Wednesday, November 23, 2011

When in doubt, blame OFAC!

It seemed so simple; Ann Jones, a writer for The Nation, wired rent money from her account on a US bank to her landlady, Heidi, in Norway. Well, she tried to, at any rate.

Heidi didn't get the money. Ann called her bank, to find out what went wrong. Her bank told her the hold-up was her fault, she hadn't provided enough information about herself on the wire. She provided the additional details.

A few days later, Heidi still hadn't received the money. Ann called her bank again. The bank insisted that they didn't know where the money had gone, it had gone out of the bank, and they had collected the wire fee. They assured Ann that this time it wasn't her fault.

The bank told her that OFAC was holding up her wire transfer.

At this point in the narrative, I will pause to let you run over to your favorite sanctions screening software. You can search on “Ann Jones”, “Jones”, “Heidi”, and if you have extra time, see if there are any Norwegian banks or bank branches located in Norway on the OFAC list.

That didn't take long did it? Because, well, they aren't there.

And not to leave you in suspense, some days, maybe a week after Ann provides the additional information, the funds turn up in Heidi's account.

Ann recounts her misadventures with OFAC in her online article Me and OFAC and Ahmed the Egyptian.

Except OFAC never had a single thing to do with her wire transfer.

Key items in the story actually point the finger at Heidi's bank in Norway. They are:
  • a wire transfer from a bank in the US to a bank in Norway
  • the wire is held up for lack of information about the originating party 
    the funds are not being held at the US bank
  • providing additional information about the originating party gets wire moving again.

The more likely culprit was EU 1781, payments transparency regulation base on FATF SR VII. It requires banks in the EU/EAA to monitoring incoming cross-border wire transfers for certain standards of originating party information, and to obtain that information if it is missing. It's not a new rule, the law was enacted in 2006.

The US bank should have know about it, and certainly could have explained as much to Ms. Jones. They chose not to. They chose to blame the holdup on OFAC. Actually, put another way, they chose to tell a story to a journalist that would fall apart the moment you searched for “Jones” on the SDN list. It just doesn't make any sense. And there's really no excuse for misleading their customer.

I suppose at the end of the day everything worked out; the bank got a pesky customer off the phone, a journalist got fodder for an interesting piece, Heidi eventually got her rent money, OFAC got to gather information on Ms. Jones under the guise of helping her trace the wire transfer while retaining the air of mystery that comes with good misinformation.

Friday, November 18, 2011

New Fedwire Cover Message: The 6 tags you must map correctly.

The "CTRCOV" is no more.

The 2011 Fedwire update contains a brand new cover payment message format. "Brand new" as in "the old format will be rejected."

If you have not prepared in any other way, here are the 6 tags you must map correctly in your AML system.
  1. {3600} = CTP
  2. {3610} = COVS
  3. {7050} = Originating Party
  4. Originating Bank tag hierarchy {7052}, else {5100} else {3100}
  5. Beneficiary Bank tag hierarchy {7057}, else {4100}, else {3400}
  6. {7059} = Beneficiary Party.