Sunday, August 07, 2005

Retail Crime Becoming Wired




I just read an article from Business Week on the state of refund fraud.

According to the article, retail organizations allegedly lost $16 billion to bogus returns in 2003. This figure was presented to the author of the article by King Rogers International, a loss prevention firm catering to the retail industry.

The $16 billion in fraudulent returns allegedly represents about 9 percent of all returns. These statistics are from 2003, which is the latest data available and represents a 23% increase from previous years. Please note that the article is not specific on how these statistics were obtained.

My guess is that these statistics were gathered via a survey. Estimating the root cause of retail losses is very difficult. This is because losses are primarily determined by how much of their physical inventory is missing. Physical inventories at most retail organizations are conducted once, or twice a year. Other major contributing factors like customer theft, employee theft and even poor operational controls contribute to losses. Due to the complexity of a retail business, one can normally only make an educated guess as to which category caused what percentage of loss.


An additional problem with these statistics would be that one shoe doesn't fit all. I would imagine that there are varying reasons at different retailers for losses depending on how they operate, the quality of people they hire and their business controls.

Another expert cited in the article was Read Haynes of the Loss Prevention Research Council at the Universtity of Florida. According to Read Hayes, there are web sites that sell unexpired receipts, which are often used in refund fraud schemes. Hayes also says that gift cards, which are given for returns are often sold on auction sites.

Recently, E-Bay was lobbied by the Retail Industry Leader's Association after performing a study on gift cards tied to fraudulent refunds. E-Bay sellers are now limited to selling one card per week at a maximum of $500.00. Here is another article from E-Pay news on gift card fraud.

Gift Cards May Be A Vehicle For Returns Fraud

Unfortunately, there are other auctions sites and chat rooms, where gift cards are still being sold without regulation. We also need to take into account that a lot of gift cards are purchased with bogus financial instruments, such as checks and credit cards. My guess is that a lot of these circulate via the internet also. There is a link from the article listed above on this very subject.

Regarding the problem of counterfeit receipts, which are used to perform fraudulent refunds. A lot of major retailers now tie receipts to a transaction. This means they have to mirror a transaction in order to be valid for a refund, normally via a transaction number. In the article, Hayes is quoted as stating the reason for the higher losses is that return policies are becoming more generous within the retail industry.

I find this statement odd because as a consumer, I have noted return policies becoming tougher in recent years. The few times I have had to refund anything, I had to provide identification (which was recorded electronically), if I didn't have a receipt. If memory serves me correctly, even with a receipt, my personal information was sometimes recorded. Counterfeit receipts were supposed to be stopped in the late nineties by making them correspond (mirror) a transaction. If these scams are flourishing again, perhaps the cause is an increase in technological prowness of the fraudsters involved?

A very important issue to consider is when personal information is electronically kept, it could be used for identity theft. I would speculate that the professional criminals involved in this are probably very adept at identity theft. They probably already are defeating the systems in place by using multiple identities in addition to counterfeit receipts.

There is also the issue of privacy to be considered for the 91 percent of honest people (based on the statistics cited) of how their personal information might be used. Most people return merchandise because it is defective, or they were sold the wrong item. At a minumum, the cost of obtaining customer satisfaction could be their information being sold to information brokers. At a maximum, the system could be hacked, or even accessed by a trusted insider and their personal information could be used in criminal activity.

If counterfeit receipts are flourishing again, it might be for other reasons. Data theft (intrusions) and insider information obtained by plants seem to be happening everywhere. Retail organizations, which already gather personal information for marketing purposes probably aren't immune to this. The proverbial question is where is the information being obtained that these receipts use and how can repeat offenders be identified if they are using multiple identities?

Also mentioned in the articles is that the National Retail Federation (NRF) is setting up a database to track retail crimes and bar-code data. The Retail Industry Leaders Association is also testing a web database that tracks retail criminal activity. This information will be provided to law enforcement and retailers, who are members. It remains to be seen how effective these measures will be, but it is a start.

The internet is cited in the article as the new flea market, which is true. The difference is that with the internet, the reach is much farther and because of this, more deadly to the bottom line.

It's amazing how a lot of the different scam activities, (retail theft, refund fraud, check fraud, credit card fraud, phishing, pharming, auction fraud, identity theft, or collectively financial misdeeds) tie into so many business sectors of the world economy. There are recurring themes to be considered.

The criminal, who commits these types of crimes, counts on mutating and moving their activity in order to avoid detection. Since it would be safe to assume that their ultimate goal is money, they also might be hitting several different business sectors at the same time. The key to protecting people and business community is awareness, communication and a combined effort by all the different sectors to resolve the loopholes that allow these crimes to flourish.

For the original article in Business Week, click on the title of this post.

Chevron Accused of Tax Avoidance in Nigeria


Chevron Nigeria Limited is being accused of avoiding $10.8 billion in taxes. The allegations are being made by an accounting firm (ABZ Integrated Limited), who are tax consultants to Nigeria's Economic and Financial Crimes Commission.
ABZ is charging that Chevron denied Nigeria $2.7 billion in taxes and should pay this and a fine of $8.1 billion dollars. Chevron is denying the allegations and says it welcomes any investigation.

Interestingly enough, this story is getting little play in the North American, or European press.

The Nigerian government announced a crack down on fraud three years ago and founded the Economic and Financial Crimes Commission (EFCC) in 2002. Since then, this agency has recovered more than 700 million dollars and arrested more than 500 suspects. Currently, there are 100 cases on trial.
The press on the EFCC has been both bad and good. Some are applauding their actions and others are saying that it is a small drop in the bucket with the amount of fraud coming out of Nigeria. Here is a recent article on this:
http://news.yahoo.com/news?tmpl=story&u=/ap/20050807/ap_on_hi_te/internet_scammers_7

Here are a list of charges from an article on OnlineNigeria:

"•In1998 and 1999, the companies diverted $75 million government tax revenue through dividends.

•Evaded tax through claims to unmerited capital allowances, based on fictitious qualifying capital expenditure by $190 million.

•Evaded tax through claims to unmerited tax credits, such as Reserve Additional Bonus (RAB) and Intangible Drilling Cost (IDC) by $222 million.

•Through conspiracy, the companies were assessed to lower amount of tax than expected by $95 million.The tax consultants further claim that Chevron may have been involved in money laundering during the period under investigation because it did not provide details of debtors and creditors amounting to $260 million in each of the years, in its audited accounts, as required by the Companies and Allied Matters Act of 1990.The consultants also alleged that during their defence of the initial reports submitted to the EFCC, very critical issues were raised bordering on.

•Non payment of monthly Petroleum Profit Tax installments. Chevron Oil Nigeria Limited was expected to make 104 installments for eight years to year 2002. The company failed to make 42 installments, while its partner, TOPCON, failed to pay 24 installments. This denied the nation of several millions of dollars.

•Some payments claimed to have been made by the companies were not traceable to the Federal Reserve Bank account for the domiciliation of PPT revenue.

•Use of illegal revisions of their PPT estimates to manipulate their tax liabilities. These were revisions made beyond the statutorily permitted accounting year of December 31 of each year.

•Manipulation of revenue from royalties for which DPR is responsible for determination of liabilities but ironically does not issue receipt to the oil companies for payment; instead, the office of the Accountant-General of the Federation usurped the responsibilities even though it is not a government revenue generating agency.

•Conspiracy between revenue officers and Chevron which led to replacement of Assessment Notice for a higher amount of $21,838,977 with that of $12,005,455. The difference of $9,833,492 denied the federation has been established to be a fraud actualised by duplicating an expense on licences and miscellaneous taxes in 1996.

•There were cases where FIRS credited Chevron with payments which it never made. An example was the $22,400,000 vide Treasury receipt No. PP036337 of August 14, 1997. This suggests fund diversion.The tax consultants also said in their report that in 2002, Chevron claimed to have spent $25.5 million on community development while in actual fact only $249,000 was spent."

According to the article, Chevron has repaid $6.516 million and nothing is being heard from the EFCC, who had earlier threatened to shut down their operations if these charges were found to have merit.

Although, Nigeria is one of the biggest oil producing countries in the world, the general population remains very poor and sees relatively little of the profits spent on improving their lives.

Here is an interesting link to a report from Human Rights Watch on the status of Nigeria and information on how little of the oil profits are used to improve the daily lives of the poor. It cites that the foreign companies making a lot of the money from oil profits bear some of the responsibilty.

http://www.hrw.org/reports/1999/nigeria/Nigew991-01.htm
The article from OnlineNigeria can be read by clicking on the title of the post.

There are a lot of foreign companies making a lot of money in Nigeria. There is also obviously a very small minority in Nigeria getting very rich, while many of their citizens live in poverty. Perhaps this is one of the root causes for all the fraud that comes out of Nigeria?

Wednesday, August 03, 2005

Rumor of a Partnership Between Organized Fraud Gangs and Terrorists?



There is a report out of Germany that organized fraud gangs and terrorist organizations are joining forces to commit financial crimes (fraud). The Federal Audit Court of Germany issued a report stating that these groups have cost the taxpayers of Germany 17.6 billion euros, which equates to 23 billion dollars, or 12 billion british pounds at today's exchange rates.

It is alleged that the groups involved in this are extremely organized and employ accountants, auditors and even law firms.

The specific fraud cited was sophisticated value-added tax (VAT) fraud, where phantom purchases were used to obtain refunds on high end items. In one case cited, groups in China, Israel, the UK and Dubai were able to claim VAT refunds of 1.15 billion Euros.

The report stated that terrorist organizations are involved in this activity and that they are taking advantage of a lack of communication between tax, judicial and law enforcement agencies in Europe.

This article demonstrates the importance of communication and partnership between the free countries of the world. For many years, it has been known that terrorist organizations were funding themselves through the drug trade, particularly in Afghanistan. In theory this would bring them in partnership with criminal organizations. If the allegations in this report are true, it is entirely possible that they are branching out in their activities to fund their terrible causes.

Here is an earlier post on the recent McAfee study on the impact of organized crime on the internet.

http://fraudwar.blogspot.com/2005/07/mcafee-study-on-organized-crime-and.html

For the article by Bertrand Benoit, please click on the title of this post.

Tuesday, August 02, 2005

ATM/Debit Card Fraud on the Rise?


There are a series of articles circulating in the press stating that ATM/Debit Card Fraud is on the rise. A recently published report claims that about half the banks fail to check security codes when processing transactions.

The report by Gartner Inc., claims that fraudsters took $2.75 billion from consumer accounts in the past year. Gartner claims that about 70 percent of these losses could have been avoided if the security information imbedded in the magnetic strip had been checked rather than relying on account numbers and pin numbers. Another problem cited is the relative ease with which a pin (personal identification number) can be changed by telephone, or over the internet.

A lot of this has been caused by a noted increase in phishing. For more information on the increase in this activity, please read:

http://fraudwar.blogspot.com/2005/06/ibm-states-phishing-increases-300.html

Another, old-fashioned means, not reported in these articles is when a encoding device is attached to a point of sale (register) system and card information is downloaded to a remote computer (normally a laptop). A hidden camera is then placed above the pin pad and the pin is recorded. This can easily be avoided by hiding your pin number when inputting it on a pad.

The same thing can be accomplished when a fake ATM Machine is set up, which copies the information off the magnetic strip and a hidden camera records the pin. Again, it is recommended that you always conceal your pin number when entering it.

No matter how the information is obtained, fraudsters normally create a cloned card and then are able to use it at ATM machines and or retailers accepting ATM cards. Although, in most instances, the money is returned to the victim by their bank, it causes a harship for the person going through the process. I would also guess that the true cost must be passed on to the consumer in the form of increased fees in order for the financial institutions to stay profitable.

The report was based on a survey of 5,000 consumers in May and discussions with professionals in the industry. The banks are questioning this, but the report is backed up by a prominent member of the Anti-Phishing-Working-Group. Their website is:

http://www.antiphishing.org/

For one of the articles by Reuters, click on the title at the top of this post.