News for hackers. Stuff that matters.
Re:Western Union admits to aiding wire fraud, to pay $586M by Kazamai on Monday January 23, 2017 @02:15PM (#13464996)
Western Union has also been aiding international fraud from romance scammers etc. Even though they know the sources are suspicious they still let people send large amounts of money to countries like Ghana and Nigeria.
Re:Western Union admits to aiding wire fraud, to pay $586M by notahacker on Monday January 23, 2017 @04:31PM (#13466235)
It's difficult to "know" the source is suspicious when a fraud hotspot also receives $35 billion a year in remittance income from the same countries targeted by the fraud, and supplying a means for people to send income earned working in Western countries to various unbanked relatives and their creditors in small African towns is Western Union's raison d'etre. That doesn't mean they can't be more helpful in dealing with fraud and that no agent has ever suspected anything of any of their more regular customers, but sending a few hundred dollars to a Nigerian is a standard legitimate use case for Western Union.
Re:Western Union admits to aiding wire fraud, to pay $586M by coryfklein on Monday January 23, 2017 @05:56PM (#13466990)
As the article points out, Western Union actually knew that some specific transactions were fraudulent, but did nothing to report or prevent them.
Re:Western Union admits to aiding wire fraud, to pay $586M by cm2187 on Monday January 23, 2017 @03:40PM (#13465784)
So have internet service providers, your email service and your laptop manufacturer...
Re:Western Union admits to aiding wire fraud, to pay $586M by Smirnoff on Tuesday January 24, 2017 @04:16AM (#13469876)
So true. I used to work closely with investigations department during my tenure at Western Union. There have been so many heartbreaking stories of people emptying their retirement accounts and sending all of their money to "lovers" from Nigeria or other non-US countries.

We tried to stop these payments but they would find other ways to send cash directly. Dealing with international wires is tough. When we stopped payments and tried to protect people, the story wouldn't end there. The people would find other means to screw themselves over. That's what loneliness and desperation do to gullible people.

Re:Western Union admits to aiding wire fraud, to pay $586M by forgetsusername on Monday January 23, 2017 @02:47PM (#13465289)
>Even though they know the sources are suspicious they still let people send large amounts of money to countries like Ghana and Nigeria

On one hand we want Bitcoin with no constraints on money transfers, on the other we want money transfer services to vet the recipient and allow or disallow the transaction.

Why do we desire homogeneity in service? Let the market offer a variety and we can choose the level of "transaction safety" we desire.

Re:Western Union admits to aiding wire fraud, to pay $586M by rhaps0dy on Monday January 23, 2017 @02:55PM (#13465362)
HN is not a hivemind though. Also Western Union could say "it's a scam, are you sure?" instead.
Re:Western Union admits to aiding wire fraud, to pay $586M by bitJericho on Monday January 23, 2017 @03:58PM (#13465936)
I'd bet they do already. The thing with people falling for scams is that they will refuse to the end of time to believe its a scam.
Re:Western Union admits to aiding wire fraud, to pay $586M by ensignavenger on Monday January 23, 2017 @04:54PM (#13466438)
I worked at a computer shop many years ago. We had a guy come in wanting us to help him send an email with his personal information (bank account, social security number, IIRC) to- a Nigerian scammer! We told him it was a scam, and he insisted it was not, he refused to listen to reason. I don't know if he ever found someone to help him or figured it out on his own or what came of it.
Re:Western Union admits to aiding wire fraud, to pay $586M by jandrese on Monday January 23, 2017 @04:42PM (#13466335)
The advantage of Bitcoin is that it's so difficult to use, especially for large volumes of money, that the people getting scammed can't make it work.

It's difficult to find someone both dumb enough to fall for a 419 scam, but smart enough to operate a bitcoin client and sign up for an exchange.

Re:Western Union admits to aiding wire fraud, to pay $586M by trustfundbaby on Monday January 23, 2017 @03:47PM (#13465842)
Ghana is pretty okay when it comes to that kind of stuff. Eastern Europe has high incidents of fraud too, but somehow that never makes the news.
Re:Western Union admits to aiding wire fraud, to pay $586M by SeoxyS on Monday January 23, 2017 @04:33PM (#13466249)
Honestly, if people get conned into sending money to Nigeria, why should it be anybody else's problem but theirs. Yeah, it sucks, but it's fully their fault. It's a pretty stupid thing to do and they should know better.
Re:Western Union admits to aiding wire fraud, to pay $586M by jandrese on Monday January 23, 2017 @04:40PM (#13466314)
The problem is when those people drain out other people's retirement accounts or do other incredibly stupid things.

Plus, it is often their family that suffers. People don't exist in a vacuum.

Re:Western Union admits to aiding wire fraud, to pay $586M by DougN7 on Monday January 23, 2017 @04:40PM (#13466310)
> and they should know better

There are some really desperate and naive people in the world, and generally they're not that way by conscious choice.

Re:Western Union admits to aiding wire fraud, to pay $586M by nommm-nommm on Tuesday January 24, 2017 @09:18AM (#13471438)
Because it has a high cost on society.
Re:Western Union admits to aiding wire fraud, to pay $586M by partycoder on Monday January 23, 2017 @02:42PM (#13465252)
I do not think it is a good idea to make a blanket accusation over an entire country.

Presumption of innocence, reasonable suspicion and burden of proof are core concepts of our justice systems for a reason.

Re:Western Union admits to aiding wire fraud, to pay $586M by handedness on Monday January 23, 2017 @03:57PM (#13465924)
But individuals and businesses aren't the justice system. (Something in which both sides can take comfort.)

I know firsthand that some retail businesses have found much better ROI by just presuming fraud (guilt, if you want to call it that) about certain countries (Nigeria and Romania frequently wind up on that list), and working to establish bona fides if someone from one of the banned locales contacts them directly to try to work out a purchase.

Which in one sense does sound horrible, but I'd imagine most personal eBay sellers would seek similar bona fides if the iPhone they're selling is purchased by someone reportedly from, say, Nigeria. It's hard to fault the risk mitigation instincts that humans have practiced for their entire history.

The reason these retailers developed the policies they did is because they were manually reviewing orders and very, very few–if any–were legitimate. Visits to the street markets in said countries turned up table after table full of highly discounted, almost certainly stolen goods. That's hard to ignore when setting corporate policy.

I'm not sure what the answer is, as one quickly gets into things like societal contracts, because we all pay some collective cost for the bad actors in our society, and at some point bear a non-zero degree of responsibility for not being either willing or capable of constraining those bad actors.

Re:Western Union admits to aiding wire fraud, to pay $586M by partycoder on Monday January 23, 2017 @05:21PM (#13466669)
Banks historically have also profited from racial profiling, and insurance companies have also profited by discriminating against women, especially in countries with paid maternity leave.

Country of origin discrimination is no worse than that. I do not think those are ethical business practices, and is morally no better than scamming via e-mail.

Re:Western Union admits to aiding wire fraud, to pay $586M by handedness on Monday January 23, 2017 @05:57PM (#13467002)
And auto insurance companies currently profit by discriminating against males, the young, etc., all based on statistical realities. Health insurance companies charge a 20-year-old less than a 70-year-old. Nobody seems to take real ethical issue with that.

If someone owns their company and doesn't want to ship to Romania, is there an ethical way for me to force the owner to do so? There isn't one that I've heard. Many just won't sell internationally, partly because of the hassle, partly because of the lack of reasonable recourse systems. Does this kind of discrimination which bothers you become OK provided it's mass discrimination? Because that, to me, breaks down really quickly in the face of scrutiny.

Regardless, I take issue with your characterization of it. Deliberately trying to defraud someone is ethically the same as a good-faith effort to defend one's self against fraud? That's a moral equivalence that I think one would have a very difficult time building a system of ethics to justify.

Re:Western Union admits to aiding wire fraud, to pay $586M by partycoder on Monday January 23, 2017 @06:01PM (#13467034)
Even car color is discriminated against. Red cars are tied to extroversion and risk taking.

Then... yes. Discrimination can be very harmful. Lack of health insurance for example can have fatal consequences, which can be more severe than scamming someone.

Re:Western Union admits to aiding wire fraud, to pay $586M by handedness on Monday January 23, 2017 @06:35PM (#13467318)
Discrimination can be very harmful, yet all things have opportunity costs. The logical terminus of what you're advocating is that all companies should be required to sell all products (perhaps with some export restrictions respecting natural security) to all countries (again with some restrictions respecting trade embargoes).

Is that correct? Because if so, what you're going to do is increase the cost of doing business, as the costs of both absorbing scamming, and increased anti-scamming efforts, increase. Which will eventually in some form or another impact either the employees of companies, the cost of goods, or both.

Increasing the cost of goods and suppressing wages can also have tragic consequences–somewhere, someone will starve to death. Or be unable to afford health care (the costs of which have been poorly mitigated by our attempts at doing so by way of changing the health care apparatus). Or be unable to afford an experimental procedure that might change their child's life, but isn't covered by insurers. Or lessen charitable contributions to organizations keeping people alive in impoverished places. Reduce taxable income thus reducing federal assistance program budgets. There are countless more similar scenarios.

If you equate increasing health insurance costs based on anything an insurer knows about the ones they're insuring with fatal consequences, then it isn't a stretch to see your idea also has fatal consequences.

One couldn't even discriminate to do more good, in such a system.

Except it would be using American law to improve the lives of Romanians and Nigerians (both the honest and dishonest, tho probably proportionally in favor of the dishonest, since the thing preventing Nigerian access to American exports has less to do with shipping policies and more to do with basic economics, and Romania is part of the Schengen Area, so they're hardly cut off from the world), at the expense of American voters, taxpayers, citizens.

Which strikes me as an awfully difficult thing to justify ethically, and a short slope away from a globalized system that would have to redistribute all benefits to everyone, regardless of whether they wanted them or not, would benefit from them or not, be corrupted by them or not, be weakened by them or not, and it would probably start with transferring wealth from developed nations to developing ones until parity is reached.

Which is a noble sentiment, but going from theory to implementation would be something between a train wreck and a blood bath.

Or, we allow people who make things to decide whether they want to sell things to certain countries.

Incidentally, I have a shipping insurance provider I use that won't allow shipping to certain zip codes in the US. Those zip codes tend to have high levels of theft of packages off doorsteps. Is that ethical for them to stipulate that I can ship to some zip codes, but not others, based on the effects of the behavior of some people in those zip codes? For the record, looking them up I saw no major correlation with race, gender, or poverty. But it's still discrimination.

I think your basic idea is noble and worthy, but I think it ignores the realities present in how policy shapes reality. Great ideas have sometimes resulted in horrifying human tragedy, and with the world improving in most places by most reasonable measures, I'm not inclined to throw out what's been elevating humanity pretty effectively for something that is akin to systems that have been shown to debase humanity pretty effectively, when practiced.

Re:Western Union admits to aiding wire fraud, to pay $586M by abraae on Monday January 23, 2017 @02:47PM (#13465286)
But it would be perfectly reasonable - and not at odds with anyone's justice system - to set your fraud detection trigger such that:

if (source.isSuspicious() && destination in ('Ghana', 'Nigeria')) { investigateFurther(); }

Re:Western Union admits to aiding wire fraud, to pay $586M by forgetsusername on Monday January 23, 2017 @02:48PM (#13465304)
>if (source.isSuspicious()

What are the attributes of the source object that we need to determine if it's suspicious? That's the hard part.

Re:Western Union admits to aiding wire fraud, to pay $586M by johnmaguire2013 on Monday January 23, 2017 @02:54PM (#13465349)
First time user of WU sending money to Nigeria or Ghana seems pretty reasonable to me.
Re:Western Union admits to aiding wire fraud, to pay $586M by wheelerwj on Monday January 23, 2017 @03:21PM (#13465605)
First time user of WU sending more than $500 to Nigeria or Ghana seems pretty reasonable to me. Let alone thousands or tens of thousands.

At the end of the day though, scammers will be scammers and victims will be victims. You can't prevent everything but you can still try harder than WU.

Re:Western Union admits to aiding wire fraud, to pay $586M by Ar-Curunir on Monday January 23, 2017 @03:40PM (#13465782)
Really? At least you would test that the system works before handing over so much of your money to them, right?
Re:Western Union admits to aiding wire fraud, to pay $586M by wheelerwj on Monday January 23, 2017 @07:25PM (#13467700)
you'd be surprised. A particularly common scam involves having the victim send 2000-2500 and the going for smaller amounts, $250-1000, on rounds 2+.

I'm not particularly well versed in romances scams but I've heard they can start in the similar range and then escalate into 5 figures quickly.

Re:Western Union admits to aiding wire fraud, to pay $586M by TorKlingberg on Monday January 23, 2017 @03:20PM (#13465588)
Some people have family in Nigeria or Ghana, and everyone is a first time use once. The whole point of Western Union is sending money to places that don't have a solid banking system.
Re:Western Union admits to aiding wire fraud, to pay $586M by kbenson on Monday January 23, 2017 @03:27PM (#13465675)
Asking if they are sure it's not fraud is not necessarily preventing them from using the service. People with family in those areas will presumably know based on the wording that it doesn't apply to them. A notice that the person has to acknowledge seems a fairly innocuous defense mechanism.
Re:Western Union admits to aiding wire fraud, to pay $586M by jandrese on Monday January 23, 2017 @04:49PM (#13466397)
Even something as simple as:

Have you physically met and personally know the person you are sending money to? Are they a family member?

If you answered no to both of these questions STOP NOW IT IS PROBABLY A SCAM. If you wish to continue please consult with the teller.

Re:Western Union admits to aiding wire fraud, to pay $586M by partycoder on Monday January 23, 2017 @05:19PM (#13466653)
Under that criteria, 100% of eBay transactions would be scams.
Re:Western Union admits to aiding wire fraud, to pay $586M by jandrese on Tuesday January 24, 2017 @11:42AM (#13472905)
If you are buying a laptop off of eBay from Nigeria and they demand that you use Western Union to pay for it there is very close to a 100% chance that you are being scammed.
Re:Western Union admits to aiding wire fraud, to pay $586M by sedachv on Monday January 23, 2017 @04:52PM (#13466423)
I think it is valid to think in terms of expected value here, where value is negative (a loss), since there is a large volume of transactions so the law of large numbers will apply. Set a threshold of expected loss below which you will not flag transactions. Then either very large payments or relatively smaller payments to countries with a higher known percentage of fraudulent transactions will flag a transaction. You can further refine this if for example there is a relationship between observed fraud rate and transaction amount.

If a company profits off of fraudulent transactions and is aware of the fraud, and the attorney general or equivalent stops viewing this as negligence, there is an incentive for the company to encourage this fraud to increase profits.

Re:Western Union admits to aiding wire fraud, to pay $586M by partycoder on Monday January 23, 2017 @02:55PM (#13465367)
It is as reasonable as proactively detaining everyone using tatoos or sports clothing.

Correlation does not imply causation.

Ethically, I do not think it is correct to outright flag an entire country. It can be used as one factor, but that in itself is not enough.

Japan for example, a country that is not usually associated with crime, has one of the most profitable crime organizations in the world, the Yakuza. The UK might be where most transactions tied to money laundering are conducted, and so on so forth. In the grand scale of things, Nigerians are in a lower order of magnitude when it comes to dirty money.

Fraud detection, at scale, takes not one or two but many factors in consideration. That would produce a level of confidence that will translate into a suggested action. If the confidence is high, a fraud detection system will take an action without human intervention. If the confidence is low, a human needs to intervene and take action.

Re:Western Union admits to aiding wire fraud, to pay $586M by adevine on Monday January 23, 2017 @03:07PM (#13465463)
You are confusing legal restrictions specifically set up to limit the power of the state with tools every company will use to limit fraud.

For example, you speak of "presumption of innocence" and "burden of proof" as "core concepts of our justice system". These are only core concepts of our criminal justice system; our civil justice system has very different rules for burden of proof, for example.

Some countries have much, much higher percentage of fraudulent transactions than other countries, and it's perfectly reasonable for Western Union to use country of origin as a factor in raising the fraud red flag. Western Union doesn't have the power to arrest anybody, and they have no reason to "presume innocence" for any one of their customers. If anything, when it comes to monetary transfers, I think it's safer to "presume guilt", that is assume all transactions have reason to be fraudulent, and then only let transactions through if you have strong reason to believe they are not fraudulent.

Re:Western Union admits to aiding wire fraud, to pay $586M by partycoder on Monday January 23, 2017 @05:13PM (#13466602)
The burden of proof is still on the party forwarding an accusation in civil cases. Presumption of innocence still holds in civil cases.

Presumption of innocence is even in the UN universal declaration of human rights.

What is considered burden of proof would be different, but it is still responsibility of the person forwarding the accusation. What you describe would be an accusation through "probable cause", described as reasonable grounds to conduct a search or investigation.

That being said I think country of origin are not reasonable grounds. Could be an individual sending money home, could be a merchant, could be anything.

Re:Western Union admits to aiding wire fraud, to pay $586M by adevine on Wednesday January 25, 2017 @11:52AM (#13483068)
> Presumption of innocence still holds in civil cases.

This is just flat out, 100% wrong. Mainly because "innocence" and "guilt" aren't even concepts that apply in civil cases.

All of your responses still seem to assume that businesses somehow have the same level of responsibilities and restrictions of a government, and that is just not true.

Re:Western Union admits to aiding wire fraud, to pay $586M by st3v3r on Monday January 23, 2017 @07:16PM (#13467641)
You bring up justice system and cases, but you fail to remember that we're talking about a company deciding not to do business with someone.
Re:Western Union admits to aiding wire fraud, to pay $586M by partycoder on Monday January 23, 2017 @08:32PM (#13468071)
With someone or an entire country? Based on what specifically? to which extent?

300 people in a 173 million people country do fraud, flag them all?

Re:Western Union admits to aiding wire fraud, to pay $586M by handedness on Monday January 23, 2017 @09:10PM (#13468263)
It matters less what the ratio of bad actors to population is, and more what the ratio of bad actors to legitimate orders is. In the examples I mentioned above, they were seeing hundreds, perhaps thousands of bad orders without seeing any genuine ones. From countries with known issues of trafficking stolen goods.

The truly genuine customers can contact the company directly and deal with them directly, rather than buying through a site.

When your per-capita GDP is a few dollars a day, the odds that the order for a multi-thousand-dollar consumer electronics item is genuine gets awfully close to zero.

You call it discrimination against an entire country, I call it a sensible policy for a seller to enact. If you'd like to volunteer to police these fraudulent purchases, I'm sure they'd appreciate the help, but when you have an entire department that spends most of its time dealing with orders from two countries, orders which almost always turn out to be fraud, the most sensible way forward becomes nearly self-evident.

As others have mentioned, you seem to draw no distinction between constraints on governments, justice systems, and private policy determined by individuals and companies. I think until you stop confusing the two concepts (and the vocabulary thereof), you'll have a difficult time persuading anyone to come around to your thinking. (To say nothing of forming a coherent ethical argument for why you think this is some great injustice and what possible solutions might be.)

Re:Western Union admits to aiding wire fraud, to pay $586M by partycoder on Monday January 23, 2017 @10:09PM (#13468503)
You are not taking in consideration that poor countries have high inequality and disproportionally rich people at the top. So no, that's not correct.
Re:Western Union admits to aiding wire fraud, to pay $586M by handedness on Monday January 23, 2017 @10:26PM (#13468569)
I'm taking exactly that into consideration–Nigeria has a sizable population, but very few people who can actually buy expensive consumer goods from western countries. So the odds are even more likely that orders are fraudulent. This isn't a country with a giant middle class.
Re:Western Union admits to aiding wire fraud, to pay $586M by partycoder on Monday January 23, 2017 @11:10PM (#13468740)
Those few are actually in the order of hundreds of thousands if not millions. You are talking about a 173 million people country.

If only 1% of 173 million had a western-like middle-class+ purchasing power, that gives you? 1.73 million. A lot of people you can do business with. Like 4x that of Luxembourg.

Re:Western Union admits to aiding wire fraud, to pay $586M by st3v3r on Tuesday January 24, 2017 @01:20PM (#13473970)
You are also not taking into consideration that I, quite frankly, do not have the time or expertise to vet everyone who tries to buy something from me.
Re:Western Union admits to aiding wire fraud, to pay $586M by sixo on Monday January 23, 2017 @03:02PM (#13465427)
It's a good bit more reasonable than arresting people.
Re:Western Union admits to aiding wire fraud, to pay $586M by Jdam on Monday January 23, 2017 @02:54PM (#13465352)
I'm a simple (and data driven) man, I just look at statistics, see a pattern and factor in the probability of fraud when doing Western Union money transfers to Ghana.
Re:Western Union admits to aiding wire fraud, to pay $586M by OedipusRex on Monday January 23, 2017 @02:44PM (#13465256)
Damned if you do, damned if you don't.