The KYC Registry Compliance at your fingertips

1. The KYC RegistryCompliance at your fingertips • March 2018 • Hans-Joachim von Hänisch • KYC Compliance Services

2. Transaction banking related compliance is a highly complex and expensive process that has to be repeated periodically Transaction & customer screening Customer Screening & risk id Customer identification Customer due diligence Start Business Behavioral monitoring RMA / RMA Plus Compliance Analytics Payments Data Quality Ongoing due diligence

3. Cost of Compliance results in “De-risking” • Definition • “De-risking refers to the phenomenon of financial institutions terminating or restricting business relationships with clients or categories of clients to avoid, rather than manage, risk.” (source: World Bank Group 2015) • Reason for De-risking • Customers do not generate sufficient revenue to overcome compliance costs; • The Institution provides payment services to customers about which the necessary information for an adequate risk assessment is not available; • Customers are located in jurisdictions perceived as too risky; • The Customer offers products or services or has customers that pose a higher risk for anti-money laundering/combating the financing of terrorism (AML/CFT) (Source: CPMI Correspondent banking July 2016)

4. Revenue vs Cost of doing business: Which elements can you influence? Insufficient information about (risky) clients: What more can you provide, and how? Perception: How can you change it?

5. Name Screening Sanctions Screening Sanctions Testing SWIFT offers a wide range of hosted solutions which help to address the challenges of compliance Transaction & customer screening Compliance Analytics Payments Data Quality Customer Screening & risk id Customer identification Customer due diligence Start Business Behavioral monitoring RMA / RMA Plus RMA / RMA Plus Compliance Analytics Payments Data Quality The KYC Registry Bankers World Online Name Screening Ongoing due diligence The KYC Registry The KYC Registry

6. International correspondents will expect Compliance with best-practice Compliance with sanctions Complete information in payment instructions NO PROBLEMS And Require up-to-date information about your institution Want to understand your processes and procedures WANT TO KNOW YOU And do a reality check and Will SCREEN ALL TRANSACTIONS coming from you!

7. Addressing the cost: Identifying efficiency gains • 100 banks have a relationship - manual approach, no standard • Each bank completes 99 client KYC’s and provides own data to 99 banks • Compliance teams at 100 banks respond to 99 KYC requests=9.900 outgoing KYC Profiles (data and document packages) • Relationship teams at 100 banks complete 99 KYC’s each = 9.900 incoming KYC Profiles that need to be analysed • Same 100 banks when using The KYC Registry • Each bank delivers its own KYC in standard format into The KYC Registry once 9.900 = 100 outgoing KYC’s • Each bank completes 99 client KYC’s (9.900 as before) BUT: • Now based on standardised validated data • No need for conversion of data into electronic format • Certainty that data conforms with regulations

8. Driven in partnership with leading Financial Institutions • DriveAdoption • PromoteStandards • DesignRoadmap • ValidateFeatures

9. Constant growth of membership To date, more than4500financial institutions: 2,450 +in Europe, Middle East and Africa 1250 +in Asia Pacific 800 +in the Americas 200 +countries and territories worldwide 62 Central Banks & Monetary Authorities EBRD, ADB, AfDB

10. Recent Developments • Full implementation of the new Wolfsberg Correspondent Banking Due Diligence Questionnaire (WB CBDDQ) in October 2017 • Risk-based approach via selective sharing of CDD vs EDD data • Advanced Notifications to automate counterparty monitoring • Significant reduction of consumption fees for 90% of customer banks • EUR 80 per KYC Profile per year, capped to limit maximum spend, for smaller / regional institutions (Global Tier 1) • Free consumption of 5 KYC Profiles in total for all customers who have published a complete and current data-set on The KYC Registry

11. KYC Registry – User Approved sharing of KYC data 1 2 Bank X requires access and approaches Bank A via the KYC Registry Bank A receives notification that Bank X requests access to their KYC data Bank A approves access of Bank X  Access to data is unlocked on the KYC Registry A notification is sent to users at Bank X that KYC data has been made available by Bank A. The permission is valid until pro-actively revoked or surrendered. Access Request* CONTRIBUTOR CONSUMERS Notification Bank X Bank A KYC Registry KYC Data & Documents validated by SWIFT 4 3 Data is unlocked Data Upload CDD or EDD Counterparty or Relationship Management approves access** 5 Notification Bank X  *The access request can be for “basic” CDD data, or for “basic & extended” CDD and EDD data **Bank A decides at its sole discretion which level of access is granted – basic only, or basic & extended

12. KYC Registry – Notifications whenever KYC data is updated • Update Notifications are sent • By email • In application CONTRIBUTOR Bank X Bank Y Bank Z Bank A KYC Registry SWIFT validates updated data and publishes data Data Update Authorised Consumers: Bank X  Bank Y  Bank Z  Other…  Other… Updates are communicated in real-time

13. Ongoing Monitoring – Trigger Event and ad-hoc KYC Review Management CONTRIBUTORS CONSUMERS in Bank X Peter(Onboarding) Has set Notifications for • Static data changesincl Legal Name • Contact details (fax) Paul(Relationship Management) Has set Notifications for • Legal Name • Board member • Annual report Mary (Compliance) Has set Notifications for • Legal Name • Board member • Regulator Bank A Bank B Bank C Bank… 1. Legal Name update The KYC Registry • Bank X has access to A B C…  • Peter, Paul, Mary have set Notification Preferences  • Upon update, SWIFT validates update and publishes new data. SWIFT checks, then sends immediate notifications: 1. Legal Name…….. 2. New board member 2. Board Member…. 3. Regulator………. 4. Annual Report..… 5. Fax number……. 3. New Regulator • Further fine tuning possible: • Ability to define for which counterparties the notification settings shall apply • Includes Adverse Media notifications (separate subscription required)! 4. Annual Report 5. New Fax number

14. The KYCRegistryData contribution and Validation The KYCRegistry YourGroup Head Office Submitter Approver China Netherland Belarus • Contributing your data to the KYC Registry is free • Your Data contribution is verified by our controllers using a 4 eyes process • Your data is never published without your approval • Granting access to your data is free • You can allocate user locally or submit information from the head office • Each bank appoints its own internal KYC Registry Administrator who manages user rights of all colleagues Submitter Submitter Approver Adverse Media on all counterparties Type of business and client base Ownership and Management Structure Identification of the customer Compliance Controller 1 Controller 2 Tax Secure cloudenvironment. Fully maintained bySWIFT

15. Qualifications scope and principles Fact-based checks Evidences • No judgmental or subjective checks • Completeness and accuracy • Required information provided • Data fields evidenced by documents content and/or official sources • Document containing the required information • Documents consistent against each other • Documents uploaded at the right place • Questionnaires filled in • Documents validity • Documents valid in time or not expired (if required) • Documents format requirements • Documents provided in the expect format: signature, stamp, letterhead, logo, etc. • Translations • Availability of translation / English version of documents • Document provided in the expected format: certified or internal translation • These requirements are defined in the KYC Registry Baseline Definition document, available on the KYC Registry • Where possible: • Data validated against supporting documents • Documents validated against public/official sources, limited to • Website of regulators / supervisory authorities • Website of commercial registers / registration authorities • Website of stock exchanges • Website of the IRS • Website of the institution • SWIFT ‘publishes’ the information only if validated as correct, and approved by customer. • A category may be published as • Incomplete • Expired • Not meeting the format requirement • With missing translation • This impacts the qualification score which is visible for both contributors & consumers

16. Add-on: The SWIFT Traffic Profile, addressing ‘KYCC’ You Your correspondent Country of your correspondent counterparty Country of ordering / beneficiary party’s bank Consumer of the SWIFT profile Publisher of the SWIFT profile Your correspondent’s direct exposure Your correspondent’s indirect exposure • Provides unique insights into bank’s activity, based on unique data • Substantiates declared behaviour by relying on factual data provided by a neutral third party • Promotes a pro-active approach in the assessment of existing relationships and continuous monitoring of exposure • Enables focus on riskiest correspondents • Low annual cost of EUR 2,500, including automatic quarterly update KEY BENEFITS

17. Power Point template - You can edit footer content by going into 'Insert' tab > 'Header & Footer'