board should conduct a root cause analysis. This analysis should not be limited to the immediate cause but should explore deeper systemic issues that may have contributed to the incident.

A comprehensive root cause analysis might reveal that the focus on deal closure at the expense of employee well-being is not an isolated issue but indicative of a broader cultural problem. The board could use this analysis to implement changes across the organization, ensuring that similar incidents do not occur in the future.

The lessons are clear: the metrics that companies use to measure success are powerful drivers of behavior. The challenge for compliance professionals is ensuring that these metrics align with business goals, ethical standards, and employee well-being. This requires a proactive approach, leveraging data to monitor business performance and corporate culture. It also requires a board that is engaged, informed, and committed to understanding the realities of the workplace.

In the end, compliance is not just about preventing legal and compliance risks but about fostering a corporate culture that values integrity, transparency, and the well-being of all employees. By aligning metrics with these values, companies can achieve sustainable success that benefits their bottom line and people.

Categories
Compliance Tip of the Day

Compliance Tip of the Day: Asking Questions for Compliance

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements.

Whether you’re a seasoned compliance professional or just starting your journey, our aim is to provide you with bite-sized, actionable tips to help you stay on top of your compliance game.

Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law.

Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

In this episode, we consider the technique of asking questions to improve both culture and compliance at your organization.

For more information on the Ethico ROI Calculator and a free White Paper on the ROI of Compliance, click here.

To check out The Compliance Handbook, 5th edition, click here.

Categories
Daily Compliance News

Daily Compliance News: August 28, 2024 – The $100MM Podcast Deal Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen to the Daily Compliance News. All from the Compliance Podcast Network.

Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

In today’s edition of Daily Compliance News:

  • Nordea Bank to pay $35MM for AML violations. (WSJ)
  • South Africa investigating $7bn worth of corruption at state-owned enterprises. (Toronto Star)
  • Top Chilean lawyer indicted on corruption charges. (FT)
  • Mexico wants to have elected judges. What could go wrong? (See: Texas). (Bloomberg)

For more information on the Ethico ROI Calculator and a free White Paper on the ROI of Compliance, click here.