U.S. Targets Bank M.Y. Safra in First-Ever Crypto AML Action

OCC Hits New York-Based Bank with First Ever Enforcement Action for Lack of Crypto AML Compliance
What Happened?
February 27, 2020: The U.S. OCC (Department of Treasury Office of the Comptroller of the Currency) took action publicly against M.Y. Safra Bank is the first in a new wave of enforcement for VASPs (virtual asset service providers).
According to the OCC order, the AML policies and procedures MYSB had in place were ineffective at identifying whether their clients were transacting with stolen or laundered virtual assets, such as Bitcoin and Ethereum cryptocurrencies and security tokens.
This inability to identify, investigate, or report this suspicious activity further prevented the bank from filing the appropriate SARs (suspicious activity reports) with FinCEN.
Source: https://www.occ.gov/static/enforcement-actions/ea2020-005.pdf
Who Is Impacted?
Any VASP–banks, crypto-exchanges, OTC desks, fintechs, etc.–dealing with virtual assets and serving U.S. customers.
Why This Matters?
The action taken against M.Y. Safra Bank is a strong indication that bank regulators such as the OCC, Federal Reserve Bank, and the FDIC (Federal Deposit Insurance Corporation) have already gathered enough information on VASPs to begin a campaign of targeted enforcement.
It also demonstrates that these regulators expect VASPs to have the capacity to identify and properly assess the risk of the clients and transactions they are serving. The regulator gives clear direction that the AML obligations of traditional finance apply to any virtual asset transaction.
What’s Next?
The MYSB board of directors has 60 days to respond with a comprehensive compliance program that is able to stand up to stress testing from an independent third party.
VASPs serving US users, clients, or investors should be able to clearly demonstrate that their KYC, risk screening, blockchain forensics, and transaction monitoring tools are integrated into an effective AML program – backed by comprehensive, written policies and procedures manuals, and audited by an independent expert.
Furthermore, compliance teams should review their AML providers to ensure they are not just paying for a KYC onboarding tool or identity verification APIs.
Ongoing monitoring programs are required – existing users should be screened regularly for AML risk such as whether they have appeared on global sanctions, watchlists, or adverse media risks, and whether they represent political exposure.
For iComply clients, our ongoing monitoring feature will perform these tasks on a daily basis and only provide alerts if a new risk is identified. Speak with your account manager for more information.
learn more
Is your AML compliance too expensive, time-consuming, or ineffective?
iComply enables financial services providers to reduce costs, risk, and complexity and improve staff capacity, effectiveness, and customer experience.
Request a demo today.
The Evolution of Blockchain Assets and the Regulatory Silver Lining
We’ve come a long way since Mastercoin, the first reported initial coin offering (ICO) that took place in 2013. Those five years seem like eons considering the incredible progress that has been made since. From ICOs to security tokens to smart assets and digital...
Ashley Viens, COO
Ashley Viens is the Chief Operating Officer for iComply and boasts an extensive communication, management, design, and sales background. Joining Origami Accounting in 2014 as Account Manager, she led and supported the expansion of their Saskatchewan, B.C., and Ontario...
Shane Sibley, Business Development
Shane brings a robust experience in account management and financial management planning, having worked with CIBC Wood Gundy for the Balogh Financial Group and Manulife Investments for several years prior to joining iComply. His diverse skill set includes wealth...










