Thursday, February 9, 2023
Market-Reporter
  • Home
  • Markets
    • U.S. Markets
    • Canada
    • Europe & Middle East
    • Emerging Markets
    • Asia
    • Latin America
  • Investing
    • Stocks
    • IPOs
    • Mutual Funds
    • ETFs
    • Bonds
    • Commodities
    • Currencies
    • Cryptocurrencies
  • Economy & Politics
    • Personal Finance
    • Spending & Saving
    • Retirement
    • Real Estate
No Result
View All Result
  • Home
  • Markets
    • U.S. Markets
    • Canada
    • Europe & Middle East
    • Emerging Markets
    • Asia
    • Latin America
  • Investing
    • Stocks
    • IPOs
    • Mutual Funds
    • ETFs
    • Bonds
    • Commodities
    • Currencies
    • Cryptocurrencies
  • Economy & Politics
    • Personal Finance
    • Spending & Saving
    • Retirement
    • Real Estate
No Result
View All Result
Market-Reporter
No Result
View All Result
Home Currencies

OFAC Issues Sanctions Guidance on Virtual Currencies and Ransomware | Dechert LLP

MtR by MtR
October 28, 2021
in Currencies
0


In recent weeks, the U.S. Treasury Department’s Office of Foreign Assets Control (“OFAC”) has issued guidance regarding both virtual currency and ransomware, demonstrating the agency’s enforcement priorities and compliance expectations in these areas. The guidance comes at a time that Deputy Attorney General Lisa Monaco recently called “an inflection point” in cyber criminality, and the Justice Department, OFAC, and other regulators are paying close attention. The guidance recommends tailoring long-standing sanctions compliance principles and practices to the specific risks raised by virtual currency and ransomware activities.

Virtual currency guidance

OFAC’s virtual currency guidance is directed at the entire industry, “including technology companies, exchangers, administrators, miners, wallet providers, and users.” It aims to “help the virtual currency industry prevent exploitation by sanctioned persons and other illicit actors,” according to the press release issued with the guidance.

In essence, the guidance emphasizes that anyone subject to U.S. sanctions laws and regulations must continue to abide by them when engaging with virtual currencies.

Recent OFAC enforcement actions reinforce the agency’s focus on sanctions applicable to virtual currency transactions, especially (but not only) when they relate to ransomware payments. For example, OFAC reached settlement agreements with (and imposed civil monetary penalties against) U.S. companies that processed transactions for individuals in sanctioned jurisdictions (see our prior OnPoint). It also designated a Russian virtual currency exchange as a sanctioned entity because the exchange facilitated transactions for ransomware actors.

The guidance provides several best practices that entities involved in virtual currency activities should follow to remain in compliance and to mitigate penalties in instances of compliance failures. These practices will be familiar to anyone well-versed in sanctions compliance best practices applicable to other industries. Still, the document notes, compliance solutions should reflect a risk-based approach and should be tailored to the type of business involved, its size and level of sophistication, the products and services it offers, its clients and counterparties, and the locations it serves. OFAC also expects companies to implement these practices early on in the company’s existence, before products and services are released. Although there is no single compliance program to suit all scenarios, implementing OFAC’s best practices, as follows, can prevent sanctions violations and serve as a mitigating factor should any violations occur:

Management should commit to enforcing a culture of compliance throughout the organization from the company’s earliest days. OFAC recommends specific actions that management can take to set an appropriate tone from the top, including reviewing and endorsing compliance procedures, allocating adequate resources to compliance, delegating autonomy and authority to the compliance department, and appointing an experienced sanctions compliance officer.

Regular and ongoing risk assessments should be conducted to identify risks associated with sanctions compliance. Activities and relationships associated with foreign jurisdictions or foreign persons should be assessed for their potential to expose a company to sanctioned persons or places.

Internal controls should be able to “identify, interdict, escalate, report (as appropriate), and maintain records for” prohibited activities. Useful internal controls include sanctions screening, geolocation tools, know your customer (“KYC”) procedures, and transaction monitoring and investigation to identify virtual currency addresses and other data associated with sanctioned individuals, entities, or jurisdictions. OFAC includes virtual currency addresses as identifying information for designated persons, so these should be used in screening as well.

Where a sanctions violation has occurred, OFAC can consider the remedial measures a company has taken as a mitigating factor in a penalty determination. Remedial measures can include adding and/or strengthening the tools listed above to fill gaps and repair weaknesses in the compliance program.

Testing and auditing procedures can include ensuring that screening and IP blocking are working effectively.

Companies should conduct trainings for relevant employees at least annually.

The best practices for the virtual currency industry are not new, nor are they unique to the industry. However, the recent guidance from OFAC indicates that the industry will be a particular focus for enforcement, and companies in the industry should implement these measures as soon as possible to the extent they have not already done so.

Ransomware

In addition to its guidance for the virtual currency industry, OFAC has issued an updated advisory and a joint press release with the Financial Crimes Enforcement Network (“FinCEN”) on the risks of making or facilitating ransomware payments. Virtual currency and ransomware are often linked, as many ransomware attacks include demands for payment in virtual currency (see our Harvard Business Review article and Cyber Bits website).

Ransomware transactions have averaged $100 million per month in 2021 and involved many dozens of ransomware variants, according to the press release issued along with the virtual currency guidance. A bill titled the Ransom Disclosure Act was recently introduced in both houses of Congress to require ransomware victims to report ransomware attacks and related payments to federal authorities.

The advisory also notes that there has been an increase in ransomware attacks during the Covid-19 crisis and warns individuals and companies of the risks associated with giving in to payment demands. OFAC has added the perpetrators of ransomware attacks and entities that facilitate ransomware transactions to its Specially Designated Nationals list; a U.S. person who transacts with either would violate sanctions. Facilitating a transaction with a sanctioned entity or a sanctioned jurisdiction is also prohibited. Under OFAC’s strict liability principles, a company that makes a ransomware payment to or for the benefit of a sanctioned person could be held liable for sanctions violations even if the company did not specifically know that the malign actor was sanctioned.

OFAC advised, however, that cooperating with OFAC and other U.S. government agencies and taking meaningful steps to reduce the risk of extortion by sanctioned actors will be considered significant mitigating factors in any OFAC enforcement response involving ransomware payments to sanctioned parties. These steps can include maintaining offline backups of data, developing incident response plans, instituting cybersecurity/phishing training, regularly updating antivirus and anti-malware software, and employing authentication protocols, among others. OFAC’s advisory notes that even if a company makes a ransomware payment in violation of sanctions laws, any associated enforcement action is likely to result in a No Action Letter or Cautionary Letter (which are non-public and do not involve monetary penalties) if the company has taken these mitigation steps.

Conclusion

OFAC is placing greater scrutiny on the virtual currency industry, especially in connection with ransomware payments. Industry members should be mindful of implementing and maintaining robust compliance measures early and often.



Source link

Related articles

Today's Currency Winner: The Japanese Yen – The Wall Street Journal

August 10, 2022

Africa: Cedi Still Worst Performing Currency in Africa – Depreciates 28.8 Percent to Dollar – Bloomberg

August 10, 2022

Related Posts

Today's Currency Winner: The Japanese Yen – The Wall Street Journal

by MtR
August 10, 2022
0

Today's Currency Winner: The Japanese Yen  The Wall Street Journal Source link

Africa: Cedi Still Worst Performing Currency in Africa – Depreciates 28.8 Percent to Dollar – Bloomberg

by MtR
August 10, 2022
0

The precarious situation of the cedi is not getting any better soon, as the local currency has recorded a -28.82...

Reserve Bank of Australia to Pilot Digital Currency, Explore Use Cases – Finance Bitcoin News

by MtR
August 10, 2022
0

The monetary authority in Australia is beginning research into the potential economic benefits of issuing a central bank digital currency....

The Currency Creek Bridge will have restoration and reinforcement works to ensure its longevity – Victor Harbor Times

by MtR
August 10, 2022
0

The Currency Creek Bridge will have restoration and reinforcement works to ensure its longevity  Victor Harbor Times Source link

Balance introduces Balance Compliance for Canadian MSBs dealing in virtual currency

by MtR
August 9, 2022
0

TORONTO--(BUSINESS WIRE)--Balance, Canada’s largest digital asset custodian, today unveiled Balance Compliance, a turnkey solution which streamlines regulatory compliance for FINTRAC...

Load More
  • Trending
  • Comments
  • Latest

Bank of England tells ministers to intervene on digital currency ‘programming’

June 21, 2021

Tips for checking smoke alarms during daylight saving time

March 12, 2022

GLOBAL MARKETS-U.S. stocks follow Europe up; Treasury yields rise, dollar firm

July 9, 2021

What will Durham County education bonds pay for? A full list

July 8, 2022
African currencies week ahead: Zambia's kwacha seen on back foot, Kenyan shilling up – Business Recorder

African currencies week ahead: Zambia's kwacha seen on back foot, Kenyan shilling up – Business Recorder

0
Maxum Foods releases Global Dairy Commodity Update for June

Maxum Foods releases Global Dairy Commodity Update for June

0
Letter: Perpetual bonds can help states fight hunger

Letter: Perpetual bonds can help states fight hunger

0
United Kingdom ETFs Are Riding the Re-Opening Momentum

United Kingdom ETFs Are Riding the Re-Opening Momentum

0

Investment in overseas real estate surges : The DONG-A ILBO

August 11, 2022

U.S. inflation CPI report, Wall Street, currencies

August 10, 2022

Alberta oil production set new record in first half of 2022

August 10, 2022

Industrial Lubricants Market to Reach $71 Billion by 2027.

August 10, 2022

Recent News

Investment in overseas real estate surges : The DONG-A ILBO

August 11, 2022

U.S. inflation CPI report, Wall Street, currencies

August 10, 2022

Alberta oil production set new record in first half of 2022

August 10, 2022

Categories

  • Asia
  • Bonds
  • Canada
  • Commodities
  • Cryptocurrencies
  • Currencies
  • Emerging Markets
  • ETFs
  • Europe & Middle East
  • IPOs
  • Latin America
  • Mutual Funds
  • Personal Finance
  • Real Estate
  • Retirement
  • Spending & Saving
  • Stocks
  • U.S. Markets
  • Privacy & Policy
  • About Us
  • Contact Us
  • Advertise with us

© 2021 Copyright Market-Reporter

No Result
View All Result
  • Home
  • Markets
    • U.S. Markets
    • Canada
    • Europe & Middle East
    • Emerging Markets
    • Asia
    • Latin America
  • Investing
    • Stocks
    • IPOs
    • Mutual Funds
    • ETFs
    • Bonds
    • Commodities
    • Currencies
    • Cryptocurrencies
  • Economy & Politics
    • Personal Finance
    • Spending & Saving
    • Retirement
    • Real Estate

© 2021 Copyright Market-Reporter