Slashdot Mirror
72% of Banks Say Their Employees Committed Fraud
yahoi writes "The financial crisis appears to be exacerbating fraud by bank employees: a new survey found that 72 percent of financial institutions say that in the last 12 months they have experienced a case of data theft by one of their workers. Meanwhile, most banks don't want to talk about the insider threat problem and remain in denial, says a former Wachovia Bank executive who handled insider fraud incidents at the bank and has co-authored a new book called Insidious — How Trusted Employees Steal Millions and Why It's So Hard for Banks to Stop Them that investigates several real-world insider fraud cases at banks." The article dispels one assumption that might commonly be made about such insider fraud: "Interestingly, it's not the stereotypical offshore or outsourced employee who's most risky to their organizations. Nearly 70 percent of financial institutions say their full-time employees are most likely to pose an insider fraud threat..." Technology workers placed third in the roster of the job categories most abused.
Is that not counting executives?
If 72% of financial institutions say they've experienced data theft, how do "most banks" remain in denial? It sounds like "most banks" just admitted it.
Also, I'm not sure data theft is the same as fraud.
Is this really a case of it being unexpected? Banks, which handle lots of money and are generally unwilling to pay for honest talented staff see mishandled cash? What a surprise!
Next article, "Investment Bankers are overpaid for the returns they generate on their transactions!"
"Trust, but verify."
These people are in positions where they have to have access to the information to do their jobs. Locking them down so they can't get to the data without a partner would double labor costs (much more expensive than the 1-4% quoted in TFA.)
So the best answer is: give them the access they need, tell them you're logging it all, log it all, and *analyze the freakin' reports!* There are so many reports out there in most businesses that just get ignored. But we're talking about the early warning signs of theft, and they can't be ignored without consequences.
John
Seriously, if there are humans in involved and money involved, corruption ain't far behind.
www.voiceofthehive.com - Beekeeping and Honeybees for those who don't.
The article dispels one assumption that might commonly be made about such insider fraud...
Am I the only one that is concerned that our financial institutions are assuming things relating to their security policies? Because it's common knowledge in our industry that most security threats come from inside, not outside, the organization.
#fuckbeta #iamslashdot #dicemustdie
I recall a bank hitting my brother's account with a long list of overdraft fees when he never bounced a single check. Turns out that one month he was trying a new budget strategy where he wrote all of the checks for that month's expenses and dated them for that day. At that time, he didn't have the money in his account to cover those checks. But he never sent them out until after he and his wife had deposited money to cover those checks. The checks were presented to the bank at a time when the money was actually in the bank. They paid all of those checks and then charged him $20 for each one that was dated as described. He never bounced a check. The checks were never presented to the bank when there weren't sufficient funds in the account. How did they justify that action? Who knows...
And even now, banks are playing games with other fees and charges. Who writes checks any more anyway? Your bank may already be doing this... How many transactions per month are you allowed to have before they start charging transaction fees?
All these companys want you to be totally loyal to the company. The job comes before your life, friends, and everything else. They demand loyality above everything.
And yet... are most companys loyal to the employee? Fuck no! You're 100% replaceable. We don't really need YOU. Get back to work or you're fired. Sick? Come to work anyway! You did such a great job on that project. have some perks! more money? no. you wont get more money.. but look! pizza on fridays! wooo!
Nobody should be suprised that many employees have a crap attitude about their jobs. And will steal any chance they get.
You want real loyality from employees? PAY US MORE. We don't work here for our health or because we like it or for the perks or the lovely 'family oriented' way you do business. We work here because you pay us.
And now with the economy fuckup. The first things to go are perks and pay raises. Yet you still want the same loyality from the employees.
Good luck with that. We're gonna steal anything not bolted down. Get all we can before the company gets rid of us.
I'm a contract employee at one of the top ten banks in the nation, employed in website development. Within the first week I was given the keys to the kingdom in spite of the bank never even performing a rudimentary background check. Also in the first week, I discovered that it would be absolutely trivial for me to steal the credentials of every single user of the site and completely cover my tracks. It has now been MONTHS since I brought it to the attention of the people who I answer to and there is still not even a proposed solution to the problem. Scarier still is that any one of 75-80 people could do this and it does not even require collusion. This to me shows the "high regard" that banks have for your money.
The other 28% must be small banks, or in denial. If just 1 percent of the population is criminal, you have to anticipate 1 criminal for every 100 people you hire. IANA statistician, but even if you have well under 100 employees, the odds are still pretty good. I think it would be like the birthday problem, where the odds of somebody in a relatively small class having the same birthday as you are surprisingly high.
Of course, I'm not sure what percent of the general population would commit bank fraud if they had the opportunity. That doesn't matter of course. People who are likely to commit bank fraud will, of course, seek out jobs at the bank. As the famous bank robber said, "that's where the money is".
For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?
They're in denial because they are not aware of the full seriousness of the issue.
I discovered something that amazed me. I was trying to resolve a client's quite simple software issue. I worked with managers of two large banks (tens or hundreds of thousands of commercial accounts). I discovered that one of the banks had no technically-knowledgeable employees, except for computer maintenance staff. They used contractors for everything else. The contractors with whom I talked had little technical knowledge.
The other bank had either no one who was technically-knowledgeable or just a few people.
They don't have just have problems with fraud, they have problems in every area where technical knowledge is needed. They cannot resolve modern problems because they have little or no knowledge of them, and they don't want to learn. Technically knowledgeable people are apparently seen as an annoying necessity.
With employees of a third large bank, at which I have personal and business accounts, I found that I could get a laugh by saying I saw their web site and thought that high school students should not write web sites for banks. Later the web site was improved.
Has anyone seen my red stapler?
Orwell was an optimist.
It seems the motive is typically to get a "loan" by a lower level employee which will be paid back at some point. It would seem that the employees are in fear to actually ask their own bosses to aid them in a situation of financial strife.
Isn't that what banks are about? Making loans?
It seems that inside the banks their is a pervasive culture of fear/shame/envy by staff of the owners. The fact that management seems to be unable to get inside this situation is indicated of a manager/employee relationship meltdown.
If I owned a bakery and my employees were stealing bread to feed their families cause I pay them nothing -- that in most peoples mind is a hint about how my relationship as owner to my employees is going.
If they are stealing bread but are not starving but in fact well off thats something else - envy and greed.
In any case a Bank which gets public assistance like in "too big to fail" or some other way should begin to be held publicly accountable for internal losses -- tangible assets and data privacy breaches. Till today no one is really reporting this number out of fear in losing the public trust. When the bank fails of course the horse it out the barn doors already.
I've seen this happen to a co-worker. She was generally quite out-going and talkative. But she started being quieter over time. One day it was announced that she no longer worked at the company, and through the rumor mill I found out that she had embezzled about 5 grand (mid 90's dollars) with the help of her boyfriend. She discovered by accident that some vendors would double-pay an invoice if a second copy was sent by mistake. Thus, she decided to send fake invoices to vendors with a history of double-paying, but with her boyfriend's bank account as the bill-to address of the 2nd copy. Eventually somebody noticed the bogus addresses.
The problem is that they didn't file formal charges because they wanted to protect the reputation of the company. They did confiscate all her future benefits, though; so it was probably a net loss to her.
However, by not prosecuting they set themselves up for a second attack. For another employee of the same accounting department made off with about 25 grand a few years later. I'm sure the second guy factored in the non-prosecution of the first attempt.
I'm not sure how to solve it, other than perhaps making prosecution mandatory. But I doubt companies want that kind of legal complexity for gray areas or where the evidence is weak.
Maybe some kind of "secret victim list" in prosecution, but that goes against the concept of jury-by-peers. The chance of one out of 14 jurors (with 2 alternates) spilling the beans is fairly high. And there's other issues with public disclosure laws.
Table-ized A.I.
I have applied to many banks to work as a teller; its a nice, cushy job that pays ok and is respectable. I have never been offered a job. I found out through some friends that banks will not hire anyone with bad credit; I kind of wondered why, as, if an employee tried to steal anything, they have a fuck-ton of cameras and security systems in place at any bank. I happen to have bad credit, so they assume that might try to screw them or something. It kind of sucks, but seeing this story, it makes a lot more sense.
I guess it's only fraud when the bank is the one getting ripped off.
When they're handed hundreds of billions of dollars of taxpayer money to shore up bad debt and open up the faucet of commerce, but then instead decide to stop lending and hoard the cash... that's... something else? Right?
72% of banks say employees have committed fraud. Other 28% are lying or naive.
"Interestingly, it's not the stereotypical offshore or outsourced employee who's most risky to their organizations.
that was not somebody attempting either a subterfuge or the implantation of a subliminal suggestion.
You see, it may very well be true that "offshore" employees in banking have less culpability, thus far...which - entirely coincidentally, I'm sure - corresponds directly to the amount of penetration into banking that offshoring has - thus far.
Interestingly, don't you think that such statistics provide a a nifty argument for offshoring banking?
Who gathered and "analyzed" this "data", again?
Orwell: "In a Time of Universal Deceit, telling the Truth is a Revolutionary Act"
I once overheard Bankers speaking and they do blacklist persons if they hurt the institution enough.
Though no charges were filed often the reference is veiled: "let go due to irregularities in performing the job" which is a whopping hint to the next employer they were doing low level fraud or in the more sinister case it was a recommendation for a let go employee -- to a competitor.
In a bar one evening I pointed out ''how simple it would be to send a few million to a bank in Rio''. I was told ''Who wants to live in Rio?''. They were not interested in trying to fix it.
About that time I did some work at a bank in London. Every morning the director of securities arrived in the IT department with a list of errors from the overnight run (all audit trailed, etc). He got a programmer to fix them which he did by running up an SQL interpreter. There was no oversight, the director walked away before this was completed, there was nothing to stop the programmer from doing it whenever he wanted. The programmer was employed through an agency, not a bank employee.
I met someone at a social function, asked him what he did: ''I am a banker, I get to rob people legally'' -- at least he was honest!
I could go on. This sort of stuff is endemic.
I had a friend years ago that was a detective on the Las Vegas Robbery squad. He told me that the average armed robber gets away with something like $5,000. The average electronic bank robbery gets away with over $500,000. He also told me that they almost never ever catch anyone committing a robbery by computer, but they get most of the people sooner or later that commit armed robbery. He was talking about both inside jobs (mostly involve some sort of computer) and outside computer attack type robberies here to clarify.
He said it was not so much tracking down a suspect, but that the nature of the electronic / insider robbery often lacked the traditional physical evidence that would really lead to a conviction. The banks and businesses don't really want to cooperate for PR / insurance / liability reasons. The nature of the evidence is not very compelling to a jury. Often it is difficult to properly get warrants across multiple jurisdictions in a timely manner and in such a way that the evidence can be used in court. Most importantly it just all around cost more money to investigate and prosecute, as it requires very expensive and specialized skills that most police departments (including the FBI) really do not have the resources to do properly. There is not a lot of political motive at the top of law enforcement and everyone else to do unless it is a really high profile robbery type thing that they have to do.
Living in Chile
This headline is missing the point that all banks commit theft, that's what keeps them in business and pays for their excessive bonuses.
Anyone that thinks otherwise doesn't understand fractional reserve banking.
Until we have money that is based on some real commodity money has no inherent value, it's just a points system ungrounded in reality.