InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
DFPI shares trends in consumer crypto complaints
DFPI recently published a report on consumer crypto-related complaints collected through its new online complaint portal. According to the third-quarter 2023 CSO report, some of the most common complaints include (i) consumers being scammed into transferring digital assets from a legitimate crypto account to a fraudulent platform; (ii) consumers losing access to funds after transferring to an unknown wallet; (iii) consumers who invest in sham crypto investments by sending US dollars to a scammer’s platform, wallet, or bank; (iv) consumers making additional investments to scammers after receiving the first and only return; (v) consumers with concerns regarding their account activity on legitimate crypto platforms; and (vi) consumers approached by scammers via text message and social media. DFPI shared tips on how consumers can protect themselves against scams as well, noting that “[i]f it seems too good to be true, it probably is.”
DOJ seizes $9 million in crypto from criminal scammers
On November 21, the DOJ seized nearly $9 million in stablecoins from cryptocurrency scammers after the criminals exploited over 70 victims. The DOJ seized stablecoins, a certain crypto asset pegged to a central bank’s currency, tied to the U.S. dollar. The scammers employed a long-con technique called “pig butchering” which is a tactic to build and exploit a victim’s trust over time by creating fake romantic enticements meant to swindle victims into handing over money. The criminals targeted and convinced victims to “make cryptocurrency deposits by fraudulently representing that the victims were making investments with trusted firms and cryptocurrency exchanges.”
The DOJ was able to trace the stolen funds based on the funds’ cryptocurrency addresses as part of a money laundering technique known as “chain hopping… used to ‘layer’ the proceeds of criminal activity into new cryptocurrency ecosystems, all to obfuscate the… ownership of those proceeds.” The DOJ worked with the U.S. Secret Service to trace the victim’s deposits, and it was originally alerted from victim reports made on the FBI’s Internet Crime Complaint Center and the FTC’s Consumer Sentinel Network.
SEC charges crypto firm for failing to register and mitigate risk factors
On November 20, the SEC filed a complaint in the U.S. District Court of the Northern District of California against a crypto trading platform, which allows customers to buy and sell crypto assets through an online market, for allegedly acting as an unregistered securities exchange, broker, dealer, and clearing agency. The SEC is also claimed defendant’s business practices, internal controls, and recordkeeping were inadequate and presented additional risks to consumers, that would also be prohibited had defendant been properly registered with the commission. For instance, the SEC cited practices including commingling billions of dollars of consumers’ cash and crypto assets with defendant’s own crypto assets and cash, which defendant’s 2022 independent auditor identified as “a significant risk of loss."
Director of the SEC’s Division of Enforcement, Gurbir S. Grewal said, “[Defendant’s] choice of unlawful profits over investor protection is one we see far too often in this space, and today we’re both holding [defendant] accountable for its misconduct and sending a message to others to come into compliance.”
The SEC seeks to (i) permanently enjoin defendant from violating Section 5 and section 17A of the Exchange Act; (ii) permanently enjoin defendant from offering or selling securities through crypto asset staking programs; (iii) disgorge defendant’s allegedly illegal gains and pay prejudgment interest; and (iv) impose a civil money penalty.
IOSCO releases report advising country regulators on crypto asset regulation
On November 16, the International Organization of Securities Commissions (IOSCO) released a report titled “Policy Recommendations for Crypto and Digital Asset Markets” for centralized financial bodies to put forth parallel, global policies on crypto assets, including a country’s stablecoin.
IOSCO’s report aims to protect retail investors from illegal crypto-asset market activities, including regulatory non-compliance, financial crime, fraud, market manipulation, and money laundering that have led to investor losses. The report puts forth 18 policy recommendations summarized within six key themes: conflicts from firms doing too much at once; market manipulation, insider trading, and fraud; cross-border risks and regulatory cooperation; operational and technological risks; and retail access, suitability, and distribution. ISOCO maintains its principles on global regulation are within the “same activities, same risks, same regulation/regulatory outcomes.” IOSCO also mentioned it plans on releasing a second report on decentralized finance before the year’s end.
NYDFS introduces guidelines for coin-listing and delisting policies in virtual currency entities
On November 15, NYDFS announced new regulatory guidance which adopts new requirements for coin-listing and delisting policies of DFS-regulated virtual currency entities, updating its 2020 framework for each policy. After considering public comments, the new guidance aims to enhance standards for self-certification of coins and includes requirements for risk assessment, advance notification, and governance. It emphasizes stricter criteria for approving coins and mandates adherence to safety, soundness, and consumer protection principles. Virtual currency entities must comply with these guidelines, requiring DFS approval for coin-listing policies before self-certifying coins, and submitting detailed records for ongoing compliance review. The guidance also outlines procedures for delisting coins and necessitates virtual currency entities to have an approved coin-delisting policy.
As an example under coin listing policy framework, the letter states that a virtual currency entity risk assessment must be tailored to a virtual currency entity's business activity and can include factors such as (i) technical design and technology risk; (ii) market and liquidity risk; (iii) operational risk; (iv) cybersecurity risk; (v) illicit finance risk; (vi) legal risk; (vii) reputational risk; (viii) regulatory risk; (ix) conflicts of interest; and (x) consumer protection. Regarding consumer protection, NYDFS says that virtual currency entities must “ensure that all customers are treated fairly and are afforded the full protection of all applicable laws and regulations, including protection from unfair, deceptive, or abusive practices.”
Similar to the listing policy framework, the letter provides a fulsome delisting policy framework. The letter also stated that all virtual currency entities must meet with the DFS by December 8 to preview their draft coin-delisting policies and that final policies must be submitted to DFS for approval by January 31, 2024.
Bank of England and Financial Conduct Authority seek feedback on stablecoin regulatory proposals
On November 6, the Bank of England and the Financial Conduct Authority (FCA) requested feedback on their proposal to regulate a form of cryptocurrency known as stablecoins. Stablecoins are a cryptoasset that “maintain a stable value relative to a fiat currency by holding assets as backing” and fall within the UK Government’s plan to regulate them for future retail payment use. In addition to retail use, the Bank of England and FCA’s wish to regulate stablecoins is meant to “prevent money laundering… and safeguard financial stability.”
The Bank of England published a handy road map with similar regulators on how to best navigate rolling out new technological payment innovations, such as the digital pound. Each of the financial regulators provided two white papers: (i) the FCA’s discussion paper outlines how the FCA can regulate cryptoassets under the Financial Services and Markets Act 2000, including providing information on backing assets, custody requirements, and allowing overseas stablecoins used as a form of tender in the UK; and (ii) the Bank of England’s discussion paper examines proposed regulations for sterling-dominated stablecoins in the hopes of becoming widespread for retail use. Furthermore, this paper details proposed regulations for everyday use, including money transfers and providing digital wallets.
Both regulators’ comment period is open until February 6, 2024.
CFPB proposes a rule to regulate fintech firms like banks
On November 7, the CFPB proposed a rule to supervise large non-bank fintech firms that offer services like digital wallets and payment apps, applicable to larger firms handling greater than 5 million transactions per year, in the same way many large banks and credit unions are supervised. While fintech agencies offer consumer banking services, they are not regulated as stringently as banks are.
The CFPB found that many consumers from middle- and lower-income backgrounds now prefer using digital consumer payment applications over cash. This shift from traditional banking puts consumers at risk since fintech applications are not subject to “traditional banking safeguards… like deposit insurance.” The CFPB’s proposed rule ensures these non-bank companies:
- Adhere to federal consumer financial protection laws that encompass protections against unfair, deceptive, and abusive practices, consumers’ rights when transferring money, and privacy rights. The CFPB would supervise larger participants to ensure compliance.
- Follow the same rules as banks and credit unions, fostering fair competition and consistent enforcement of federal consumer financial protection laws.
The Consumer Financial Protection Act (CFPA) provides the CFPB with the authority to conduct supervisory examinations over all non-bank companies in the mortgage, payday loan, and private student loan industries, as well as those who serve as service providers to banks and credit unions. In addition, the CFPB can supervise individual entities that pose a risk to consumers, as well as larger participants in other markets. This proposed rule would give the CFPB greater regulatory authority and oversight over large technology firms in consumer financial markets.
UK Government finalizes cryptoasset guidance with financial promotions
On November 2, the UK Financial Conduct Authority (FCA) finalized guidance informing individuals and firms regarding the communication and promotion of cryptoassets. The final guidance follows a consultation period that closed on August 10.
In UK law, Section 21 of the Financial Services and Markets Act 2000 prohibits any person from, in the course of business, communicating a financial promotion – an invitation or inducement to engage in investment activity – unless such person is an authorized person, the content is approved by an authorized person, or another exemption applies. The guidance describes the application of the financial promotion oversight regime to “qualifying cryptoassets” and expresses the expectation that all “cryptoasset financial promotions must be fair, clear and not misleading.”
The guidance reiterates that it “does not create new obligations for firms but relates to firms existing regulatory obligations” and that persons and firms that act in accordance with the guidance will be considered “as having complied with the rule or requirement to which that guidance relates.”
UK Government to regulate cryptoassets more strictly under a new regulatory regime
On October 30, the HM Treasury of the UK Government released a report titled “Future Financial Services Regulatory Regime for Cryptoassets,” confirming its plans to regulate digital assets more strictly. The regulatory framework includes descriptions of requirements for the admission of digital assets to a trading venue, including disclosure documents. To make cryptocurrencies subject to the FCA’s rule-making powers, the HM Treasury expanded the definition of “specified instruments” to include digital currencies, but not its definition of “financial instrument.”
The UK Government created the report based on stakeholder feedback on an extensive survey on cryptoassets. The report summarizes responses to 51 survey questions and provides explanations regarding the UK government’s intentions to proceed with the framework. The report outlines how the UK can attract more crypto businesses while also protecting consumer interests. Topics include, among other things, (i) confirmation that the proposed regime does not intend to capture activities relating to cryptoassets which are specified investments that are already regulated; (ii) information regarding the future FCA authorization process for cryptoasset activities; (iii) the UK government’s support for the use of publicly available information to compile appropriate disclosure and admission documents; and (iv) acknowledgment of the potential need for a staggered implementation for cross-venue data sharing obligations. The report recognizes the rapidly evolving nature of the crypto sector and emphasizes that “the government continues to consider that developing a fully bespoke regime outside of the FSMA framework would risk creating an un-level playing field between cryptoasset firms and the traditional financial sector.”
Any legislative changes in response to this report on how the UK Government regulates cryptoassets will occur in 2024, “subject to Parliamentary time.”
FinCEN announces NPRM for new regulation to combat CVC mixing
On October 19, FinCEN announced a notice of proposed rulemaking (NPRM) that identifies international Convertible Virtual Currency mixing (CVC) as a primary money laundering concern. In its NPRM, FinCEN highlighted the prevalence of illicit actors, including Hamas and Palestinian Islamic Jihad, who use CVC mixing to fund their illegal activity, and how increased transparency can combat their efforts. According to FinCEN, CVC mixing is used to conceal the source, destination, or amount involved in transactions. The proposed rule would require covered financial institutions to collect records of, and report suspicious CVC mixing transactions, as defined, to FinCEN within 30 days of initial detection. The proposed rule would not require covered financial institutions to source additional report information from the transactional counterparty, adding that the information required for the report is similar to information already collected by financial institutions. FinCEN also noted this is its first ever use of its authority under Section 311 of the USA PATRIOT Act.
FinCEN invites comments for the proposed rule, including responses to questions addressing the impact of the proposed rule, definitions, reporting, and recordkeeping. Comments must be received by January 22, 2024, and they can be submitted via instructions found in the announcement.