U.S. Targets Bank M.Y. Safra in First-Ever Crypto AML Action

OCC Hits New York-Based Bank with First Ever Enforcement Action for Lack of Crypto AML Compliance
What Happened?
February 27, 2020: The U.S. OCC (Department of Treasury Office of the Comptroller of the Currency) took action publicly against M.Y. Safra Bank is the first in a new wave of enforcement for VASPs (virtual asset service providers).
According to the OCC order, the AML policies and procedures MYSB had in place were ineffective at identifying whether their clients were transacting with stolen or laundered virtual assets, such as Bitcoin and Ethereum cryptocurrencies and security tokens.
This inability to identify, investigate, or report this suspicious activity further prevented the bank from filing the appropriate SARs (suspicious activity reports) with FinCEN.
Source: https://www.occ.gov/static/enforcement-actions/ea2020-005.pdf
Who Is Impacted?
Any VASP–banks, crypto-exchanges, OTC desks, fintechs, etc.–dealing with virtual assets and serving U.S. customers.
Why This Matters?
The action taken against M.Y. Safra Bank is a strong indication that bank regulators such as the OCC, Federal Reserve Bank, and the FDIC (Federal Deposit Insurance Corporation) have already gathered enough information on VASPs to begin a campaign of targeted enforcement.
It also demonstrates that these regulators expect VASPs to have the capacity to identify and properly assess the risk of the clients and transactions they are serving. The regulator gives clear direction that the AML obligations of traditional finance apply to any virtual asset transaction.
What’s Next?
The MYSB board of directors has 60 days to respond with a comprehensive compliance program that is able to stand up to stress testing from an independent third party.
VASPs serving US users, clients, or investors should be able to clearly demonstrate that their KYC, risk screening, blockchain forensics, and transaction monitoring tools are integrated into an effective AML program – backed by comprehensive, written policies and procedures manuals, and audited by an independent expert.
Furthermore, compliance teams should review their AML providers to ensure they are not just paying for a KYC onboarding tool or identity verification APIs.
Ongoing monitoring programs are required – existing users should be screened regularly for AML risk such as whether they have appeared on global sanctions, watchlists, or adverse media risks, and whether they represent political exposure.
For iComply clients, our ongoing monitoring feature will perform these tasks on a daily basis and only provide alerts if a new risk is identified. Speak with your account manager for more information.
learn more
Is your AML compliance too expensive, time-consuming, or ineffective?
iComply enables financial services providers to reduce costs, risk, and complexity and improve staff capacity, effectiveness, and customer experience.
Request a demo today.
Choosing AML Software: Why Anti-Money Laundering Protocols Should Always Be A Priority
Did you know that an estimated 2-5% of the global GDP (approximately $800 Billion - $2 Trillion USD) is laundered each year? With money laundering posing such a huge threat due to its ties to financing terrorism, forced prostitution & human trafficking, smuggling,...
Power in Transparency: Why Comprehensive KYC Protocols Matter
Do you know who you’re doing business with? Organizations must have properly vetted security and identification processes in place to protect their business and clients, particularly to lay a solid foundation for future growth and success. Know Your Customer (KYC)...
Customer Due Diligence You Can Trust: iComplyKYC
Is your customer due diligence process set up for success? Ensuring the safety of digital commerce and virtual asset management have become two of the most important points of conversation when it comes to global securities, specifically when it comes to anti-fraud,...












