In-Depth Notes on Money Laundering and Cybercrimes
Money Laundering
- The primary goal of Anti-Money Laundering (AML) systems is to surveil legitimate financial flows globally for business intelligence.
- In Australia, AML regulation has been privatized, termed as the "deputization of the entire finance sector" by Tham.
Cybercrimes
11.1 Introduction
- Cybercrime takes advantage of the Internet and includes malicious activities such as:
- Computer viruses,
- Phishing for data,
- Malware, spam,
- Ransomware, and others.
- Cybercrime also includes new forms of traditional crimes like information theft, fraud, scams, and money laundering.
- The rise of ransomware incidents has reached "epidemic" levels as of 2015, due to the lack of regulation in cyberspace.
- Law enforcement has to take a regulatory role, as reports of cybercriminal activities are reported frequently.
- Notable events include the interference in the US 2016 elections and major ransomware attacks in 2017.
- The financial impact of cybercrime is vast, with projected costs estimated in trillions.
11.2 The Nature of Cybercrime
- Cybercrime encompasses a variety of acts rather than a singular concept.
- Core acts involve the offense being centered on a computer, while derivative acts may not align as closely with the definition of cybercrime.
- The transnational character of cybercrime results from quick information movement across borders, complicating law enforcement efforts.
- Evidence will often be found in different jurisdictions even if the offender and victim are co-located.
- Digital threats present numerous regulatory challenges like:
- Data volatility,
- User anonymity,
- Cryptography use,
- Organized crime (upwards of 80%).
11.3 Towards a Global Response that Respects Human Rights
- Global consensus is growing for harmonizing legal responses to cybercrime to improve international cooperation.
- Double criminality presents issues, such as differing definitions of crimes across jurisdictions.
- The Council of Europe's Commissioner for Human Rights emphasizes compliance with international human rights during cybercrime enforcement.
- Legislators must balance protecting individuals from cybercrime while safeguarding their privacy rights.
11.4 The Council of Europe Cybercrime Convention
11.4.1 Introduction
- Cybercrime legislation began in the 1970s, with the Council of Europe adopting the Budapest Convention in 2001.
- The Convention serves as a standard for substantive criminalization of cybercrimes but does not define "cybercrime" directly.
- It categorizes offenses broadly, allowing adaptability as technology evolves.
11.4.2 Confidentiality, Integrity, and Availability Offences
- CIA Offences protect computer data confidentiality, integrity, and availability:
- Illegal Access (Article 2): Criminalizes unauthorized access to computer systems.
- Illegal Interception (Article 3): Criminalizes unauthorized interception of non-public transmissions of data.
- Illegal Data/System Interference (Articles 4 and 5): Covers damaging or altering computer data or hindering system functions.
- Computer Misuse Tools (Article 6): Criminalizes the creation and possession of devices or passwords intended for committing CIA offences.
- Computer-Related Forgery (Article 7): Criminalizes alterations of computer data resulting in inauthentic data.
- Computer-Related Fraud (Article 8): Involves causing property loss through manipulation of computer data or system interference.
11.4.4 Content-Related Offences
- Child Pornography (Article 9): Prohibits the production, distribution, and possession of child exploitation material.
- Copyright Infringement (Article 10): Addresses the illegal use of computers to violate intellectual property rights.
- Aiding and Abetting (Article 11): Calls for criminalization of knowingly assisting in the commission of offences.
- Criminal liability for legal persons is also stipulated under the Convention.
11.4.6 Penalties
- The Convention requires effective sanctions for cybercrime offenses, but implementation varies.
11.4.7 The Cybercrime Convention's Substantive Shortcomings
- Several new forms of cybercrime emerged since the Convention's formation, including:
- Data Espionage (not covered),
- Cyberbullying,
- Sexting,
- Revenge Porn.
- Lack of clarity about internet service provider responsibilities remains a concern.
11.5 Other Regional Developments
- Various international agreements, such as the Economic Community of West African States Directive, aim to address cybercrime.
- Regional conventions demonstrate trends towards expanding criminal definitions, although often lacking systematic approaches.
- Innovative measures like the ASEAN and Arab Convention on Cybercrime exist to handle new concerns.
11.6 A UN Cybercrime Convention?
- Despite past discussions on a UN Cybercrime Convention, no global treaty currently exists.
- A potential UN convention could address issues of sovereignty in cybercrime enforcement but faces resistance from Western nations.
11.7 Conclusion
- Future crime will likely involve a 'cyber' element due to technological advancements.
- The fragmentation of international responses to cybercrime poses challenges for effective law enforcement and the protection of human rights.