News

PBOC Issues Risk-Based Account Opening Guidelines for SMEs

Richard Marley
October 29, 2021
2 minutes read
381

The PBOC has issued guidance on Oct 14, 2021, for SMEs to adopt a Risk-Based Approach (RBA) when opening new bank accounts.

The People’s Bank of China (PBOC) has issued a new guidance regarding bank account opening for small-sized enterprises to adopt a risk-based approach.

The People’s Bank of China (PBOC) issued guidance for small and medium-sized enterprises (SMEs) to establish effective management when opening bank accounts. The guidance states that banks must improve the process of account opening and must follow a Risk-Based Approach (RBA) for SMEs.

China-based banking guidance encourages the adoption of differentiated CDD (Customer Due Diligence) measures for a streamlined and convenient bank opening procedure. For instance, banks can adopt digital onboarding solutions to diminish the need of redundant and length paperwork.

The guidance additionally states that Enhanced Due Diligence (EDD) is unnecessary if the purpose of opening the bank account is valid. Hence, users must be classified according to the risks associated with them and then specifically investigate and verify suspicious accounts. Proper monitoring procedures must be followed to identify the users involved in suspicious activities. Finally, public authorities must be sent Suspicious Transaction Reports (STRs) for further action when the users are identified.

By the end of 2021, banks need to set up classification and hierarchical management systems for SME bank accounts according to the guidance. The move was suggested to ensure proper KYC verification compliance and mitigate related risks while the quality and efficiency of managing the bank accounts are enhanced.

The PBOC guidance is directed towards banks for effective AML/CFT compliance and to mitigate the risks of fraud and gambling.

Suggested Read: Digital customer onboarding – Revamping onboarding process in banks

Disclaimer: No warranty is herein provided that the information contained in this document is accurate, up-to-date, and/or complete. In no circumstance(s), does such information constitute legal or any other advice. Any person who intends to use, rely, pass-on, or re-publish the information contained herein in any way is solely responsible for the same. We suggest to verify the information and/or obtain expert advice independently if required.

Recent Posts

Blog
Top 5 Cybersecurity Trends to Look Out for in 2022
With 2022 just around the corner, new developments in cybersecurity are already beginning to take shape. Considering the 600% upshot in cybercrime amid the pandemic, the urgency for cybersecurity is further augmented. Given the dependency of modern businesses on digital solutions, it is safe to say that the corporate world may undergo monumental upgrades. New regulations for cybersecurity updates are inevitable to combat the increasing number of cyberattacks.

According to reports, cyberattacks contributed to losses of up to $6 trillion in 2021 alone, which is the single largest economic upset in history. By 2025, cybercrimes are expected to cost the world $10.5 trillion. As governments work towards elevating their cybersecurity posture, the key criteria here is the extent to which businesses can adopt the best practices.

Phishing Attacks to Remain a Major Issue

Although Canada is far ahead as compared to the rest of the world in mitigating cyber threats, 78% of Canadian organizations still faced a cyberattack in 2020. This indicates the catastrophic effect of cyberattacks with numbers rising in the negative direction. The most common type of cyberattacks took the form of ransomware and phishing. Looking at the trends of 2021, it’s clear that hackers and malware are becoming advanced with improvements in technology.

A rise in phishing attacks was observed this year, as fake COVID-19 vaccination drives led to e-commerce fraud where credit card information was collected by bogus online shops. The number of overall data breaches recorded by September 2021 was 1,291, which had already exceeded the total of 2020. In order to avoid becoming the victims of phishing sites and emails, businesses must elevate their identity verification measures and conduct employee training. For this reason, the demand for cybersecurity professionals will further increase in 2022, as companies will need their guidance to stay ahead of their competition.

Internal Threats & Cloud Attacks

Trojan horses are rightfully named as they can effectively wipe out a large amount of data. However, the origins of all cyberattacks are not malware, as statistics show that 15 to 25 percent of data breaches were due to the involvement of corrupt employees or business partners. In the coming times, virtual workplaces will further gain prominence and companies will need to be more careful at the same time. Therefore, it is becoming essential for businesses to control access levels for new employees, freelancers, and third-party suppliers.

As the pandemic forced businesses to improvise and follow remote working procedures, a lot of data sharing, communication, and other activities are being conducted through cloud services. Although this enables businesses to stay connected and generate revenue regardless of the location of employees, it has a few drawbacks in terms of cybersecurity. In 2022, cloud services are expected to be used by an increasing number of companies as they strive to adopt virtual or hybrid solutions even after the pandemic’s restrictions.
I am text block. Click edit button to change this text. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.