Computer Crime Research Center

library/Natali.jpg

Fighting crimes committed in the bank computer systems

Date: November 05, 2003
Source: Computer Crime Research Center
By: Natalia Akhtyrskaja

Information has become one of the main elements of national resources due to a rapid development of information technologies in the latter half of XX century. Today the crisis of a society, change of a social and economic structure, increase in the number of managing subjects and development of business undertakings result in intensifying social and economic tensions as well as crimes committed against particular persons and managing structures.

A modern information revolution resulted from the coincidence of some factors:

- Introduction of information processing electronic means; rapid development of electronics;

- Space exploration and development of satellite communication technologies;

- Development of information network technologies and the Internet.

It allowed accumulating and transferring anywhere huge amounts of information at very high speeds and low costs. For example, transferring 45 gigabits of information per a kilometer of communication line for a second costs 0.01 cent whereas it was $1 fifteen years ago. According to the YNIDO Technological Prevision Summit 2003, every year the world market of information and telecommunication technologies increased by 6-8% over last decade but in China, Vietnam and Poland – by 25-27%. This market is allotted among various regions worldwide in quite an irregular way depending on the general level of their economic development. Thus, the USA accounts for 34% of the world market, Europe – 29%, Japan – 12% and the rest world countries – 25%.

According to the World Bank, many OECD (Organization of economic cooperation and development) countries had an extra cost in knowledge fields increased about by 3% over last 15 years when compared with 2.3% of a general economic growth. The increase in joint extra costs in these fields in Germany is ranged from 51-60%, in Great Britain – 45-51% and Finland – 34-42%.

The process of globalization precipitates these tendencies. Comparative advantages of national economics depend on knowledge and scientific innovations rather than natural resources or cheap labor force. Today the process of storing knowledge favors a social progress and the accumulation of capital. OECD countries’ investments in non-material assets, professional staff training, scientific researches, patenting and licensing, software for computer systems and marketing are equal to funds invested into main reserves and sometimes exceed the latter.

Unfortunately, developed countries and those with a transitive economy (including Ukraine) do not fully take all advantages and potential benefits given by an information society. The process of generating and using knowledge, as well as making investments into science and education to develop and increase a living standard significantly differs in different countries. According to the World Bank, 85% of joint world funds in science are invested by OECD countries, 11% - by India, China, Brazil and new industrial states of East Asia and 4% - by other countries worldwide including Ukraine [1].

The development of computer technologies makes us approach the time when technical means will contain a considerable part of information resources. Computers that are more effective and widely used in economic, social and management activities resulted in increasing the importance and value of information and informational resources. However, positive phenomena of the general computerization cause many negative ones connected with misusing computer potentialities. Crimes committed by applying electronic computers and information technologies arouse a special concern for Ukraine’s law enforcement bodies.

Computers themselves can be both an object of property crimes (stealing, destroying, damaging) and a tool of committing them i.e. a means of drawing money, concealing taxes, distorting information and so on. Information itself cannot be an object of property crimes because it has no physical features.

According to the analysis of crimes committed against credit and financial institutions, the number of large-scale electronic misappropriations keeps increasing when compared with that of traditional thefts and robberies. Today banking transactions are made to draw and transfer to offshore accounts tens million US dollars within some minutes. In 1991, $2.6 billion were illegally transferred only to Cyprus.

The criminalistical essence of crimes committed in banking computer systems should be understood to fight them in an effective way. For example, in June-July 2000 Mr. K illegally penetrated into the automated system of the “Platinum” Commercial Bank Ltd by using appropriate software and distorted its data. After that, he drew a tidy sum by swindling and breaching trust. The offense can be qualified as an illegal access to computer information. In this case, computer information on banking accounts was modified in an illegal way. Any form of penetration into the automated system by using computer techniques that allow manipulating data can be regarded as an access to computer information. The criminal had no legal right to handle such data. Therefore, it can be concluded that he obtained an illegal access to computer information by neutralizing means of protection (in itself it can be viewed as a corpus delicti).

The criminal’s actions resulted in drawing money from other’s account. It means an illegal gratuitous appropriation of smb else’s property in favor of a guilty or another person that caused some damage to the proprietor. It raises no doubts. However, the problem is how to qualify this misappropriation. The Penal Code runs that the property can be misappropriated through the theft, swindle, appropriation or embezzlement, robbery or that with violence. In this case, it is not a matter of the above offenses.

The secret appropriation of other’s property is a necessary characteristic of the theft. On the one hand, this case features it. However, the theft is not supposed to use the deception as a way of misappropriating other’s property. In this case, a sum was evidently transferred from other’s account through the fraud. Besides, money proper was not stolen as a material object. The modification of electronic notes resulted in changing the right to possess and dispose of the property (money).

These actions might be qualified as a swindle that is the appropriation of other’s property or gain of the right to other’s property through the fraud or breach of trust. However, the peculiarity of the crime consists in that the proprietor transfers money to the criminal in a free-will way. The voluntariness of transferring money can be hardly detected in this case. Therefore, this crime can be hardly qualified as a swindle.

When does the fraud take place? The computer memory contains electronic information on funds. It allows operating with them. As a rule, special software and hardware are used to protect information from an unauthorized access.

The criminal uses fraud only when penetrating into the banking computer system and overcoming its protection. These actions can be regarded as an “illegal penetration into the dwelling, lodgment or other depository”. According to comments, the penetration can be viewed as an intrusion into the depository with the help of devices (in this case by means of the computer) and fraud. The penetration is not a crime end in itself but a way of obtaining an access to values kept. “Other depository” means a “special device or place equipped, fitted or intended for constant or permanent storage of values and their protection from stealing, damaging or destroying”.

The theft can be regarded as a finished crime only when the property is practically removed and the criminal has a real opportunity to dispose of it at his/her own discretion. In this case, the delinquent person has such an opportunity after accomplishing the transaction [2].

Thus, we have a complex crime characterized with obtaining an unauthorized access to law protected computer information stored in the banking computer system and resulted in modifying it and drawing money from the victim’s account. It shows what damage such crimes can cause and the difficulty of exposing and examining them in court, as well as instituting proceedings against the guilty person.

Criminal proceedings instituted against Gennadie Kuzmichov can be cited as an example of the above situation. In February-July 2000, he opened and used outside Ukraine a dollar account without Ukraine’s National Bank permission, as well as stole a large sum of money by obtaining an illegal access to automated systems.

On February 10, 2000, G.Kuzmichov, Ukraine’s resident, opened in Russia’s Commercial Bank “Platinum” a special dollar account and deposited $50 without Ukraine’s National Bank permission thereby violated the law “On the system of foreign currency regulation and control in Ukraine” of February 19, 1993. According to it, Ukrainians should obtain individual licenses to deposit money on accounts in foreign banks.

Article 80-1, Ukraine’s Criminal Code, qualifies premeditated actions of G.Kuzmichov, Ukraine’s resident, on opening and using a dollar account outside Ukraine without Ukraine’s National Bank permission.

In June-July 2000, G.Kuzmichov deliberately penetrated into the CB “Platinum” automated system by using appropriate detrimental software and distorted its information. After that, he stole a large sum of money...
Add comment  Email to a Friend

Discussion is closed - view comments archieve
2008-07-03 10:03:51 - WER WER
Total 1 comments
Copyright © 2001-2024 Computer Crime Research Center
CCRC logo