A recent finding revealed that about $1.7 billion was stolen from custodial services, cryptocurrency exchanges and in ICO exit scams during the previous year. This is a dramatic rise from the previous year before, despite the market shrinking. And according to the Q4 CipherTrace Cryptocurrency Anti-Money Laundering Report, that money needs to be laundered.
But the point to note here is that later this year, with the global wave of regulations going into effect, laundering cryptos will be increasingly harder to do. To further understand what this means,
Of the overall funds that were stolen in the previous year, the majority of them came from exchanges and other custodial services. When asked about this to Dave JevansCEO of CipherTrace and co-chair of the Cryptocurrency Working Group at the APWG.org, he said, “Many exchanges have only been operational for two years or less. They have not invested in the security technologies and practices needed to safeguard IT systems, employees, and critical data,” he went on to add, “These cryptocurrency companies are at risk of having a simple file of cryptographic private keys stolen that can give the hackers $30M to $500M in profit. These companies are immature in their security team funding, training and implementation.”
Dave Jevans believes that an enormous amount of infrastructure investment and education is needed in the cryptocurrency space to prevent such attacks. This includes strong anti-phishing measures including email authentication, cold storage of private keys, behavioral analytics and data sharing. He said, “The APWG can help with this.” He continues, “Two-factor authentication of employees and customers will also help, as well as the use of ephemeral instances to reduce attackers’ chances of getting into more machines outside the exchange.”
Dave Jevans is the founder and CEO of CipherTrace, a company that develops forensics, cryptocurrency AML, and blockchain threat intelligence solutions. Jevens holds 17 patents in cryptography and computer security. He’s also been correlating and tracking criminal activity with the price fluctuations of Bitcoin since 2011.
By the third quarter of 2019, a wave of new anti-money laundering and counter financing terrorism regulations will be coming into effect. This is expected to force unregulated custodians and exchanges in all major jurisdictions to become compliant.
These regulations are based on the international standards determined by the Financial Action Task Force. Financial Action Task Force is a Paris-based international organization to combat money laundering. The new Financial Action Task Force rules will apply to all the 38 member countries including the United States, Europian Union, and G20.
This means that all the onboarding customers will involve strict KYC or the business will be shut down or fined. Exchanges are also supposed to allow for monitoring of their services and to report any suspicious account activity. When asked about the regulation to Jevens, he said, “Criminals will increasingly be detected and rejected at compliant companies as regulations are enforced. This will force cybercriminals into the darker alleys of the Internet and the cryptocurrency ecosystem. They will be forced to use more advanced and esoteric services to launder their funds.” When asked for an elaboration, he told “Cybercriminals are trying to defeat anti-money laundering and crypto tracing technologies with techniques such as “crypto dusting” where they send 50,000 people a week a tiny amount of cryptocurrency that comes from a money laundering service, thus trying to taint the security tools that are used to detect it. Think of it as spamming people with dirty coins.”
WILL REGULATION SOLVE THE ISSUE?
When considering the number of lost funds, the lack of regulation is evident. According to another report which was out recently, about 60 percent of hacks is said to be carried out by just two groups.
When a question like, “Is regulation going down the right path? And what will be the state of cryptocurrency users who believe that they deserve privacy with financial transactions?”
Dave Jevans argues that “Regulation is going in the right direction with regards to protecting investors, companies, financial institutions, and governments. Concerning people who deserve privacy with financial transactions, you still have this.” Further, he went on to say, “The only transactions that are today tracked by governments are those over $10,000 or those that have ties to sanctioned individuals and governments, terrorists, and known money launderers. New regulations on cryptocurrencies do not change this.” He also commented “The cryptocurrency markets are growing, getting more secure, and becoming an attractive place to invest in 2019. A lot of the scams, frauds and technically poor operations and ICOs have been weeded out, or will be soon. Regulations make for a more orderly and safe market for everyone. This is coming, and it is a good thing.”
WHAT ABOUT BANKS AND THE ISSUE OF MONEY LAUNDERING?
There are also plenty of incidents of money laundering in traditional banks. A recent one was the episodes that happened in Deutsche Bank.
When asked about this to Dave Jevans, he says “Crypto gets a hard time because it is a new form of non-governmental currency, it has little regulation, and as a percentage of money transferred, it still has a high rate of international criminal use. SWIFT handles about $1.25 quadrillion dollars per year of transfers. About $5 trillion per day of traditional inter-bank funds transfer. So a $250B banking money laundering case that spans multiple years is a tiny fraction. If you want to launder $250 Billion, you should use banks.” He also added “Bitcoin, on the other hand, is more closely measured with credit cards for fraud and value transferred. Bitcoin moves about $8B per day, and Mastercard moves about $11B per day. However, Bitcoin and other cryptocurrencies, despite approaching the major credit card networks in value transfers, does not have the same security and anti-fraud controls. So as the industry matures in 2019 and the coming years, we can expect cryptocurrencies to be much more in line with the anti-fraud and anti-money laundering numbers that we see in credit card networks and bank payment systems.”
WHAT ABOUT TRADITIONAL MONEY LAUNDERING?
Conceptually speaking isn’t it harder to launder cryptocurrency, since two-thirds of the bills are outside the US. Addressing this “It is much easier to launder cryptocurrencies on an international scale than to launder small-to-mid sized amounts of USD. This is because laundering smaller amounts of crypto internationally can be done through a myriad of services, exchanges, currency shifting services, digital walla networks, decentralized exchanges, etc.” Further Dave Jevans explained that “Smaller amounts are much more easily laundered through cryptocurrencies. But large amounts are better laundered through sophisticated schemes that use existing fiat banking systems.”
HOW DOES FUTURE OF CRYPTO SECURITY LOOK LIKE?
To the question of how Dave Jevans looks at the future of security in crypto apart from AML regulation, he answered “Nation states will launch their cryptocurrencies. Nation states will exploit cryptocurrencies for evasion of sanctions. And privacy-oriented coins will need to consider AML/KYC requirements and get them implemented into their protocols.”