Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Fraud police buckling under mountains of data

By Jeremy Kirk , IDG News Service , 09/26/2007

Fraud investigators are struggling to cope with vast quantities of data sent to them by financial institutions, meaning some crimes may go uninvestigated or even unnoticed, experts said on Wednesday.

The issue is prompting banks and other financial institutions to ask law enforcement and regulators to share with them more of the data they have about suspicious transactions, in order to better combat fraud.

Banks and transfer agencies are required by regulators in the U.S. and the U.K. to file reports when they detect a potentially illegal transaction, said Olga Maitland, head of the International Association of Money Transfer Networks, at the Fraud World 2007 conference in London.

Up to 300,000 Suspicious Activity Reports (SAR) are filed per month in the U.S., and up to 200,000 a year in the U.K., but most of those reports "disappear into a black hole" because law enforcement agencies don't have the resources to investigate each one, she said.

If another financial institution is mentioned in a report, it may not even know about the suspicious activity if the report is filed by a different institution. "If there is indeed a crime taking place, then that is carrying on undetected," Maitland said.

Colin Woodcock, head of the fraud section for the U.K.'s Serious Organized Crime Agency (SOCA), said the SARs program has resulted in "huge amounts of information ...which it was difficult to do anything with."

"Let's not forget they are suspicious activity reports," Woodcock said during a panel discussion. "Now, if the police or anybody really were expected to act on everything that is suspicious, we would be bogged down in the first five seconds of operation."

The quantity of reports has also created a need for greater computing power, he said.

The U.K. has made some progress, according to Woodcock, and opened up access to the SARs database to other police forces such as HM Revenue and Customs, the U.K.'s tax authority, which can use it for their own investigations, he said.

But sharing the SARs data with financial institutions raises huge concerns around confidentiality and privacy, Woodcock said. It could mean the disclosure of "very embarrassing" information about banks, he said.

SARs were "given to us by industry to make the best use law enforcement can make of it, not to go and share it with everybody and say 'Look at what NatWest just told us," he said. "There are huge problems there." (NatWest is a major U.K. bank.)

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Magic Quadrant for Application Delivery Controllers

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...

Vulnerability Management For Dummies

Download this concise book "Vulnerability Management for Dummies," to learn about the simple steps...

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

This paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Webcasts

Transforming the Enterprise WAN Edge: Video from Cisco

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.