Blockchain could have blocked Nirav Modi
Deploying a blockchain system could prevent tampering of the SWIFT system
“Unfortunately, the fraudsters have also started using innovative methods to misuse the banking system. At the same time tools and techniques such as real time neural network based behavior models and forensic accounting are already changing the face of fraud detection and prevention.”
DR. PREETI GOYAL , Professor — Finance & Accounting, Great Lakes Institute of Management
Banking sector is the engine of economic growth and any malfunction in this engine sends shivers down the entire economy. In the recent years, banks have achieved phenomenal growth which has predominantly been enabled by technology. But human intervention can lead to situation where one can not imagine. PNB fraud case is also a case of technology v/s human intervention. If seeing it from a technology aspect, the case could be considered as a hack in the system however it is indeed more of a bank break-in rather than considering as a cyber crime.
In the wake of PNB SWIFT-related fraud involving significant amount, RBI also reiterated its confidential instructions and mandated the banks to implement, within the stipulated deadlines, the prescribed measures for strengthening the SWIFT operating environment in banks.
SWIFT or Society For Worldwide Interbank Financial Telecommunication is the tool used for international money transfer.
Dr. Preeti Goyal a professor of Finance & Accounting at Great Lakes Institute of Management in Gurgaon says, “In the coming years this sector is expected to witness explosive changes and growth with the use of newer technologies such as NFC, block chains, robotic process automation etc. Unfortunately, the fraudsters have also started using innovative methods to misuse the banking system. At the same time tools and techniques such as real time neural network based behavior models and forensic accounting are already changing the face of fraud detection and prevention. This is like a cat and mouse game between the banks and fraudsters and technology remains both a root cause as well as the solution to this.”
While the Nirav Modi fraud has been highlighted as a technology fraud, the focus should actually be on the lack of internal controls, checks and balances that led to this situation. It is not that bank frauds did not happen prior to the use of technology. Many of us will recall how Harshad Mehta duped the banking system of crores of rupees in late 1980s – at that time it was said if banks were automated, it may have been possible to prevent the fraud.
“There is no nirvana to prevent bank fraud. The solution lies in strengthening the internal controls, checks and balances and at the same time investing in latest technology and training people to use it.” She adds.
While this fraud has occurred at one of the branches of PNB, it would eventually affect other Banks in India and outside India due to nature of such contracts. If PNB backs out of its obligations to pay and takes legal route, other banks will also a take a hot.
“As we have seen in past, such frauds are not limited to one branch and we may see other Banks unearthing similar frauds in near future in one of their branches. Considering that Public sector Banks in India are Government backed, there is no immediate threat on existence of any of banks. However, such news weakens the faith of Indian Public and International investors in the Banking system. This is not a good news and will have long term repercussions for Indian banking system as a whole. This is also a final wake up call for banks to put their house in order.” Says Rajeev Mahajan, Co-Founder, CEO and Director at Antworks Money, also the Ex-Senior President – MNC Infrastructure, Yes Bank.
WHOM TO TRUST
“Technology can protect you from invasion or hacking, but technology cannot protect you from human tendency to perpetrate fraud. It is important to minimize human interference and maximize technology-based transactions.” Says Prasad Ajgaonkar, CEO, iRealities Pvt. Ltd (The company specializes in offering technological innovation, digital services.)
Gokulnath Shetty, retired deputy branch manager with another junior employee misused the Society For Worldwide Interbank Financial Telecommunication or SWIFT codes; as he had passwords to them. He has worked in the bank for a long time and he managed to cover up the whole mess for years. While, there are also other people who have been arrested from authorized signatory of the accused firms.
A big question arises here is whom to trust as modern day banking necessitates working in hand with partners, agents and vendors, etc. besides outsourcing, peripheral and several operational activities involve deploying and trusting outside agency’s employees.
In the mist of the PNB Fraud case, there is need to have vigilant backgrounds checks for the employees working in financial institutions. CEO of SecUR Credentials, a background screening company Rahul Belwalkar says, “Currently, the numbers of PSU’s that opt for Background screening are low because of HR Practices that have been ingrained through the years and their resistance to change these practices. We also suspect that there are push backs from unions as well because of which HR policies haven’t changed in a while. There has been a rise in number of private sector banks and NBFCs that are not only conducting background screening but are also doing regular credit checks on their employees who at the end of the day handle large amounts of clients’ money. In this case too, right from general manager level and other 18 employees have been accused of the fraud; having proper and systematic employee background verification is the need of the hour.”
WHAT SHOULD BE DONE
As the risks arising from the potential malicious use of the SWIFT infrastructure, created by banks for their genuine business needs, has always been a component of their operational risk profile. RBI had, therefore, confidentially cautioned and alerted banks of such possible misuse, at least on three occasions since August 2016, advising them to implement the safeguards detailed in the RBI’s communications, for preempting such occurrences. Banks have, however, been at varying levels in implementation of such measures. Even Finance Minister Arun Jaitley has also said that it is incumbent upon the state to chase those who cheat the banking system.
In the light of this case; leaders in the industry have suggested some of the measures that should not be avoid. Prasad Ajgaonkar CEO of iRealities suggests that it is extremely important to educate all stakeholders in the banking ecosystem on information security, as banking frauds are not technology frauds but process frauds.
“Making information security training compulsory for all bank employees is an important step in significantly reducing bank frauds. For one of the largest private sector banks, we have created and deployed a comprehensive information security training module, which they are successfully running for the last 3 years.” He says.
There should be a system or mechanism to immediately make the changes in the
“However, such news weakens the faith of Indian Public and International investors in the Banking system. This is not a good news and will have long term repercussions for Indian banking system as a whole. This is also a final wake up call for banks to put their house in order.” RAJEEV MAHAJAN Co-Founder, CEO & Director Antworks Money
“Technology can protect you from invasion or hacking, but technology cannot protect you from human tendency to perpetrate fraud. It is important to minimize human interference and maximize technology-based transactions.” PRASAD AJGAONKAR, CEO, iRealities Pvt. Ltd
“Currently, the numbers of PSU’s that opt for Background screening are low because of HR Practices that have been ingrained through the years and their resistance to change these practices.” RAHUL BELWALKAR CEO SecUR Credentials
patches in the system, and it can be made secure. For this, the systems should be open systems. Banks should also have a crises management system in place, for immediate external and internal communication.
BLOCKCHAIN CAN HELP
The long term solution that banks can look at for prompt detection and prevention of fraudulent transaction is by deploying a blockchain based system. Blockchain consensus is dependent on the entire ecosystem and not an individual. Hence, it would reject such a transaction immediately, since in normal circumstances, it is only one/few individuals who are responsible for the fraud and not the entire network of the bank. It also provides effective protection against fake LoUs.
“Blockchain technology can successfully prevent process frauds in banks, because no one single authority has full control over the movement of assets. If the core banking system is integrated with blockchain, any breach of limits can be immediately tracked and stopped. In the PNB fraud, only one officer had authority to execute the transaction end-to-end, so the fraud was not detected as it bypassed the core banking system.” Says Ajgaonkar.
Advocating the Blockchain usage, CEO & Co-Founder of Razorpay, Harshil Mathur says, “A blockchain based system also provides high traceability with the records of transaction being made available in the transaction history, throughout the lifetime. This makes the system transparent and auditable, hence more immune to frauds.”
Software Companies should work with the relevant business function team to understand and identify the dependencies. Most of the conventional systems have maker, checker and authorizer concepts embedded, however, analytics based audit hooks and rule based cross platform reconciliations are seldom implemented.
Agrees with the same Vikram Pandya, Director Fintech of SP Jain School of Global Management also expresses his thoughts, “With advent of machine learning, banking software can do realtime data analytics and notify the management about suspicious patterns. Software firms should also start offering blockchain based solutions to bring more transparency and efficiency to some of the processes where dependency of value chain is higher. RegTech should be part of the software offering. Internal controls should be embedded within the system and checklist based approach should be implemented.”
Meanwhile, RBI also said it has formed a panel to look into reasons for factors leading to increasing incidents of frauds in banks. The panel will also look into reasons for high divergence in Non-Performing Asset (NPA) classification and provisioning by banks.
“In view of large divergences observed in asset classification and provisioning in the credit portfolio of banks as well as the rising incidence of frauds in the Indian banking system, it has been decided to constitute an Expert Committee under the chairmanship of Y H Malegam, a former member of the Central Board of Directors of RBI, to look into the reasons for high divergence observed in asset classification and provisioning by banks vis-a-vis the RBI’s supervisory assessment, and the steps needed to prevent it; factors leading to an increasing incidence of frauds in banks and the measures (including IT interventions) needed to curb and prevent it; and the role and effectiveness of various types of audits conducted in banks in mitigating the incidence of such divergence and frauds,” Apex bank states.
The members of the committee include Bharat Doshi, member, Central Board of Directors, RBI; S Raman, former chairman and MD, Canara Bank and former whole-time member, SEBI; and Nandkumar Saravade, chief executive officer, Reserve Bank Information Technology Pvt Ltd (ReBIT). A K Misra, executive director, RBI will be the member-secretary of the committee.
“A blockchain based system also provides high traceability with the records of transaction being made available in the transaction history, throughout the lifetime. This makes the system transparent and auditable, hence more immune to frauds.” HARSHIL MATHUR, CEO & Co-Founder, Razorpay