Verification key to halting cyber scams

The threat of cyberattacks is very real in the financial advisory industry, but not all advisers are getting the message.
OCT 16, 2016
By  Ellie Zhu
The threat of cyberattacks is very real in the financial advice business and has been for some time now. But not all advisers are getting the message. Two weeks ago, a former broker for Wells Fargo Advisers Financial Network was fined $5,000 and suspended for 30 days by the Financial Industry Regulatory Authority Inc. for transferring $350,000 to someone she thought was a client. Turns out it was an imposter posing as her client via a series of email exchanges. The case was noteworthy for the amount of money involved. Most cases of wire-transfer fraud involving bogus emails are for much smaller amounts. In a survey a few years ago, the Securities and Exchange Commission found that 74% of cases involved amounts less than $5,000.

NO VERBAL CONFIRMATION

In the Wells Fargo case, Finra determined that the adviser failed to verbally confirm the email instructions to verify the client's identity, which she was required to do under Wells Fargo's protocol. If she had, the money likely never would have been sent. Actually, the Finra fine and suspension are the least of this adviser's worries. Wells Fargo fired the broker over the incident, and she is not currently registered with another broker-dealer. No one can blame Wells Fargo. It had a policy in place that the adviser ignored. Adding insult to injury, the adviser misled the firm by indicating in an internal system that she had verbally confirmed the client's identity when she hadn't. Wells Fargo was forced to reimburse the client the $350,000. (Related read: Financial advisers severely underestimating cyberthreats: experts) More than half the brokerages surveyed by the SEC acknowledged they had been targeted by imposters using stolen email addresses in wire-transfer scams. Among the brokerages that lost money in these scams, 25% said it was the result of employees not following client verification procedures. Adviser and InvestmentNews contributor Sheryl Rowling last week described what happened recently at her firm when an email arrived seeking a wire transfer. “The email had the client's business address and appropriate footer. It also referenced personal information that the client would know. In this case, we called the client for confirmation and discovered it was a scam,” she wrote. Ms. Rowling's firm could easily have ended up getting scammed as Wells Fargo did. The difference was that her firm followed its established procedures to verbally verify requests for wire transfers, while the broker at Wells Fargo did not. (Related read: Heading off hack attacks) Ms. Rowling also noted that the bogus email requesting the wire transfer was from a foreign account. “This should automatically ring a warning bell,” she wrote. Most brokerages and advisory firms are hesitant to discuss in detail the procedures they follow to verify that requests they receive for wire transfers are actually coming from customers and not fraudsters. But almost all seem to involve a verbal verification of some sort. That's fine as long as employees are following the procedures. It seems in more than a few cases they are not, despite the consequences they must know they face for not following them.

A LOT AT STAKE

Perhaps in the future, firms will come up with better ways to verify wire transfers that do not depend on brokers. After all, a lot is at stake: not only the amounts that firms such as Wells Fargo have to reimburse clients who lose money, but customer confidence and the reputation of the firm going forward. Until then, firms should remind their advisers in no uncertain terms that if they violate these verification procedures, they will almost certainly lose their jobs.

Latest News

Farther debuts AI investment proposal tool for advisors to win clients
Farther debuts AI investment proposal tool for advisors to win clients

"Im glad to see that from a regulatory perspective, we're going to get the ability to show we're responsible [...] we'll have a little bit more freedom to innovate," Farther co-founder Brad Genser told InvestmentNews.

Barred ex-Merrill Lynch advisor arrested in alleged $2.6M theft of former Miami Dolphin Pro Bowler
Barred ex-Merrill Lynch advisor arrested in alleged $2.6M theft of former Miami Dolphin Pro Bowler

Former advisor Isaiah Williams allegedly used the stolen funds from ex-Dolphins defensive safety Reshad Jones for numerous personal expenses, according to police and court records.

Are you optimally efficient?
Are you optimally efficient?

Taking a systematic approach to three key practice areas can help advisors gain confidence, get back time, and increase their opportunities.

Advisor moves: Father-son duo leaves Raymond James for LPL, RayJay adds Merrill Lynch alum in Florida
Advisor moves: Father-son duo leaves Raymond James for LPL, RayJay adds Merrill Lynch alum in Florida

Meanwhile, Osaic lures a high-net-worth advisor from Commonwealth in the Pacific Northwest.

Beacon Pointe adds six RIAs in two-month acquisition spree, boosting AUM by $2.7B
Beacon Pointe adds six RIAs in two-month acquisition spree, boosting AUM by $2.7B

The deals, which include its first stake in Ohio, push the national women-led firm up to $47 billion in assets.

SPONSORED How advisors can build for high-net-worth complexity

Orion's Tom Wilson on delivering coordinated, high-touch service in a world where returns alone no longer set you apart.

SPONSORED RILAs bring stability, growth during volatile markets

Barely a decade old, registered index-linked annuities have quickly surged in popularity, thanks to their unique blend of protection and growth potential—an appealing option for investors looking to chart a steadier course through today's choppy market waters, says Myles Lambert, Brighthouse Financial.