Curriculum·G903 Order Management and Reconciliation·about 33 min

Reconciliation: knowing what you actually did

By the end of this lesson you can

  • Explain that reconciliation is checking what the system actually did against what it intended
  • Describe how Samsung Securities issued phantom shares that could not exist and some were sold
  • Reason that a control must catch an impossible state before it is acted on in the market
  • Build reconciliation that compares actions to reality and halts on the impossible

Graduate · enrolled learners

This lesson opens with The Samsung Securities ghost shares, 6 April 2018.

What happened
Samsung Securities meant to pay its employee shareholders a cash dividend of about 1,000 won per share, but its system instead issued 1,000 shares per share, creating roughly 2.8 billion phantom shares that did not exist and could not exist, worth far more than the entire company. No control caught the impossible issuance: the system produced shares out of nothing, and the error reached employees' accounts as if it were real. Some of them then sold millions of these nonexistent shares into the market before the mistake was noticed, driving the price down and forcing the firm to buy shares to cover, with regulatory penalties following. Nothing was hacked; a unit error, shares where won were intended, created a state that was flatly impossible, and there was no reconciliation and no control that compared what the system had done against what could actually be true, so an impossible action was executed and acted upon before anyone knew.
The decision point
Reconciliation is the practice of checking what a system actually did against what it intended and against what is even possible, and it is the control that should catch an impossible state, shares that cannot exist, a position that cannot be held, a total that cannot be right, before that state is acted upon in the market. Samsung Securities is the case: a unit error issued 1,000 shares per share instead of 1,000 won, creating about 2.8 billion phantom shares worth more than the company, and because nothing reconciled the issuance against reality, the impossible shares reached accounts and some were sold before anyone noticed. The lesson is that a trading or settlement system must not only do things but check that what it did is possible and intended, because an error can produce a state that is not merely wrong but impossible, and an impossible state that is not caught will be acted upon as if it were real. Reconciliation is that check: comparing the system's record of what it did against the external reality, the actual share count, the actual cash, the actual positions, and flagging or halting when they cannot be squared. So the discipline is to build reconciliation that continually compares actions against reality and against the bounds of the possible, and to make an unreconcilable result, a state that cannot be true, stop the system rather than flow onward, because Samsung showed that a system which executes without checking whether its output is even possible will hand an impossible state to a market that is perfectly willing to trade it.
Recorded loss
$300,000,000

What you will be able to answer

  • What happened at Samsung Securities (April 2018)?
  • What is reconciliation?
  • Why is an uncaught impossible state so dangerous?
  • What should a control do with an unreconcilable state?

Orientation and Year One are open: anyone can read them without an account. From Year Two onward the lessons are for enrolled learners, because progress through the later years only means anything if it is tracked against a record.

It is free. We do not sell the list and there is nothing to buy at the end of it.

Sources and review

Confidence high·Volatility low·Reviewed 2026-09-18·Owner unassigned

Contested

The roughly 300 million dollar figure approximates the market impact and remediation cost of the erroneous sales and the firm's buy-back and penalties; exact figures were reported in a range and much of the phantom issuance was canceled. The lesson uses the reconciliation mechanism, not a precise loss.

The incident also raised questions about how a system could issue shares that did not exist and about employee conduct; this lesson uses only the reconciliation point, that a control must catch an impossible state before it is acted on.