Connect with us
MARE BALTICUM Gaming & TECH Summit 2024

Fintech

SEC Announces Three Actions Charging Deficient Cybersecurity Procedures

Published

on

Washington, D.C.–(Newsfile Corp. – August 30, 2021) – The Securities and Exchange Commission today sanctioned eight firms in three actions for failures in their cybersecurity policies and procedures that resulted in email account takeovers exposing the personal information of thousands of customers and clients at each firm. The eight firms, which have agreed to settle the charges, are: Cetera Advisor Networks LLC, Cetera Investment Services LLC, Cetera Financial Specialists LLC, Cetera Advisors LLC, and Cetera Investment Advisers LLC (collectively, the Cetera Entities); Cambridge Investment Research Inc. and Cambridge Investment Research Advisors Inc. (collectively, Cambridge); and KMS Financial Services Inc. (KMS). All were Commission-registered as broker dealers, investment advisory firms, or both.

According to the SEC’s order against the Cetera Entities, between November 2017 and June 2020, cloud-based email accounts of over 60 Cetera Entities’ personnel were taken over by unauthorized third parties, resulting in the exposure of personally identifying information (PII) of at least 4,388 customers and clients. None of the taken over accounts were protected in a manner consistent with the Cetera Entities’ policies. The SEC’s order also finds that Cetera Advisors LLC and Cetera Investment Advisers LLC sent breach notifications to the firms’ clients that included misleading language suggesting that the notifications were issued much sooner than they actually were after discovery of the incidents.

According to the SEC’s order against Cambridge, between January 2018 and July 2021, cloud-based email accounts of over 121 Cambridge representatives were taken over by unauthorized third parties, resulting in the PII exposure of at least 2,177 Cambridge customers and clients. The SEC’s order finds that although Cambridge discovered the first email account takeover in January 2018, it failed to adopt and implement firm-wide enhanced security measures for cloud-based email accounts of its representatives until 2021, resulting in the exposure and potential exposure of additional customer and client records and information.

According to the SEC’s order against KMS, between September 2018 and December 2019, cloud-based email accounts of 15 KMS financial advisers or their assistants were taken over by unauthorized third parties, resulting in the PII exposure of approximately 4,900 KMS customers and clients. The SEC’s order further finds that KMS failed to adopt written policies and procedures requiring additional firm-wide security measures until May 2020, and did not fully implement those additional security measures firm-wide until August 2020, placing additional customer and client records and information at risk.

“Investment advisers and broker dealers must fulfill their obligations concerning the protection of customer information,” said Kristina Littman, Chief of the SEC Enforcement Division’s Cyber Unit. “It is not enough to write a policy requiring enhanced security measures if those requirements are not implemented or are only partially implemented, especially in the face of known attacks.”

The SEC’s orders against each of the firms finds that they violated Rule 30(a) of Regulation S-P, also known as the Safeguards Rule, which is designed to protect confidential customer information. The SEC’s order against the Cetera Entities also finds that Cetera Advisors LLC and Cetera Investment Advisers LLC violated Section 206(4) of the Advisers Act and Rule 206(4)-7 in connection with their breach notifications to clients. Without admitting or denying the SEC’s findings, each firm agreed to cease and desist from future violations of the charged provisions, to be censured and to pay a penalty. The Cetera Entities will pay a $300,000 penalty, Cambridge will pay a $250,000 penalty, and KMS will pay a $200,000 penalty.

The SEC’s investigations were conducted by Arsen Ablaev, Christine Jeon, and Peter Senechalle of the Cyber Unit and Stephanie Reinhart of the Complex Financial Instruments Unit in the Chicago Regional Office, and supervised by Amy Flaherty Hartman and Ms. Littman of the Cyber Unit. The examinations that led to the investigations were conducted by the Chicago Regional Office and the New York Regional Office with the assistance of the National Examination Program. The examination teams included Joseph Atatsi, Kristine Baker, Daniel Dewaal, Mark Fearer, Richard Hannibal, Donald Hirata, Bradley Kartholl, Steve Lika, Thomas Meier, Paul Mensheha, Salvatore Montemarano, David Mueller, Edward Schmidt, Atif Shameem, Jennifer Spicher, Molly Thompson, Timothy Trainor, Mathew Varghese, and Michael Wells.

Fintech

How to identify authenticity in crypto influencer channels

Published

on

 

Modern brands stake on influencer marketing, with 76% of users making a purchase after seeing a product on social media.The cryptocurrency industry is no exception to this trend. However, promoting crypto products through influencer marketing can be particularly challenging. Crypto influencers pose a significant risk to a brand’s reputation and ROI due to rampant scams. Approximately 80% of channels provide fake statistics, including followers counts and engagement metrics. Additionally, this niche is characterized by high CPMs, which can increase the risk of financial loss for brands.

In this article Nadia Bubennnikova, Head of agency Famesters, will explore the most important things to look for in crypto channels to find the perfect match for influencer marketing collaborations.

 

  1. Comments 

There are several levels related to this point.

 

LEVEL 1

Analyze approximately 10 of the channel’s latest videos, looking through the comments to ensure they are not purchased from dubious sources. For example, such comments as “Yes sir, great video!”; “Thanks!”; “Love you man!”; “Quality content”, and others most certainly are bot-generated and should be avoided.

Just to compare: 

LEVEL 2

Don’t rush to conclude that you’ve discovered the perfect crypto channel just because you’ve come across some logical comments that align with the video’s topic. This may seem controversial, but it’s important to dive deeper. When you encounter a channel with logical comments, ensure that they are unique and not duplicated under the description box. Some creators are smarter than just buying comments from the first link that Google shows you when you search “buy YouTube comments”. They generate topics, provide multiple examples, or upload lists of examples, all produced by AI. You can either manually review the comments or use a script to parse all the YouTube comments into an Excel file. Then, add a formula to highlight any duplicates.

LEVEL 3

It is also a must to check the names of the profiles that leave the comments: most of the bot-generated comments are easy to track: they will all have the usernames made of random symbols and numbers, random first and last name combinations, “Habibi”, etc. No profile pictures on all comments is also a red flag.

 

LEVEL 4

Another important factor to consider when assessing comment authenticity is the posting date. If all the comments were posted on the same day, it’s likely that the traffic was purchased.

 

2. Average views number per video

This is indeed one of the key metrics to consider when selecting an influencer for collaboration, regardless of the product type. What specific factors should we focus on?

First & foremost: the views dynamics on the channel. The most desirable type of YouTube channel in terms of views is one that maintains stable viewership across all of its videos. This stability serves as proof of an active and loyal audience genuinely interested in the creator’s content, unlike channels where views vary significantly from one video to another.

Many unauthentic crypto channels not only buy YouTube comments but also invest in increasing video views to create the impression of stability. So, what exactly should we look at in terms of views? Firstly, calculate the average number of views based on the ten latest videos. Then, compare this figure to the views of the most recent videos posted within the past week. If you notice that these new videos have nearly the same number of views as those posted a month or two ago, it’s a clear red flag. Typically, a YouTube channel experiences lower views on new videos, with the number increasing organically each day as the audience engages with the content. If you see a video posted just three days ago already garnering 30k views, matching the total views of older videos, it’s a sign of fraudulent traffic purchased to create the illusion of view stability.

 

3. Influencer’s channel statistics

The primary statistics of interest are region and demographic split, and sometimes the device types of the viewers.

LEVEL 1

When reviewing the shared statistics, the first step is to request a video screencast instead of a simple screenshot. This is because it takes more time to organically edit a video than a screenshot, making it harder to manipulate the statistics. If the creator refuses, step two (if only screenshots are provided) is to download them and check the file’s properties on your computer. Look for details such as whether it was created with Adobe Photoshop or the color profile, typically Adobe RGB, to determine if the screenshot has been edited.

LEVEL 2

After confirming the authenticity of the stats screenshot, it’s crucial to analyze the data. For instance, if you’re examining a channel conducted in Spanish with all videos filmed in the same language, it would raise concerns to find a significant audience from countries like India or Turkey. This discrepancy, where the audience doesn’t align with regions known for speaking the language, is a red flag.

If we’re considering an English-language crypto channel, it typically suggests an international audience, as English’s global use for quality educational content on niche topics like crypto. However, certain considerations apply. For instance, if an English-speaking channel shows a significant percentage of Polish viewers (15% to 30%) without any mention of the Polish language, it could indicate fake followers and views. However, if the channel’s creator is Polish, occasionally posts videos in Polish alongside English, and receives Polish comments, it’s important not to rush to conclusions.

Example of statistics

 

Wrapping up

These are the main factors to consider when selecting an influencer to promote your crypto product. Once you’ve launched the campaign, there are also some markers to show which creators did bring the authentic traffic and which used some tools to create the illusion of an active and engaged audience. While this may seem obvious, it’s still worth mentioning. After the video is posted, allow 5-7 days for it to accumulate a basic number of views, then check performance metrics such as views, clicks, click-through rate (CTR), signups, and conversion rate (CR) from clicks to signups.

If you overlooked some red flags when selecting crypto channels for your launch, you might find the following outcomes: channels with high views numbers and high CTRs, demonstrating the real interest of the audience, yet with remarkably low conversion rates. In the worst-case scenario, you might witness thousands of clicks resulting in zero to just a few signups. While this might suggest technical issues in other industries, in crypto campaigns it indicates that the creator engaged in the campaign not only bought fake views and comments but also link clicks. And this happens more often than you may realize.

Summing up, choosing the right crypto creator to promote your product is indeed a tricky job that requires a lot of resources to be put into the search process. 

Author Nadia Bubennikova, Head of agency  at Famesters

Author

Nadia Bubennikova, Head of agency at Famesters

Continue Reading

Fintech

Central banks and the FinTech sector unite to change global payments space

Published

on

central-banks-and-the-fintech-sector-unite-to-change-global-payments-space

 

The BIS, along with seven leading central banks and a cohort of private financial firms, has embarked on an ambitious venture known as Project Agorá.

Named after the Greek word for “marketplace,” this initiative stands at the forefront of exploring the potential of tokenisation to significantly enhance the operational efficiency of the monetary system worldwide.

Central to this pioneering project are the Bank of France (on behalf of the Eurosystem), the Bank of Japan, the Bank of Korea, the Bank of Mexico, the Swiss National Bank, the Bank of England, and the Federal Reserve Bank of New York. These institutions have joined forces under the banner of Project Agorá, in partnership with an extensive assembly of private financial entities convened by the Institute of International Finance (IIF).

At the heart of Project Agorá is the pursuit of integrating tokenised commercial bank deposits with tokenised wholesale central bank money within a unified, public-private programmable financial platform. By harnessing the advanced capabilities of smart contracts and programmability, the project aspires to unlock new transactional possibilities that were previously infeasible or impractical, thereby fostering novel opportunities that could benefit businesses and consumers alike.

The collaborative effort seeks to address and surmount a variety of structural inefficiencies that currently plague cross-border payments. These challenges include disparate legal, regulatory, and technical standards; varying operating hours and time zones; and the heightened complexity associated with conducting financial integrity checks (such as anti-money laundering and customer verification procedures), which are often redundantly executed across multiple stages of a single transaction due to the involvement of several intermediaries.

As a beacon of experimental and exploratory projects, the BIS Innovation Hub is committed to delivering public goods to the global central banking community through initiatives like Project Agorá. In line with this mission, the BIS will soon issue a call for expressions of interest from private financial institutions eager to contribute to this ground-breaking project. The IIF will facilitate the involvement of private sector participants, extending an invitation to regulated financial institutions representing each of the seven aforementioned currencies to partake in this transformative endeavour.

Source: fintech.globa

The post Central banks and the FinTech sector unite to change global payments space appeared first on HIPTHER Alerts.

Continue Reading

Fintech

TD Bank inks multi-year strategic partnership with Google Cloud

Published

on

td-bank-inks-multi-year-strategic-partnership-with-google-cloud

 

TD Bank has inked a multi-year deal with Google Cloud as it looks to streamline the development and deployment of new products and services.

The deal will see the Canadian banking group integrate the vendor’s cloud services into a wider portion of its technology solutions portfolio, a move which TD expects will enable it “to respond quickly to changing customer expectations by rolling out new features, updates, or entirely new financial products at an accelerated pace”.

This marks an expansion of the already established relationship between TD Bank and Google Cloud after the group previously adopted the vendor’s Google Kubernetes Engine (GKE) for TD Securities Automated Trading (TDSAT), the Chicago-based subsidiary of its investment banking unit, TD Securities.

TDSAT uses GKE for process automation and quantitative modelling across fixed income markets, resulting in the development of a “data-driven research platform” capable of processing large research workloads in trading.

Dan Bosman, SVP and CIO of TD Securities, claims the infrastructure has so far supported TDSAT with “compute-intensive quantitative analysis” while expanding the subsidiary’s “trading volumes and portfolio size”.

TD’s new partnership with Google Cloud will see the group attempt to replicate the same level of success across its entire portfolio.

Source: fintechfutures.com

The post TD Bank inks multi-year strategic partnership with Google Cloud appeared first on HIPTHER Alerts.

Continue Reading

Trending