Economic Crime and Corporate Transparency Bill (First sitting) Debate
Full Debate: Read Full DebateStephen Kinnock
Main Page: Stephen Kinnock (Labour - Aberafan Maesteg)Department Debates - View all Stephen Kinnock's debates with the Department for Business, Energy and Industrial Strategy
(2 years ago)
Public Bill CommitteesQ
Nick Van Benschoten: I think they could be improved, yes.
Q
Nick Van Benschoten: Are you addressing the question to me?
To both of you, if you do not mind. It would be good to hear from both of you on both questions.
Nick Van Benschoten: My view is that, in terms of resourcing, there is a lot of new technology. Companies House is quite lucky that it can leapfrog using best practice. We have had a number of meetings with it. I think you may be hearing evidence from Graham Barrow later; we had a roundtable with Graham Barrow, Companies House and some other providers to try to explore this issue. Companies House is quite lucky in that it does not need to be a manual exercise: the goal is to get very much a minority manual review by humans, with the majority being technology and machine learning and so on.
That said, we also did a webinar with a number of data providers, including well-known companies that are looking at the size of the challenge and the opportunities. There is a big difference between quick wins and longer-term investment. Companies House already has a risk engine; it has data analytics already. It is just that its enforcement people, working as hard as they can, have their hands tied behind their back. I think there will be a lot of policy development, and work to implement not just the technology but the way that it interacts with the regime that it wants to set up. It is a challenge, because the short term is a burning platform.
Known patterns of abuse are identified every day. Also, a number of companies may be about to walk off with a lot of stolen public money through bounce back loan scheme fraud, and that is an area where Companies House may or may not have powers. Whatever powers the Bill gives need to be operated at speed. Sorry, that was a roundabout way to get to your question. There are short-term things it can do now, and there is a long-term thing; but it must make sure that it is dealing with the urgent as well as the transformative. We understand that the transformative exercise will take a long time, but there is also need for it to apply more tactical focus around the risks, especially in the short term. What was your second question? Sorry, I forgot it in my enthusiasm.
On data sharing.
Nick Van Benschoten: Each country has its own threats and problems. Singapore’s COSMIC database addresses particular exposures and problems that it has with trade-based money laundering. The UK is in a different place in that market, but we have our own problems. In terms of data-sharing, one of the key things we would like is for Companies House to enable permissioned access to the regulated sector. We have a lot of problems that are not so much in high-end corporate, but in the retail customer base. We have money mules for fraud, we have a lot of spoof companies enabling purchase and investment scams. Trying to work out where exactly the needle is in the haystack is difficult when we do not all have access to the same data.
Companies House seems to be facing a binary choice: either it is public, or it is only for the public sector. There does not seem to be a middle ground that works on a need-to-know basis, where you have an obligation to apply money laundering checks and to have careful, need-to-know handling procedures and anti-tipping off and so on, and where that information is available for the purposes of safeguarding your customer and maintaining the integrity of the market. From a UK perspective, that is definitely something that we would support. We also think it might allow us to develop something equivalent for our own risks, as the Singaporeans and other countries have done.
Gurpreet Manku: We have focused on the limited partnerships provisions in the Bill, but in principle we would support Companies House being appropriately resourced to implement all these changes effectively. I have no objections to data-sharing with relevant authorities. Our investment community operates across the globe, so we are used to this type of activity in other jurisdictions.
Q
Nigel Kirby: Respectfully, I think that is a different question.
You asked me to put my other hat on, Dame Margaret. Looking at the scale of fraud—you know, you have got it here; you are familiar with it—and the number of victims and the cost to the UK, it is time for the UK and those with the power to do so to either think about fraud as a strategic policing requirement or, going even further, ask whether it is now a national security threat. I do not just mean with that label—that is really important. You can put a label on these things, but if it could be classed as a national security threat and have the available resources brought together from our national agencies and national policing, that might have a greater impact for the public.
Q
I have two questions. First, I am trying to understand why you have this sense of optimism, because it looks like a pretty dire situation to me. Our enforcement agencies have been starved of the resources and capabilities they need. Secondly, you have had a long career in the NCA and in enforcement; I am sure you are still in touch with some of your former colleagues. If you had to define the resources they need, what extra would they need to be able to turn this situation around? It would be great to hear from you on that.
Nigel Kirby: For clarity, I used “world-leading” specifically in reference to private-public partnerships and what we are doing for voluntary information sharing. Look at the joint money laundering intelligence taskforce and the facts in that space: it has supported 950 investigations that have led directly to 280 arrests, with £86 million secured. There are some hard figures around here that are different. When I was in law enforcement, we had law enforcement from other countries coming to ask how we did it, including Singapore and Holland. I am in the private sector now, and we have private sector colleagues coming to ask us how do we do that part. That is just a part of the ecosystem that is important—
Point taken.
Nigel Kirby: If I misled you or you took it that way, that was not intended.
On your question about if I were still there, I am sure that Graeme Biggar, the DG of NCA, will have plans for what that could look like. When I was there, we certainly put forward evidence-based propositions such as, “If there were x amount of funding, these are the extra capabilities we could bring and this is the impact we believe it could have.” I am afraid my contacts are not close enough now to know the detail of that.
Q
Nigel Kirby: I fully agree that we need enforcement to be properly resourced with the right capabilities to be able to deliver what it is asked to do.
Q
Nigel Kirby: Well, it does not stop that in the UK because our financial system launderers are in there, but what we can do is to prevent them from continuing to abuse the financial system. Take the example I gave with the five other banks—four were sending money—that were involved with Lloyds. The Bill will allow us to have a conversation with the four banks that were sending money into our companies, and to say “In relation to our responsibility for understanding due diligence, money laundering and so on, can we share information on those four companies so we can better understand those flows from those companies?” That is important, because some of them may have been legitimate and some may have been illegitimate, but that will help us to define the good from the bad in that particular space. It will also act as an alert trigger for those other four banks to have a look if they have not done so already.
An intelligence-led approach would say, “Lloyds has a concern about these four companies” and it could look further into the matter and do an investigation into its own relationship with its customer. The other element on all that money that came through to us—it was in the millions—that went out to a fifth bank, which I will call bank F, is that we could alert that bank about our money laundering concerns, provided we had exited those three companies, which we did. If that bank had not already picked it up with its transaction monitoring, it would have an intelligence-led trigger to be able to do its own investigations, and to stop that and report it to the authorities.
The final and important part of this is the indirect part—we call it the utility. The ability to better share this information for others is important because. If all those companies were exited out of the financial system by the five banks involved, it is highly likely that they would go on and open up accounts with other banks. This Bill gives us the opportunity to be alerted to that and to take the appropriate action and due diligence that we need.
Q
Andy Gould: Sure. Fraud is not really my area of responsibility—I am focused very much on computer misuse act offending—but yes. I know there has been significant additional resource put into the ROCUs for fraud in the last couple of years. Is there enough capacity to meet the demand? Probably not. What policing probably needs to do is take a slightly different approach. Rather than trying to investigate those volume crime offences, it should focus more on those organised crime groups or individuals that are doing the most harm. That is the kind of pivot that policing is trying to make, in terms of being more proactive. I know Commander Adams is giving evidence this afternoon, and he will be able to tell you more about that.
Q
Andy Gould: Yes, I do. I think we have got the capability, but what we lack is capacity. The capability we have got today does not necessarily mean we will be able to maintain that capability tomorrow. We have invested, through the national cyber-security strategy and the programme through Government. We have got about an extra £100 million that has been invested over the last four years or so, building capability across policing. Some of that money we have effectively taken into crypto, so that cyber money is being used to cross-subsidise wider policing. We have created what we describe as cryptocurrency tactical advisers across the whole of policing. There are now officers in every force and every regional organised crime unit who are trained and equipped to do that. We have nationally procured the investigative tools to enable them to progress the investigations, and we have a national storage platform to store that once we have seized it.
We are in a position where we have actually seized hundreds of millions of pounds worth of cryptocurrency assets within the last year or so. The challenge we have is that it is getting harder and harder to do. The assets themselves are becoming more diverse and more technically complex, so our officers are in a bit of an arms race trying to keep up.
On the tools that we use, you might have one supplier that is brilliant on Bitcoin but not so good on another asset class, so we need more than one investigative tool to be able to investigate effectively. That is very expensive. One of the providers is currently quoting $60,000 to $80,000 per licence. That is unachievable, or unsustainable, for policing. We need to procure nationally for everybody, so we have an 80% discount on our current investigative tool, taking that approach.
The big worry for me at the moment is not just the technology changes and whether we will be able to maintain that level of resourcing and expand the capacity across policing; we have created a real staff retention problem. Because crypto is an emerging market, some of the best expertise and understanding of crypto in the UK sits within policing. We have been investigating cryptocurrency since 2015 or 2016. One of my sergeants has just been offered 200 grand to go to the private sector. We cannot compete with that. That is probably the biggest risk that we face within this area at the moment.
Q
Arianna Trozze: I would echo Andy’s point about the difficulty of tracing certain cryptoassets and investigating certain chains and things like that, and how this is evolving rapidly in competition with the existing providers and the blockchain services themselves. It gets more and more difficult to investigate as time goes on. You need more and more capacity building and investigative tools. At the same time, the crypto companies and the blockchain companies are seeking to develop their technologies in ways that will evade that detection, so it is a constant race between the two sides to be able to effectively investigate and prosecute these crimes.
Q
Arianna Trozze: One of the key ways that legislation can future-proof itself in the face of this rapidly developing technology is via the definitions. I think that the definition of cryptoasset in the Economic Crime and Corporate Transparency Bill is sufficient to do that. Probably most importantly, the inclusion of cryptographically secured contractual rights means that the definition will cover smart contracts, which is really the technology that underpins all the major advances in the space of, for example, decentralised finance and non-fungible tokens that have taken place, and that we expect to continue to develop in the coming years. Furthermore, the ability to amend those definitions via secondary legislation is clearly a positive, because in the event that something slips through the cracks and develops in a way that we cannot anticipate, it will make it more efficient to change them.
Q
Andy Gould: Yes, definitely. That is a huge benefit of the Bill; it is one of the provisions that we have been asking for. Imagine a scenario where you execute a search warrant on criminal premises: you go in and you can see stolen property, but at the moment, if they are not there, they are not under arrest and there is no existing investigation. You then have no power to take that crypto under the Proceeds of Crime Act 2002. So yes, that is a big step forward for us.
Q
Andy Gould: No.
Q
Arianna Trozze: I need to think for a moment.
Andy Gould: We are generally very happy with the provisions of the Bill. One area that we might want to look at is storage of the assets. Imagine you have £100 million- worth of cryptocurrency. That is really expensive to store, and there is always a security risk around where it is stored. If we were able to turn that into cash straight away at the point we get the restraint from the magistrates court, and that that was a standard power, a lot of that cost and security concern would be taken away. That would be one area where we could improve.
There is an existing power under POCA, where you can go to the Crown court and make that application, but that can be contested by the defendant. There is a cost associated with that. If we had a standard power to do that, I think we would be a bit happier, but we are generally very happy with the provisions in the Bill.
Arianna Trozze: I would echo that I generally think the Bill goes far enough—as far as is technologically possible at this time. I do not think there is anything that I personally would amend at this time.
Q
Arianna Trozze: I see both sides of that argument. Obviously, if assets are transferred into cash and then the original assets significantly gain value, and if the person with the assets were then found not to be a person of crime, the Government would be on the hook for the change in value of those assets. There are two sides to the argument but, as Andy mentioned, the storage is quite risky and very expensive. I ultimately agree, but I see both sides of the argument.
Q
Andy Gould: It is quite commercially sensitive, but it could be a large sum—we are talking hundreds of thousands of pounds.
Q
Jonathan Hall: The funny thing is that there is a principle in law that, if someone is giving advice to someone in order to commit a crime, legal professional privilege does not apply. It is quite hard to find examples of cases in which that doctrine has been applied, so I do not know whether it is about law enforcement having the confidence, when they have a lawyer who is deeply engaged in advising someone to break the law, to say, “We don’t care that you are saying this is privilege because we are going to run the case and say it is for a criminal purpose”. Beyond that, I do not know. I am a lawyer and I completely support maintaining access to justice—of course I do. But you are also completely right that lawyers and trust companies are at the heart of this issue, and I am afraid there are professional enablers.
Q
Jonathan Hall: I have not got an answer beyond the one I gave before, I am afraid. I am sorry; I have not thought of a positive thing. I would just remove that subsection (b) from the definition of UK-connected cryptoasset service provider.
Q
Jonathan Hall: It is quite a bit step to convert it to fiat currency, or pounds, because you are then interfering with the bet that person has placed on the value of the currency going up. I do not know what the figure is in terms of storage. I am interested, too, in the question of potential police liability. I am thinking about the Sanctions and Anti-Money Laundering Act 2018. As you know, before the Government brought in the suite of changes that allowed urgent sanctions, they were very careful to narrow down the potential liability that the Government might have in relation to sanctions, if they were challenged. I have not given it attention, but maybe it is worth having a look at whether there are equivalent protections for the police. The seizures can be very high in this field—they can measure many millions—so the potential liability of the police could be quite high. We would not want the police to be too disincentivised by the risk that they would be on the hook for damages, if everything goes wrong.
In terms of the balance, it may be that ultimately one or other party—the person from whom the assets are seized, or the police—is going to suffer some sort of loss. The key thing is to make sure that people have access to the courts. The courts will have to generate their own sort of expertise and case law over when you should convert a currency. I can imagine that someone will come to the magistrates court saying, “My assets have been frozen. Now is the time for converting them from Bitcoin into Ethereum”, and the court says, “What? How do I determine that?” There will need to be a body of expertise. This is a minor point, but it is something that I support: one of the intentions is to allow quite a wide range of law enforcement personnel to be responsible for the court proceedings, precisely so that you can develop a cadre of people who have got that sort of expertise.
Q
Jonathan Hall: I do not want to say. The key thing is that I am not a Scottish lawyer, and I am not going to try and opine on whether there is a legitimate use of them. The key thing is basic enforcement. You made the point that there are zombie companies. Well, someone in Companies House needs to follow these things up. I am sure they will, but the resourcing of Companies House is where I would put my money.