As credit unions continue to grapple with a growing mountain of costly and complex financial regulations as well as an evolving digital ecosystem, they have been ramping up their investment in regulatory technology (RegTech) solutions.

Determining which AML compliance solutions make the most sense for a specific credit union, however, can be a challenge. Over the next four years, the global RegTech industry is expected to reach $16 billion. While there are many established players already in the market, this growth is in large part driven by a rising wave of new RegTech innovators. These companies are harnessing advanced technologies to address a wide range of issues in addition to AML compliance, such as data and network security, user experience, the increasing demand for faster digital transactions, affordability and ease of integration.

RegTech has become mission critical among credit unions seeking support in their AML/CFT compliance efforts. Earlier in this series, we examined the ways in which modern Credit Unions need to rethink their approach to AML/CFT compliance as well as the unique challenges they will face in the process. The distinct path awaiting Credit Unions towards an accurate, cost-effective, and nimble AML compliance regime requires that they look beyond many of the established vendors.

Credit unions do not operate in the same way as banks do. They have their own unique structure, mission, and set of needs. RegTech platforms that prioritize affordability, accuracy, customization, support, and ease of use are better suited to these financial institutions.

Heading into the future, partnerships with RegTech vendors can help to make credit unions more adaptable and competitive in a changing financial services landscape. Many small and mid-sized credit unions today face two options: either adapt to changes in regulation, technology, and financial market trends or be absorbed by a bigger financial institution. Though the Covid-19 pandemic initially slowed down M&A activity among credit unions, all signs indicate that M&As will increase in 2021.

Having smart, customized AML compliance solutions in place is a necessary growth strategy for today’s credit unions. In fact, it could end up being one of the most significant factors in the fundamental viability of the credit union model going forward.

In this final article of our series on AML compliance among credit unions, we will look at three core RegTech solutions that are putting these financial institutions back on the financial services playing field.

3 Smart AML Compliance Solutions for Today’s Credit Unions

A solid AML/CFT credit union compliance program will depend on some combination of three core services:

Moving from Big Data to Smart Data

AML compliance begins with screening clients as part of customer due diligence (CDD). A good sanction, PEP, and adverse media screening program begins with great watchlist data.

Most AML compliance data vendors build and promote BIG DATA. However, when it comes to a given database, bigger isn’t necessarily better. The problem with big data is that it is often full of junk and bloated with duplicates. This unnecessary, incomplete, or unwanted information creates added work for AML compliance staff who must manually reconcile and clear the excessive false positives. Financial institutions typically end up over-engineering their screening systems to deal with junk data to strike a balance between an “acceptable” number of false positives with their efforts to avoid missing true positives.

The beginning of modern KYC and sanctions screenings still starts with sanctions lists, but now extends to other watchlist data, including PEP (politically exposed persons), RCA (relatives and close associates of politicians), HIO, Regulatory Authority, Negative News, and more. These lists are constantly evolving, while sanctions are becoming more complex and the number of regulatory bodies are growing. For credit unions working with limited resources, this big and constantly changing data pool must be augmented and transformed by SMART data systems prior to consumption for screening. SMART DATA leads to INTELLIGENT SCREENING. Solving the data problem is the most effective way to enhance a credit union’s AML compliance program.

For this reason, KYC2020 developed VisionIQ, the most comprehensive, advanced, and affordable watchlist database on the market with access to over 1000 watchlists and over 10,000 automatically updated news sources from more than 200 countries. The VisionIQ data advantage is not just that the data is comprehensive so that a credit union never misses a relevant true positive, but that we spend a great deal of time to make it SMART so that our clients are not dealing with endless false positives.

For a credit union to be served the right data to suit their risk profile, VisionIQ is powered by advanced technologies, such as artificial intelligence (AI) and natural language processing (NLP).

Data is structured and organized to make it easy to selectively group watchlists for different risk profiles and screening criteria. Data is de-duplicated and cross-linked across watchlists to better resolve the data into personas. Data, especially PEP and RCA data, is further augmented by name and entity recognition in relevant adverse media. Personas are also tagged with aliases, common name variants and misspellings to reduce fuzzy search errors and false positives. Plus, we have added machine learning (ML) to the mix which makes the data, and by extension the AI-based compliance system smarter over time.

Best of all, we have priced VisionIQ with smaller financial institutions in mind. Data does not have to be so expensive, and credit unions do not have to compromise quality for good data.

Smart Sanction Screening Solutions

Sanction screening is an integral part of KYC and AML/CFT compliance. Sanction screening systems are designed to protect financial institutions from high-risk customers and help to ensure the integrity of the financial services sector. But it does not stop with just sanction screening. Today, financial institutions must screen for PEP, criminal, and even negative news.

Aside from the risk of regulatory fines, credit unions must think about their reputation. Nothing will ruin a credit union’s reputation faster than being tied to a rogue member or an employee who has generated negative publicity. Where a financial crime was committed, the financial institution’s ties may be made public, creating a reputational crisis. The credit union may be deemed guilty by association, with members questioning the integrity of the credit union itself even if it has done nothing wrong.

For example, corruption among public employees, such as politicians, government officials and their associates is on the rise. As part of their customer due diligence obligations, banks and financial institutions must establish and report whether their clients are Politically Exposed Persons (PEP) and at risk of being involved in financial crimes, like money laundering, or are associated with a predicate offense as reported in the news.

A great KYC sanction screening solution for CDD begins with an exhaustive watchlists and negative news database. However, even the best compilation of data and news sources is useless without an intelligent search and scoring engine that works to minimize False Positives, while helping to ensure that True Positives are discovered.

KYC2020 SmartScan is the best in class sanction, PEP and negative news screening and scoring service that integrates automation, AI and NLP for big and small credit unions alike with flexible price plans to suite any budget.

SmartScan gives credit unions the smarts and sophistication of an enterprise sanction screening solution while avoiding all the cost and complexity. It is available as SaaS solution or OnPrem deployment. Plus, we have developed an extensive API Library for easy integration with in-house systems and workflows.

From Screening to Decisioning

Despite all the advances in technology, sanction screening still requires a significant amount of manual intervention that can dramatically slow down and disrupt the customer verification and on-boarding processes. There are generally four main hurdles to overcome:

1. False Positives. The best systems still yield 5-7% false positives that must be cleared manually by a compliance officer.
2. Record keeping. Compliance best practices require the storing and organizing of auditable documentation for minimum of 5 years. The administrative effort and resources needed to fulfill this requirement are high, costly, and can lead to expensive inaccuracies.
3. Long On-boarding Times. Sanction screening plagued by over-engineered systems, depends even more on manual interventions that are not only slower, but prone to mistakes and discrepancies. This results in a slow customer verification and on-boarding process.
4. Ongoing Monitoring. Constantly changing data means regular and recurring screening of customers. Depending on your risk-based approach, this could mean quarterly, weekly, or even daily screening. A poor screening system invariably leads to an inaccurate and ineffective batch monitoring program.

Traditional sanction screening solutions are designed to filter a set of watchlists. The search results are then manually exported for review. To stay relevant and competitive, credit unions must move from screening tools built around integrated manual workflows to stand-alone decisioning systems that automatically clear false positives to yield actionable screening decisions. All this in near real-time, with a human readable and audit friendly decision proof-of-work file, and without requiring manual effort.

Manual-centric AML compliance systems are by nature reactive. When processes are dependent on manually clearing a mountain of false positives and routinely tie up a large amount of resources, credit union leaders can feel like they are never in control.

On the other hand, a smart, automated sanction screening decisioning system can render 95% of all verification decisions automatically within a 60-second response time and a low decision error rate. For records that require manual screening, they can be sent within minutes to compliance officers, who should have all the info they need to take immediate action.

With DecisionIQ, we put credit union AML compliance teams back in the driver’s seat. We take a risk-based approach coupled with the best watchlist data and latest technologies in search, scoring, AI, NLP, and decision systems. Automated clearing dramatically speeds up on-boarding while reducing wasteful manual work. Each decision is accompanied by a rational proof-of-work file that is securely stored. All case management and AML officer reviews can be done electronically, and best of all, our highly intelligent monitoring system actively tracks watchlist data changes, automatically re-scans impacted customer records, and only send an alert when appropriate. This means no more manual redundant reprocessing of customer batch files in the name of ongoing monitoring!

No Need to Go it Alone

Credit unions do not have to figure out the best AML compliance system on their own, nor should they resort to requiring staff to multi-task between their regular roles and AML/CFT compliance efforts. Our qualified CAMS and VSkills certified specialists have experience working with credit unions and can help with a range of compliance needs, from revamping an AML system or tailoring our products to fit established workflows.

In Closing…

Smart data and automated decisioning promise to be a fundamental part of AML compliance among all financial institutions in the future. Credit unions, however, require smart AML compliance solutions that suit their unique structure, workflow, transactional needs and budget. Such systems are more than just a way for credit unions to stay AML compliant. They are necessary growth strategy that can keep them competitive in the years ahead.

Want to learn more about how KYC2020 solutions can help your financial institution? Contact us here or send us an email at sales@kyc2020.com.

KYC2020 is also not alone in the world of RegTech innovation. To find out more about other 2021 innovators, check out the RegTech100 list.

.

Anti-money laundering (AML) compliance has always been a significant burden to credit unions. But as the new year gets underway, fulfilling the regulatory requirements against financial crime may be all the more daunting.

Over the past few years, consumers and a growing range of business clients have been seeking faster banking, more convenient access to their accounts and quicker funding decisions. But credit unions have been stuck treading water in the rising wave of new and existing financial regulations, while risks of default, fraud and other types of cybercrime continue to mount.

Historically, AML compliance and regulation did not apply to credit unions in the same way it has to larger banks and traditional financial institutions. However, as digital commerce goes mainstream among credit unions and they open the door to under-served, yet higher-risk businesses, recent changes to BSA/AML compliance have been shifting this dynamic.

Understanding the Challenges in Credit Union AML Compliance

In the first article of this series, we looked at the four critical pillars of AML/CFT compliance among credit unions. In this second article, we’ll now examine the five biggest obstacles that are standing in the way of an accurate and effective compliance program.

Balancing Accuracy and Speed

Regulatory authorities have been charging hefty fines to financial institutions that fail to meet all the compliance requirements of AML, KYC, and BSA. In fact in 2020 alone, financial institutions across the world have been penalized with a staggering $10.4 billion in fines and penalties.

The continual screening, monitoring, recording and reporting requirements is a resource-intensive business process for even the biggest financial institutions. Big banks, however, can afford to throw people and money at the process, and they can more easily absorb the financial “hiccups” along the way.

With smaller financial institutions there is a struggle to balance accuracy and speed while fulfilling ALM/CFT compliance regulations. Many credit unions still employ legacy systems that rely on a significant amount of manual activity and action.

Not only are these systems expensive to run, maintain and upgrade, but they are incredibly inefficient, too. The reliance on manual, repetitive procedures increases the chance of mistakes and omissions, and onerous reporting and auditing requirements frequently tie up employee time and attention. Moreover, senior leaders continue to invest significant time and money into cybersecurity and compliance rather than strategic initiatives and goals.

Making Informed, Smart Data-Driven Decisions

This leads us to a rather strange paradox: Many financial institutions already understand that in order to comply with anti-money laundering, fraud and data security regulations, they need the assistance of automated software. A number of credit unions have already done the research and plugged the best tools into their system. But instead of improving performance, their compliance efforts are impeded.

There are two main reasons for such an outcome. The first issue involves the synergy between automation, AI, and machine learning on one side with human decision-making, input and due diligence on the other side. Relying too heavily on manual operations opens the door to inefficiencies and inaccuracies. But, an over-reliance on the results of AML detection and risk assessment solutions, can lead to a disproportionate amount of false positives and negatives– the effects of which can be catastrophic for both the credit union and its members.

The second issue can be traced back to bad data. Global watchlist data, especially PEP, RCA, HIO, is unstructured, impractical and “ugly.” Though it’s a real challenge to aggregate and standardize, it is mis-information to think that it’s a “big data” problem. The race to bigger databases leads to lack of quality in the data itself. Credit unions would be wise to start with quality data such as VisionIQ Global Watchlist Database where the data philosophy is compliant, comprehensive, and smart versus big, getting bigger, and becoming dirtier.

For these reasons, it’s not uncommon for an AML system to generate a high proportion of false positives. We’re talking about 80 to 90 percent of alerts. If a credit union blindly acts on a suspicious activity alert and files a SAR on a client, yet the client’s transaction activity was actually legitimate, it can lead the financial institution down a rather destructive path.

The member client will now become subject to frequent review. Each review will scrutinize the customer’s financial activity. If the suspected suspicious activity happens again, the credit union could decide to close all associated accounts. Multiple SARs could also attract the interest of law enforcement and eventually lead to an investigation. An initial query by internal AML investigators can easily de-risk a client who is making legitimate transactions and save a tremendous amount of time, money and headache.

On the other hand, if credit unions are not diligent enough in monitoring transactional activity and paying attention to other red flags, they become complicit with the illegal activities of the clients in their watch. Many compliance and risk assessment monitoring systems are equipped to mitigate risk on behalf of the financial institution. Credit union leaders would do well to keep in mind that although these solutions are getting better with time, the techniques and strategies criminals are using to cover up fraudulent behavior are, too.

Working with MSBs and “High-Risk” Entities

With increasing regulatory scrutiny on large financial institutions, many high-risk clients, such as money services businesses (MSBs) and marijuana-related companies, are turning to credit unions for their banking needs.

Some of these high-risk organizations may indeed be involved in money laundering and other financial crimes. Small institutions are preferred targets for such operations since they tend to have less regulatory oversight and compliance processes in place.

Consider, for example, a large MSB. A money services client can generate significant transaction volumes that could overwhelm a small credit union. Yet to ensure compliance with the KYC and BSA regulations, a credit union must continue to assess the risks posed by this client, closely monitor activity, report any unusual behavior, and implement a range of added controls to manage any exposure to risk. This includes continuously monitoring media for relevant negative news on their customers and members.

Such AML compliance measures may often be at odds with providing a good customer experience to high-risk credit union members, but are necessary. Fast, sophisticated, affordable, and low-friction regulation technology solutions can be a boon to help balance both goals. For example, as it relates to negative news screening, our Adverse Media Check ®, relies on AI, Machine Learning, and Natural Language Processing to continuously monitor thousands of relevant global news sources to create a persona database of individuals, companies, and politically exposed persons (PEPs) for relevant negative news. But we don’t stop there, the results are then fed into a AI-based decisioning system to clear false positives and identify risk. More about this and other market solutions in our final article in this series.

Mitigating Data Security Threats

As incidents of cyberattacks continue to evolve and grow, small and mid-sized credit unions face a greater threat in a sense than the largest enterprises due to their tighter budgets and access to fewer resources. Compromised customer data typically leads to fraud, stolen identities, and more. Solving for AML compliance should not be at a cost of compromising customer data.

Only sustainable data security best practices will help credit unions stay BSA/AML compliant while keeping their data and networks safe. Specifically, credit unions must now have controls in place to protect the security and confidentiality of member records, respond to and report security breaches in a timely manner, and maintain vital data helpful in identifying the source of cyber criminal behavior.

Maintaining a Positive Customer Experience

Customer expectations for fast, seamless banking create two competing priorities for financial institutions: staying AML compliant and keeping customers happy. Slow on-boarding, false positives, and cyberattacks will certainly compromise that experience.

Credit unions are known for their customer service towards members and it is a big reason why clients would choose to bank there. According to a recent PwC report, speed, convenience, helpful employees and friendly service is important for more than 70% of banking consumers, and positive customer experiences influence 75% of customer decisions in banking. Satisfied credit union members are loyal customers who will increase the scope of their relationship and recommend their credit union to others.

In short, AML/CFT compliance has always been a complicated, resource-intensive process for credit unions, and all signs indicate that it will only get more challenging in the years ahead. But, credit unions don’t have to go through this process alone. A number of regulation technology innovators can help credit unions stay compliant, even with evolving threats, while maintaining the level of quality service they are known for. At KYC2020, we have a history of working within the credit union space. We understand the unique challenges credit unions face on a daily basis and offer local solutions.

In the last article of our AML for credit unions series, we’ll examine some of the many solutions that are giving credit unions the technological edge they need to both stay compliant and expand their operations.

.

….

.

Over the past few years complying with anti-money laundering (AML) regulation has become increasingly difficult for many credit unions in the United States and Canada. With the rapid expansion of new technologies, industries, business models and cross-border transactions, regulators have ramped up their AML compliance demands.

While big banks have their own AML departments and are investing big bucks in their digital infrastructure, smaller credit unions generally lack the funds and other resources to keep up with it all. This shortfall in turn becomes a major impediment to complying with AML/CFT regulations.

In this three-part series we are going to take a closer look at AML/CFT compliance among credit unions. Specifically, we’ll examine the current cost of not being able to comply, some new compliance challenges and threats, the most essential elements that today’s credit union AML/CFT compliance programs need to have, and the easiest, most cost-effective solutions to actualize such changes.

The High Cost of AML/CFT Compliance

In a recent survey by CU Service Network of over 60 executives from credit unions ranging in size from $30M to $1.6B in total assets, a whopping 98% identified compliance as being their primary operational concern.

It’s not hard to see why. According to another study, this time from the Government Accountability Office (GAO), US credit unions spent up to 2.4% of their total 2018 operating expenses on AML/BSA compliance.

For smaller credit unions that percentage is likely higher since they do not have the same economies of scale or investment in IT infrastructure that bigger credit unions enjoy.

Yet, these numbers still don’t accurately reflect the true cost of compliance among credit unions.

At KYC2020, we offer consulting services to our clients to help them develop and employ a customized AML compliance program. During the risk assessment and workflow analysis, we will consider numerous indirect costs that may increase risk while reducing efficiency. For example:

• When first-line staff are tasked with duties related to regulation, reporting and record-keeping requirements that add to their regular responsibilities. This takes them away from their regular jobs and makes them less efficient.

• When compliance programs rely heavily on manual and repetitive procedures. This increases the chance of errors and omissions. Even small errors, such as incorrectly labeling a document, can lead to fines and costly downtime.

• When the credit union’s senior leaders are pouring majority of their time and money into cybersecurity and compliance rather than strategic initiatives and goals. This lack of strategic focus can lead to missed opportunities.

On the other hand, when credit unions are unable to prevent fraud and money laundering activities, they will inevitably suffer from declining revenues, lack of customer satisfaction, debilitating fines, and damage to their reputation.

It doesn’t have to be this way! There are proven methods for credit unions to get back all the wasted time and money.

The most successful credit union leaders are those who seek to understand the role that effective compliance management plays in the institution’s overall strategy. They make an effort to consider the impact of compliance on operations as well as customer acquisition and retention. Finally, they recognize their unique needs and circumstances and then implement the most appropriate tools to help them optimize their compliance activity.

By doing so, these leaders will be best positioned to help their credit unions grow and prosper, now and in the future.

Rethinking Credit Union AML Compliance

As the financial services industry continues to evolve and expand and new compliance rules emerge, many credit unions have been content to simply make tweaks to their current compliance programs, policies and procedures. This only leads to greater inefficiencies over time.

Instead, senior leaders need to completely rethink how compliance happens along four key verticals:

1. Conducting an Audit and Risk Assessment

Risk assessment is a pillar of AML compliance and generally is a crucial first step in building an effective AML/CFT program. Yet, many senior management teams get derailed when they try to rubber stamp a solution or a mix of solutions on to their legacy systems.

The problem with this is that there is no one-size-fits-all solution to fulfilling compliance requirements. While each financial institution must fulfill certain legal obligations, it is essential that the program be tailored to their unique needs in addition to the identified risks and vulnerabilities of their clients and third party suppliers

In practice, this means that an AML/CFT program must take into account factors related to their product and service offerings, their size and geographic location of the branches, the business activities, and knowledge of its customers activities.

Finally, another often overlooked factor is the ability to scale and adapt as the credit union matures and grows. A credit union’s AML/CFT program should have the built-in flexibility to adapt to changes in compliance requirements, technology, and its target market while maintaining strict data security and information management controls.

2. Establishing Internal Controls

A credit union’s compliance obligations include not only federal and state laws, but also the expectations of regional, and at times, international regulators. For example, the General Data Protection Regulation (GDPR), which requires businesses to protect the personal data and privacy of European Union citizens, could apply to a credit union with members from multi-national businesses.

Few credit union leaders would fail to acknowledge that their AML/CFT compliance program should focus on internal controls and systems to detect and report financial crime. But at the same time, several other items should be taken into consideration based on the modern realities of AML/CFT programs today. These include:

• The increasing number of mobile payments that significantly reduce financial transaction times.

• The impact of customer experience and expectations on revenues and customer retention. A recent study conducted by Forrester, revealed that customer experience is the most highly valued quality consumers are looking for in a financial institution. Many studies show the same results for business customers too.

• Cybersecurity and financial fraud have grown in scope and complexity in recent years. Fraudulent activity is getting increasingly more difficult to recognize and contain. When suspicious activity is identified, the response needs to be data-driven, intuitive, and happen in real-time.

3. Providing Continual Employee Training and Education

AML/CFT compliance always extends to a credit union’s employees. In fact, employees tend to be the weakest link in data security and compliance procedures. Staff members need to be aware of their roles and responsibilities within the system. They should know how to conduct due diligence and navigate the various organizational policies and procedures that help to ensure on-going compliance.

But given that compliance should be a dynamic system, employee compliance training and the communication of new systematic threats must also be dynamic and dealt with swiftly before becoming too much to bear.

4. Monitoring the Results

Although AML/CFT compliance programs require and independent review, the credit union should also involve a regular internal review of compliance controls in order to measure their effectiveness not just in meeting compliance standards but in achieving strategic business goals. Identifying the institution’s strategic goals while focusing on compliance is a core competency that will drive success among today’s credit unions.

In short, today’s credit unions are in need of dynamic and customized AML/CFT compliance programs. Achieving such a goal is actually easier and more cost-effective than it seems given the rise in regulation technology (RegTech) and vendor based compliance solutions.

Before we can take a look at these vendor based solutions, we need a deeper understanding of the challenges credit unions are currently facing when it comes to AML/CFT compliance.

We’ll discuss that in part two of this series.

About the Author

KYC2020 is a Chicago-based global regulation technology company.  KYC2020’s team of CAMS certified AML specialists have combined next-generation technology with their deep understanding of Banks, MSBs, Credit Unions, and Cryptocurrency operations to deliver compliant AML solutions that are low friction and cost effective. KYC2020 is recognized as one of the world’s most innovative regulation technology solution providers by RegTech Analyst magazine.  To learn more about the author, visit www.kyc2020.com