A cross-border payment is a chain of trust

Graduate · enrolled learners

This lesson opens with The Bangladesh Bank heist, February 2016.

What happened

A cross-border payment is not one transfer; it is a chain of institutions passing instructions, and Bangladesh Bank kept its US dollar reserves in an account at the Federal Reserve Bank of New York. In February 2016 attackers who had penetrated the central bank's systems sent fraudulent payment instructions over SWIFT, the messaging network banks trust to move money across borders, asking the New York Fed to transfer nearly a billion dollars from that account to accounts in the Philippines and Sri Lanka. The New York Fed acted on the messages because they were properly authenticated; the messages were genuine in form and fraudulent in origin. About 81 million dollars reached the Philippines and was largely lost through casinos; most of the rest was stopped, part of it only because a misspelling in one instruction, fandation for foundation, triggered a manual review at a correspondent bank. No system was broken at the New York Fed; it did exactly what a trusted, authenticated SWIFT instruction told it to do. The attack was on the chain of trust, at the one link where the messages could be forged and every link downstream would honor them.

The decision point

Money does not teleport across a border; it moves along a chain of institutions, each acting on a message from the last and trusting that the message is genuine. SWIFT is that trusted messaging layer: a properly authenticated instruction is honored by the receiving institution because the whole system depends on trusting authenticated messages. The security of a cross-border payment is therefore not in the message, which is just data that can be forged at its source, but in the controls at each link: whether the sending institution's ability to originate messages is protected, and whether receiving institutions have any check beyond authentication. Bangladesh Bank is the case where the message layer worked perfectly and the chain of trust was attacked at the origin, so authenticated-but-fraudulent instructions flowed downstream and were honored, and only a typo and a manual review stopped most of the theft. So the decision anyone moving money across borders makes is to see the payment as a chain of trust and to ask where that trust could be abused, at which institution a forged or compromised instruction would be honored, because the corridor is only as secure as the weakest control on the chain, not as secure as the network that carries the messages.

Recorded loss

$81,000,000

Orientation and Year One are open: anyone can read them without an account. From Year Two onward the lessons are for enrolled learners, because progress through the later years only means anything if it is tracked against a record.

It is free. We do not sell the list and there is nothing to buy at the end of it.