Cyber Fraud And Online Banking Crimes
Legal Framework
Finnish Criminal Code (Chapter 38, Computer Crimes)
Section 4 (Computer Fraud): Unauthorized manipulation of data or computer systems to gain financial or material advantage.
Section 5 (Unauthorized Access): Accessing computer systems without permission.
Section 6 (Damage to Data): Includes spreading malware or deleting financial records.
EU Directives & Regulations
Directive 2013/40/EU: Combating fraud and counterfeiting of non-cash means of payment.
PSD2 (Payment Services Directive): Enhances online banking security and liability rules.
Key Concepts
Phishing, malware, and ransomware attacks are major tools of cyber fraud.
Liability often extends to perpetrators, accomplices, and sometimes service providers if gross negligence occurs.
Courts assess intent, method, scale, and financial harm in sentencing.
Case 1: Phishing Scam Targeting Finnish Bank Customers
Facts:
2018: Cybercriminals sent fake emails pretending to be from a Finnish bank.
Victims entered login credentials, resulting in unauthorized transfers totaling €200,000.
Legal Issues:
Violation of computer fraud and unauthorized access provisions.
Determining intent to deceive and gain financial advantage.
Outcome:
Perpetrators arrested; convicted under Finnish Criminal Code Chapter 38.
Sentences: 2–3 years imprisonment; full restitution ordered to victims.
Significance:
Shows the importance of digital literacy and banks’ obligation to report fraud.
Case 2: ATM Skimming and Online Account Manipulation
Facts:
2017: Organized crime group installed skimming devices on ATMs and used cloned cards to access online banking accounts.
Stolen funds exceeded €500,000.
Legal Issues:
Combination of physical fraud (skimming) and cyber fraud (online account access).
Court assessed scope of organized criminal activity.
Outcome:
Sentences: 4–5 years imprisonment for main organizers; accessory members received 1–2 years.
Funds partially recovered through bank cooperation.
Significance:
Highlights multi-layered cyber fraud, combining physical and digital methods.
Case 3: Ransomware Attack on Small Finnish Bank
Facts:
2019: Hackers encrypted bank servers and demanded cryptocurrency ransom.
Bank operations temporarily halted, affecting thousands of customers.
Legal Issues:
Violation of computer crimes, extortion, and interference with banking operations.
Court assessed financial damage and disruption to public trust.
Outcome:
Perpetrators traced internationally; Finnish authorities coordinated with Europol.
Arrests led to imprisonment of 3–6 years for main actors.
Banks improved cybersecurity protocols as part of mitigation.
Significance:
Demonstrates cross-border cybercrime enforcement challenges.
Case 4: Fake Investment Websites and Account Takeovers
Facts:
2020: Cybercriminals created fake investment platforms targeting Finnish users.
Victims deposited funds online, which were then transferred to offshore accounts.
Legal Issues:
Fraudulent schemes under computer fraud and financial crime statutes.
Court examined evidence of intent, victim reliance, and financial loss.
Outcome:
Perpetrators sentenced to 2–4 years imprisonment.
Full restitution required; international cooperation led to freezing of offshore accounts.
Significance:
Highlights the use of phishing combined with social engineering in online financial crimes.
Case 5: Insider Cyber Fraud at Bank
Facts:
2016: Bank employee used access credentials to transfer clients’ funds to personal accounts over several months.
Legal Issues:
Abuse of position and trust; classified as computer fraud and embezzlement.
Court considered breach of fiduciary duty and calculated financial harm.
Outcome:
Employee convicted; sentenced to 3 years imprisonment.
Restitution orders and permanent banking employment ban imposed.
Significance:
Insider threats are a major source of cyber fraud in banking.
Case 6: International Money Laundering via Online Banking
Facts:
2021: Organized group transferred illicit funds from European accounts to Finland through online banking portals to disguise origin.
Legal Issues:
Violation of money laundering laws, coupled with cyber fraud techniques.
Court examined digital trail, bank reporting obligations, and intentional concealment.
Outcome:
Convictions: 3–6 years imprisonment.
Seizure of assets and accounts; cooperation with EU financial intelligence units.
Significance:
Shows how cyber fraud is linked to broader financial crime networks.
Case 7: Mobile Banking App Fraud
Facts:
2022: Criminals exploited vulnerability in a Finnish mobile banking app to make unauthorized transfers.
Exploit involved bypassing two-factor authentication.
Legal Issues:
Unauthorized access and manipulation of payment systems; violation of Finnish Criminal Code Chapter 38.
Outcome:
Perpetrators convicted; 2–5 years imprisonment.
Bank updated security protocols and reimbursed affected clients.
Significance:
Illustrates evolving threats in fintech and mobile banking security.
Summary Observations
Types of Cyber Fraud in Banking
Phishing, skimming, ransomware, fake investment platforms.
Insider fraud and exploitation of app vulnerabilities.
Cross-border money laundering via online banking.
Key Legal Principles
Unauthorized access, deception, and intent to gain financial advantage are core elements.
Courts consider scale, number of victims, and sophistication of attack.
Penalties
Imprisonment (2–6 years depending on severity).
Fines and restitution.
Access bans for insiders in financial sectors.
Preventive Measures
Banks’ reporting obligations.
Customer awareness campaigns.
Cooperation with international agencies for cross-border enforcement.
RELATED Blog
0 comments