5.4 Due Diligence In Banking Flashcards
CDD
Identifying the customer and verifying that customers identity using reliable and independent source documents, data or info.
Three types of CDD
- Standard CDD = the basic level of information on their customers that banks must collect and verify
- Enhanced CDD = a more detailed review of the customers activities and risk profile
- Ongoing CDD = continuous monitoring of a customers activities to identify any changes or suspicious actives.
CDD
Important for bank to carry out to reduce the risk of financial crime, ensure compliance, and to enhance its reputations and the integrity of the banking system.
Look into activities that the customer might be engaged in
Putting in place processes and procedures for anti-money laundering, fraud prevention and ways to combat the financing of terrorism.
Five main applications of due diligence:
- Know your customer
- Anti money laundering
- Credit scoring
- Data protection
5, payment services regulation
Know your customer (KYC)
Policies and regulations that are out in place for b and to check and verify the identity of their customers.
To ensure they are not engaged in any bad activities.
Supports anti money laundering regulations.
When a customer applied to buy a financial product, a bank must:
- establish the customers identity by examining relevant identification documents (passport)
- understand the customers activities to ensure they are legitimate by collecting information about their financial and business history.
- ongoing process as customer activities and circumstances can change. Bank must be aware of these changes
Anti money laundering
Getting haram money and converting it into a legitimate source.
Activities can include theft, drug, tax evasion and the financing of terroism.
Due diligence can identify suspicious customer activities and report them.
It is the law to implement due diligence processes.
Due dilutive against money laundering required bank to do certain things:
- identify and verify their identity by examining their documents (checking public records and other sources).
- access risk profile = based on the info already gathered and check any other relevant info
- monitor and update as due diligence is an ongoing process and things can change
- report if any concerns are noticed
Credit checks on customers/ potential customers
Credit checks are called ‘credit ratings’ for a large company and ‘credit scoring’ for an individual or SMEs.
Individual
Credit checks used to access the level of risk involved in providing financial service to a customer.
Like gather all info that will help them see how likely a customer is going to repay a loan.
Credit score companies - Experian and equifax
Performing credit check on business
Bank will look at the history of the company
(e.g. length of existence, weather its making profit, what assets it has)
Bank must check personal background of directors
Data protection
Applicable to banks as they hold people’s sensitive financial data.
Different countries have different ways of addressing data protection through regulatory frameworks.
High-level principles that apply in the UK and EU provide a good understanding of what is most important .
7 principles that underpins the use of data in the UK and EU data protection regulation
- Lawfulness, fairness and transparency = how data should be processed
- Purpose limitation (has to be collected for legitimate purposes)
- Data minimisation (only collect what is necessary and relevant)
- Accuracy and then needs to be kept up to date
(Inaccurate data must be delayed or fixed without delay) - Storage limitation (data should only be held for as long as it is needed in line with the purpose for which it was collected)
- Integrity and confidentiality
- Accountability (those using the data must be compliance with the applicable data protection regulations)
Data protection principles
By applying these principles, banks can ensure that the customers data remains safe and help reduce the risk of identity theft, financial fraud and other money scams.
TPPP
Third party payment services providers
Large banks are no longer the only institutions providing payment services.