= Subscriber content; or subscribe now to access all American Banker content.

We Shouldn't Be Relying on Hackers to Stop Terrorism Financing

The fight against terrorist financing took a fascinating turn last week as several international hacking groups announced plans to target banks, countries and individuals who had helped to finance the Islamic State, also known as ISIS or ISIL, and other terrorist organizations.

The plan, dubbed #OpCharlieHebdo, was formed by groups including Anonymous and Ghost Security in response to the Charlie Hebdo attacks in Paris. It is intriguing and somewhat unsettling that hackers would make decisions about financial institutions' compliance with counter-terrorism measures. But their efforts underscore the need for governments, banks and regulators to work harder at rooting out the sources of ISIS's funding.

Experts agree that ISIS is funded primarily by external transactions such as black market oil sales and ransom payments, as well as internal transactions such as tax collection, human trafficking and bank takeovers. When external transactions are completed in cash, they have ties to the formal banking system. For example, ransom payments originate from bank accounts of insurance companies and government agencies in the European Union, which use brokers to make cash payments to terrorists. And, as Notre Dame law professor and former Treasury under secretary for enforcement Jimmy Gurulé testified before the House Committee on Financial Services in November, "If ISIS is generating $1 to $2 million dollars a day from the illicit sale of oil, it is difficult to imagine that banks are not being used to transfer such large sums of money to entities controlled by ISIS."

This concern was echoed by David S. Cohen, the Treasury under secretary for terrorism and financial intelligence, in an October speech. He said:

ISIL's ability to make the most effective use of money that it raises depends on its access to the banking system in Syria, Iraq, and internationally.  Operating entirely in cash is both cumbersome and risky — cash is bulky, vulnerable to theft, and requires complicated logistics to transport. Moreover, ISIL will have a hard time funding external operations, including facilitating the movement of foreign fighters, without access to the international financial system.

"Scores of bank branches are located in territories where ISIL operates," Cohen continued, vowing to prevent the terrorist group from using those branches. "The private sector is playing a key role in … provid[ing] valuable insight into financial activity in areas where ISIL operates."

It's clear that counter-terrorist financing measures are necessary to defeat ISIS. Unfortunately, it is equally clear that the measures implemented thus far have left much to be desired.

For one thing, the Financial Action Task Force's evaluations of different countries' anti-money laundering and counter-terrorist financing standards often miss the mark. Macau is a case in point: the money laundering capital of Asia received a glowing evaluation.

Many financial institutions also tend to pay negligible attention to counter-terrorist financing law. Thousands of compliance officers are experts in complying with the law rather than interpreting it. This is not necessarily their fault: we should not be tasking compliance officers with interpreting the law if they are not lawyers.

Moreover, the U.S. devotes enormous resources to enforcing AML compliance but fails to take the same measures in the higher-risk area of counter-terrorist financing compliance. As Gurulé noted in his testimony, the Financial Crimes Enforcement Network has brought only two major cases against banks charged with violating the anti-terrorist financing provisions of the Bank Secrecy Act in the last decade. Our priorities ought to be the reverse. Terrorist financing kills people and directly threatens democracy. Money laundering does not.

If counter-terrorist financing laws had been effectively enforced, ISIS would never have risen to power, occupying an area the size of the United Kingdom. Nor would it have had the financial capacity to start and continue its horrific reign of terror.

These failures have not been lost on Anonymous and their colleagues. They are fighting ISIS in the digital shadows precisely because we have not been able to prevent ISIS from thriving financially.

If you are a director or officer of a global financial institution, fund, online payment processor or money services business, the idea that hackers are engaged in counter-terrorist financing efforts should be frightening. Banks are now answerable to people who are not only anonymous, but who can — with a few clicks — take the bank offline and download data on any client, transaction, or executive. Moreover, they aim to make banks answerable in the court of public opinion for unwittingly funding terrorism.

So far, #OpCharlieHebdo has taken down the websites of government agencies in Yemen, Syria, Afghanistan, Pakistan and Turkey as well as about 80 websites believed to be controlled by ISIS that publish terrorist propaganda. And while the hacking groups haven't taken down any banks yet, they have given notice to banks in Saudi Arabia that they will be targeted. That could well apply to Western banks in Saudi Arabia, including HSBC, Deutsche Bank and JPMorgan Chase.

Some people reading this likely applaud hackers' efforts to shut down ISIS websites and debilitate them. Everyone, including Wall Street bankers, can love an anti-hero.

But vigilante justice will lose its allure if hackers infiltrate our financial institutions and — without the benefit of experience in counter-terrorism law — make judgment calls about the culpability of banks and their executives. Such judgments cannot be fairly made in the absence of the rule of law.

In order for democracy to work, we must all subscribe to its ideals. Hackers must play by the rules. And banks and regulators must crack down on compliance in order to mitigate terrorist financing.

Clearly, we are at a point in history where banks must be exceedingly vigilant. Anonymous is indeed watching.

Christine Duhaime is a lawyer based in Canada with a specialized practice in counter-terrorism and anti-money laundering law. Follow her on Twitter at @cduhaime.


(2) Comments



Comments (2)
The middle east is at a time in history where they need to come together and unite or they will self destruct.
ISIS wants control of Iraq, has taken control of oil wells, and is causing havoc to middle east stability.

In the wake of the tragic events in Paris, it is becoming more inherant that world peace should be a unified humankind objective. ISIS is a threat to stability of the the region.

Religions, Oil, and Illegal Drugs have always been the main causes of wars and radical terrorists operations. Fast forward and add the world economic crisis, non functioning international banking policies, and transparency of insecurities clashing.

If "Anonomys" hackers from around the world decide to unite and do their part to "Stop Terroists Financing",
"We" are not relying upon them for anything. They are attempting to solve a problem affecting them too..

Change is required to maintain peace and stability in that region.
Imagine having your homeland, country, or territory disrupted by insecurities, and irrational chaos? Interfering with your daily life, and any human rights to live your life free?

I propose surrounding neighbors and affected countries, world leaders, religious groups, parties with vested interests in Iraq need to unite once and for all!

Stop ISIS and take back control of Iraq including oil, proceeds, and land.
Surround and halt their activies from every direction. Stop and destroy them in their tracks.

Or invite an Isis representative to join in on the unification processes to rebuild stability and maintain peace in thier region.

Together rebuild a united peaceful democracy or mutually agreeable functioning system.
They can learn from the US and omitt the congressional dysfunctional part of democracy system in advance.

Another option, they can abolish Iraq as a country since they are unable to secure or maintain regional stability. Split the land and resources equally between the vested groups. Each vested group recieving stake agree upon an equal % for a united fund that is continually reinvested to benefit peace, stability, and prosperity in their regions.

Life is already too short, world peace and equality could be a dream or reality for all.

Here's to the crazy ones, the misfits, the rebels, the troublemakers, the round pegs in the square holes... the ones who see things differently -- they're not fond of rules... You can quote them, disagree with them, glorify or vilify them, but the only thing you can't do is ignore them because they change things... they push the human race forward, and while some may see them as the crazy ones, we see genius, because the ones who are crazy enough to think that they can change the world, are the ones who do.
Steve Jobs
US computer engineer & industrialist (1955 - 2011) 
Posted by Intelligence Ratio | Sunday, January 25 2015 at 6:07PM ET
It is all to politically correct to ignore the reality of Islam driven terror. The suppliers and those who transfer the money used by these jihadis have blood on their hands.

The debate about Islam will not go away. Some future cathartic event is inevitable.

The international banking community needs to do what it can to shut down the flow of money from the supporters to the jihadis.

I am for zero tolerance on this issue. Banks which handle jihad blood money should be shut down.
Posted by BobSmith101 | Sunday, January 25 2015 at 10:24AM ET
Add Your Comments:
Not Registered?
You must be registered to post a comment. Click here to register.
Already registered? Log in here
Please note you must now log in with your email address and password.