BID® Daily Newsletter
Mar 9, 2018

BID® Daily Newsletter

Mar 9, 2018

Mullets And BSA/AML Scrutiny

Summary: A recent survey of compliance officers provides insight for your next regulatory exam.

The Beastie Boys are credited with coining the terms mullet and mullet head. This short in front and on sides but long in the back haircut is certainly something to behold. So, we wonder how you feel about it. Well, if you live in the small town of Kurri Kurri, Australia, you most likely will be celebrating the mullet and proudly wearing one. The town has a festival with a contest for the best everyday mullet, the best grubby mullet and then of course, the best women's mullet. You may not be incentivized to be creative with your next haircut, but it might be something to think about if you are traveling down under.
At your bank's next regulatory exam, you're not likely to see any mullets. Instead, you are more likely to see increased scrutiny, especially around BSA and AML.
That's one of the overall findings of a recent survey conducted by ARC Risk and Compliance, a consulting company specializing in anti-money-laundering (AML) compliance and technology.
The survey's typical respondent is a BSA/AML/OFAC compliance officer at a retail and/or commercial community bank. The bank typically has a state charter, assets of < $1B, a medium risk rating, and FDIC insurance.
The survey found that at the respondents' most recent regulatory exams they felt that examiners focused most on BSA/AML. Here, transaction monitoring was the biggest concern, followed by Know Your Customer (KYC)/Customer Due Diligence (CDD), and then Enhanced Due Diligence (EDD) closely behind.
That's in contrast to the responses from a similar survey in 2015, when most respondents said model management was the emphasis for regulators.
Retail is considered risky, so respondents said they saw a disproportionate amount of regulatory scrutiny on their retail operations. In addition, the overwhelming majority of survey respondents thought examiner scrutiny had increased overall since the last exam.
Interestingly, despite the focus, the typical respondent received 1 to 4 suggestions and verbal recommendations, 1 or 2 observations, and no Matters Requiring Attention (MRAs) or Matters Requiring Immediate Attention (MRIAs), though a small subset of banks got 1 or 2 MRAs. In 2015, banks were more than 3xs as likely to have MRAs as in 2017.
Additionally, it seems that either regulators are identifying smaller problems or banks are getting faster at making the changes regulators request. After the 2017 examinations, most of the bankers said it took around a month to fix everything that regulators identified as issues. Two years earlier, bankers reported that the fixes took longer: about three months.
Between 2015 and 2017, there was another change: banks got better at using in-house resources to address the issues examiners identified. Most banks (75%) used mostly external resources, including CPAs and attorneys, to address the issues examiners found. But in 2017, the numbers flipped, with the largest group of banks using 75% internal resources and 25% external resources to make necessary changes. When banks did employ external resources, they were most likely to get help from a consulting firm that specializes in AML work, rather than from a CPA or attorney.
BSA/AML is definitely of high priority for the regulators, yet banks seem to be more prepared now than a few years ago. Stay focused, follow the guidelines and continue to manage your compliance well and you will find yourself in good standing at your next examination, regardless of your hairstyle preferences.
Subscribe to the BID Daily Newsletter to have it delivered by email daily.

Related Articles:

Climate Risk Management Lessons from the Fed’s Pilot Analysis
The Federal Reserve recently published the results of its 2023 pilot climate scenario analysis conducted with six of the largest US banks. We discuss some of the Fed's key findings.
Automated Compliance: Streamlining CFI Regulatory Management
Ditch manual efforts in ensuring companywide compliance with evolving regulations. We explore how automation simplifies compliance, minimizing errors and boosting efficiency with cloud-based policy management.