Bank of England frets over stability of Big Tech cloud providers

xxx

The Bank of England is warning that additional policy measures may be required to mitigate financial stability risks from the growing concentration of power in the hands of global cloud providers.

From Bank of England frets over stability of Big Tech cloud providers:

xxx

 

xxx

Users are reporting issues with websites including Airbnb, Fidelity, FedEx, and more.

Downdetector, a site that reports website-user issues, reported numerous sites had experienced outages beginning around 12 p.m. ET on Thursday.

Akamai, a cloud-services company, said in a statement around noon that it is investigating an emerging issue with the Edge DNS service. Nearly an hour later, Akamai said the firm had implemented a fix for this issue and that services on Edge DNS were resuming normal operations.

From Fidelity, FedEx, UPS, Airbnb, and More Websites Down:

xxx

7 big banks sign on for SWIFT’s low-value cross-border offering | Banking Dive

xxx

Olga Skorobogatova, first deputy governor of the Central Bank of Russia, told Russia Today late last year the development of digital currencies could eventually make SWIFT redundant.

From 7 big banks sign on for SWIFT’s low-value cross-border offering | Banking Dive:

xxx

Technology can help democratise financial services | Financial Times

xxx

The disadvantage to poorer households can be substantial: in India, for example, the cost of suboptimal financial arrangements has been estimated at 10 per cent of the real annual income of a typical middle-class household.

From Technology can help democratise financial services | Financial Times:

xxx

Smart Contract Vulnerabilities Are A Ticking Time Bomb Holding Billions of Unsuspecting $$$ Hostage | Hacker Noon

xxx

Decentralized exchanges with decentralized governance models were made possible by these smart contracts on Ethereum, creating a new digital land of opportunity which has now expanded into many other smart contract platforms like Binance Smart Chain, Polkadot, and Avalanche.

Protocols like Aave, Compound, Uniswap, and 1Inch.exchange, allow users to earn interest on their funds and trade crypto assets and even complex instruments like decentralized derivatives.

All of these new and exciting products have generated the aforementioned sector known as DeFi which is taking the financial world by storm and giving traditional finance a run for its money.

From Smart Contract Vulnerabilities Are A Ticking Time Bomb Holding Billions of Unsuspecting $$$ Hostage | Hacker Noon:

xxx

The Most Impressive AI Demo I Have Ever Seen – Marginal REVOLUTION

xxx

The Most Impressive AI Demo I Have Ever Seen
by  Alex Tabarrok August 20, 2021 at 7:25 am in Web/Tech
This is jaw-dropping. It starts slow but watch the whole thing. I don’t think I would have been more amazed had I witnessed the first flight of the Wright Brothers.

From The Most Impressive AI Demo I Have Ever Seen – Marginal REVOLUTION:

xxx

I Scream About Credit Card Surcharging | PaymentsJournal

xxx

As a consumer, I’d steer away from a business that surcharges. It seems like a sleight of hand to raise consumer costs. The merchant already has an expense for handling cash, as they do with taking any payment form. They do not disclose the cost of goods sold at the point of sale. So why single out the processing cost?  It has more to do with incrementing revenue than it does to reduce expenses.

From I Scream About Credit Card Surcharging | PaymentsJournal:

xxx

Paying With a Credit Card? That’s Going to Cost You. – WSJ

xxx

D’s Soul Full Cafe in Hoboken, N.J., has offered customers a 5% discount on cash payments for a few years, and had a $5 minimum purchase requirement for credit cards.

After the pandemic began, fewer customers were able to pay with cash simply because they weren’t carrying any, said owner Stephen Bailey. Many customers left the store without making a purchase, he said, prompting it to remove the $5 minimum.

From Paying With a Credit Card? That’s Going to Cost You. – WSJ:

xxx

Paying With a Credit Card? That’s Going to Cost You. – WSJ

xxx

Karen’s Dairy Grove, an ice cream shop outside of Cleveland, Ohio, charges an extra quarter when customers use credit cards for purchases of less than $5. Owner Karen Morell said she made that decision after cash sales fell and credit-card purchases rose during the pandemic.

From Paying With a Credit Card? That’s Going to Cost You. – WSJ:

xxx

POST Stripes Today, Signatures Tomorrow

For the first decade or so, it was far from clear whether the credit card was continue to exist as a product at all, and as late as 1970 there were people predicting that banks would abandon the concept completely. Then along came the magnetic stripe. The introduction of the stripe and Visa’s BASE I online authorisation system changed the customer experience, transformed risk management and cut costs dramatically.

(I can’t resist pointing out that it was actually London’s transit authority that pioneered the use of magnetic stripes on the back of cards in a mass market product. Their first transaction was at Stamford Brook station on 5th January 1964, well before BankAmericard introduced their first bank-issued magnetic stripe card in 1972 ahead of the deployment of the BASE I electronic authorisation system in 1973.)

The payment card stripe has had a good fifty years, from then until now, but its days are numbered. Mastercard has announced that the stripe will start to disappear in 2024 from regions where chip cards are already widely used (eg, Europe). The US stripeout will begin three years’ later in 2027, then by 2029 no new Mastercard credit or debit cards will be issued with a magnetic stripe.

The demise of the stripe makes me wonder when the signature will follow. The Daily Telegraph that “written signatures are dying out amid a digital revolution ”. I’m going to miss the stripe and the signatures.When it comes to making a retail transaction, my signature is utterly unimportant. This is why transactions have worked perfectly well for years when I either did not give a signature (for contactless transactions) or gave a completely pointless signature as I did for almost all US card transactions.

If I do have to provide a signature, then for security purposes I never give my own signature and by tradition sign in the name of my favourite South American footballer who plays for Manchester City. I was encouraged to continue this tradition when I discovered that is constituted sound legal advice. Gary Rycroft, a solicitor at  Joseph A. Jones & Co. said “I always sign my initials, for example, so I could prove if it wasn’t me” (because, presumably, a criminal would try to fake Gary’s signature).

Now the issue of
signatures and the general use of them to authenticate customers for credit card transactions in the US has long been a source of amusement and anecdote. I am as guilty as everybody else in using the US retail purchasing experience to poke fun at the infrastructure there (with some justification, since as everybody knows the US is responsible for about a quarter of the world’s card transactions but half of the world’s card fraud) but I’ve also used it to illustrate some more general points about identity and authentication.


Untitled

Brett King wrote a great piece about signatures a few years ago in which he also made a more general point about authentication mechanisms for the 21st-century, referring to a UN/ICAO commissioned survey on the use of signatures in passports. A number of countries (including the UK) recommended phasing out theme-honoured practice because it was no longer deemed of practical use.

Let’s Ask The Talmud

If you are interested in the topic of signatures at all, there was a brilliant
NPR Planet Money Podcast  (Episode number 564) on the topic of signatures for payment card transactions. Ronald Mann  (the Colombia law professor interviewed for the show) noted that card signatures are not really about security at all but about distributing liabilities for fraudulent transactions and called signatures “eccentric relics”, a phrase I loved and blogged about at the time.

In addition to the law professor, NPR also asked a Talmudic scholar about signatures. The scholar made a very interesting point about the use of these eccentric relics when he was talking about the signatures that are attached to the Jewish marriage contract, the 
Ketubah.  He pointed out that it is the signatures of the witnesses that have the critical function, not the signatures of the participants, because of their role in dispute resolution. In the event of dispute, the signatures were used to track down the witnesses so that they can attest as to the ceremony taking place and as to who the participants were. This is echoed in that Telegraph article , where it notes that the use of signatures will continue for important documents such as wills, where a witness is required.

The NPR show narrator made a good point about this, which is that it might make more sense for the coffee shop to get the signature of the person behind you in the line than yours, since yours is essentially ceremonial whereas the one of the person behind you has that Talmudic forensic function. I occurs to me that same is true when I sign for deliveries! It would make more sense for the deliver driver to get a signature from a random passer by then from me, although I suppose now that they have started photographing instead of asking for a signature.

The Talmudic scholar also mentioned in passing that according to the commentaries on the text, the wise men from 20 centuries ago also decided that
all transactions deserved the same protection. It doesn’t matter whether it’s a penny or £1000, the transaction should still be witnessed in such a way as to provide the appropriate levels of protection to the participants. Predating PSD2 by some time, the Talmud says that every transaction is important and requires strong authentication.

 

Identity is the New Cost Base

In the year 1540, Sir Thomas Gresham (who later became Queen Elizabeth I’s banker and is in many ways the father of the modern City of London) set out in true fintech pioneer style to evade capital controls and smuggle the equivalent of some $40 million in today’s money from Antwerp to Calais on behalf of King Henry VIII. Nowadays he would have used bitcoins and run them through a few mixers, but due to the technological limitations of Tudor money transfer, he was forced to sneak out of the Low Countries with 25 bags of gold and silver coins. John Guy notes in his superb biography of Sir Thomas that for this highly risky cross-border transfer he was paid in the King’s cash money:

To [Thomas] now fell the risky task of conveying cash amounting to over £31,000(worth over £31 million today) for the mercenaries… Gresham was lucky. The journey, in the event, took him less than a month.. he claimed the expedition had cost him £28 18s. od. (some £29,000). Six weeks later, Henry’s councillors finally issued the warrant that allowed Thomas to seek payment from the treasurer of the king’s chamber.

This means that the cost to the King was around nine basis points, or about one fifth as much as Wise charged me to transfer money from the US to the UK last week, although to be fair it did take Sir Thomas a month to get Henry’s loot to him whereas with Wise it was a matter of seconds. Which makes me wonder about trajectory of the costs. Since Sir Thomas’ escapades, we have invented laser beams and transistors: so how come it costs so much money to send money around?

Freefx

NFT available direct from the artist at TheOfficeMuse (CC-BY-ND 4.0)

According to the World Bank the overall global average transaction cost remains around seven percent for non-digital remittances and five per cent for digital remittances. Digital remittances are defined by the World Bank as being sent using an online payment service and received by a bank account, transaction account, mobile, or emoney account and their continuously falling cost suggests that increasing access to the internet, mobile phones payments is the best way to get cheaper remittances out to the mass of people around the world.

In fact, the situation might be improving even faster than those averages suggest. The World Bank also calculate “Global Weighted Average” remittance costs. This weights the average costs in a corridor by the estimated flow size to give a useful global benchmark. In Q1 2021 this was approximately 4.5%. Now this is still too much at around ten times what I paid to move money between transatlantic bank accounts and about fifty times what it cost Henry VIII to move money across the Channel. But it isn’t what it was even a few years ago. The cost of international remittances is not the way down, but not quickly enough.

Why not? Well, the fact is that the cost of moving the photons around is not the problem. The costs are not because of payments, they are because of identity. Cross-border funds transfers will at some point involve a regulated institution. A money transmitter might take money from a bank account in the UK and deposit it in a bank account in, say, India. This means that the bank has to carry out massively expensive Know-Your-Customer (KYC) investigations on the money transmitter and its customers as well as massively expensive Anti-Money Laundering (AML) monitoring of the transactions as well as massively expensive sanctions screening and so on. Meeting these Customer Due Diligence (CDD) standards is expensive. As a result, there are significant barriers against cost-competitive technology firms who want to make inroads into the remittance business.

The Only Way Is Up

A couple of years ago the Financial Action Task Force (FATF) extended their recommendations on CDD to include cryptocurrency exchanges and wallet providers (together referred to as Virtual Asset Service Providers, or “VASPs”). This meant that all countries should apply anti-money laundering and anti-terrorist financing controls whether the money is going by bank or by blockchain: that is, CDD and all that. All that, in particular, means applying the “Travel Rule” that aims to prevent money laundering by identifying the parties to a transaction when value over a certain amount are transferred.

The decision to apply the same travel rule on VASPs as on traditional financial institutions was greeted with some dismay in the cryptocurrency world, because it meant that service providers must collect and exchange customer information during transactions. The technically non-binding guidance on how member jurisdictions should regulate their ‘virtual asset’ marketplace included the contentious detail that whenever a user of one exchange sends cryptocurrency worth more than 1,000 dollars or euros to a user of a different exchange, the originating exchange must send identifying information about both the sender and the intended recipient to the beneficiary exchange. Many people think even that limit is too high: Speaking at the “V20 Virtual Asset Service Providers Summit”, Carole House from the Financial Crimes Enforcement Network, FinCEN, said that they want to see this threshold reduced to $250 for any transfers that go outside the US.

(The FATF has actually just completed its second 12-month review of the implementation of these VASP amendments, noting that less than half of their reporting jurisdictions have the rules in place and “gaps in implementation” mean that there is not yet a global regime in place to prevent the misuse of virtual assets for money laundering or terrorist financing.)

The information demanded is extensive. According to the FATF Interpretive Note to Recommendation 16, the information should include name and account number of the originator and benefactor, the originator’s (physical) address, national identity number (or something similar) or date and place of birth. In essence, this means that counterparty’s personal information will sent around the web. Simon Lelieveldt is a former Head of Department on Banking Supervision at the Dutch Central Bank. He is level-headed about such things, and he called this a “disproportional silly measure by regulators who don’t understand blockchain technology“, which may be a little harsh, but whatever the cryptocurrency folks might think about it they have no choice but to implement it.

So What Will Reduce Costs?

Pär Liljert of the International Organization for Migration’s (IOM) says that compliance has been identified as a key cost for remittance service providers and said that now is the time to reduce remittance costs. So how can fintech help?

With the blockchain, perhaps? The OECD’s April 2020 Working Paper “Can blockchain technology reduce the cost of remittances?” (hint: no) identifies a number of limitations on the ability of blockchain technology to reduce remittance costs. In particular, it notes that cryptocurrency is unlikely to solve the “last mile” problem.

Sopnendu Mohanty, the chief fintech officer at the Monetary Authority of Singapore (MAS) says that the reason for wanting to use some form of blockchain is to bring down transactions costs by cutting out correspondent banks and reducing CDD expenses. This is a goal that many share, of course, but it is not clear to me whether the blockchain will make much difference, since the bulk of the costs are not the correspondent bank fraction but the CC fraction. According to the World Bank, at the beginning of this year the overall global average transaction cost for non-digital remittances around seven percent and the cost for digital remittances (which the Bank defines as being sent via an online payment service and received into a bank account, transaction account, mobile money or electronic money account) was around five percent.

The dynamics in the sector are clear: the global average cost for sending cash remittances has remained relatively flat since 2013, the global average cost for digital remittances has posted consistent declines. This suggest to many observers (me included) that access to the internet, mobile phones and transaction accounts or wallets (not necessarily bank accounts) may be the best way to reduce the transaction costs for people around the world. In this respect, the actions of Facebook (and others) point the way.

David Marcus, until recently the head of Facebook’s “Novi” digital wallet programme recently said that it would offer free person-to-person payments both domestically and internationally, describing Facebook as “a challenger in the payments industry”, which it surely is. But he was very clear that the Novi wallet will involve sophisticated and secure digital identity onboarding and necessary transaction monitoring. Facebook have deep pockets and can afford this, but other competitiors may find it more difficult to compete.

It’s All About Identity

The OECD paper highlighted the cost of KYC as one of the significant cost drivers and note potential for the use of digital identities to help and raises questions about the possibilities of data misuse thereby deepening, as they put it, the “existing political asymmetries”. The Brookings Institution “How to keep remittances flowing” makes a similar point, calling for digital technology to meet risk-based KYC requirements to help address “de-risking” practices by correspondent banks (intended to avoid rather than manage risks) that continue to affect access to bank accounts for money transfer businesses operating in smaller and poorer remittance corridors, thus reducing competition. It seems to me, then, that if we can find a way to use digital identities but prevent the data misuse, then we (ie, the fintech industry) may actually be able to help the less well off.

When it comes down to it, it doesn’t matter whether you are sending dollars or Dogecoin, the identity expenses dwarf the payment expenses. So if we are going to reduce the cost of remittances, that is where we need to focus. Not as a special fix or temporary patch for remittances, but as part of a more general strategy to improve financial inclusion. Carlos Torres Vila, Chairman of BBVA, has put forward an interesting idea based on digital identities and data sharing. He suggests something along the lines of the Financial Stability Board (a global panel of regulators) but built for global digital assets. Such a body would develop data model standards, regulations and policies building in privacy protection along the lines of Europe’s GDPR.

This “digital stability board” would give members the platform to share best practices and monitor risks in online commerce and other sectors. With such a board in place, data trusts (a structure that I think holds great promise: see this piece in MIT Technology Review) could be built to manage individual and organisational data associated with digital identities. This would make the controlled and well-regulated sharing of vital information easier and more fluid while simultaneous protecting personally-identifiable information through the use of maturing privacy-enhancing technologies.

It seems to me that if someone (not necessarily the counterparts themselves) knows who everyone is, then payments are easy. And cheap. So when it comes to improving the lives of the global poor, let’s stop talking about cryptocurrency and start talking about about digital identity.

This means talking about who the “someone” behind the digital identities should be? The government? The central bank? Financial institutions? Telcos? Trusts run by financial institutions in some countries and perhaps the UN or NGOs in some countries? I don’t know who it should be more than anyone else does, but I do know that the need is real.

Design a site like this with WordPress.com
Get started