How Police tracked and foiled $700,000 bank robbery

Last year, a gang comprised Rwandans and foreigners hatched a plan to hack into the international transaction system of a local commercial bank to steal $700,000. The money was to be transferred from accounts of five public institutions hosted by the targeted bank, and wired to an account in another country.

Sunday, January 22, 2017

Last year, a gang comprised Rwandans and foreigners hatched a plan to hack into the international transaction system of a local commercial bank to steal $700,000.

The money was to be transferred from accounts of five public institutions hosted by the targeted bank, and wired to an account in another country.

To achieve their plan, the group forged business contracts with the five targeted institutions, which, in turn, helped them to secure a swift code that would facilitate them to wire the money to their account.

However, the theft was foiled by the Rwanda National Police (RNP) cyber investigation unit the day the transaction was to be carried out, apparently by a hacker, who was based outside the country.

Two people, including a former employee of the targeted bank, who were coordinating the theft locally, were arrested.

"We tracked the communication system and found it was based in Europe; we tracked the IP server and it led us to a local targeted bank, and that’s how we managed to prevent the theft and to track and arrest some of the suspects,” Morris Murigo, the acting commissioner for the Criminal Investigation Department (CID), said.

According to Police statistics, cyber-related crimes constituted 0.36 per cent of the total high impact crimes registered last year, most of which were either foiled or the stolen funds recovered, according to Murigo.

In general, crime rate reduced by 12 per cent last year compared to the previous year, with high impact crimes, which also include narcotic drugs, burglary, embezzlement, murder and defilement constituting about 53 per cent of the total crimes.

"The cyber-crime included e-mail hacking, electronic money transfer and forged documents,” he said.

"Information technological development in policing is among the priorities of RNP. So far, we have the digital forensic lab and a cyber fusion centre, among others, capable of detecting, preventing and combating cyber-anabled crimes,” Murigo said.

"The Government is greatly supporting the police cyber system and e-Policing in general to stay ahead of criminals, who take advantage of technological development to commit crimes.

"The institution is increasing the capacity and capabilities through training to enhance detection, skill and knowledge involved to support credible investigations through modern equipment to support scientific evidence.” Cybercrime centre of excellence

According to Chief Supt. Oscar Sakindi, the commissioner for IT and cyber department in RNP, the operationalisation of the ‘Regional Cyber Crime Centre of Excellence’ currently under construction, which will be connected to the Cyber Crime Centre of Lyon (France) and The Interpol Global Complex for Innovation (IGCI) in Singapore, will further supplement other initiatives like the national forensic laboratory and bilateral and multilateral cooperation, to ensure a solid platform against IT-facilitated crimes.

The regional centre of excellence will host the digital forensic laboratory (mobile and disk forensics, and malware analysis), cyber fusion centre and cybercrime investigations.

The Financial Investigation Unit (FIU), operating under the central bank as a national reporting centre, has also been significant in investigating, collecting, analysing and disseminating information against money laundering and financing terrorism.

The FIU froze and stopped suspicious bank transactions equivalent to $210,000 in 2012, $160,000 in 2014 and 22 bank accounts were frozen in 2015, although these transactions were not related to money laundering or terrorism financing, according to Police.

Under FIU, a money laundering focal point was appointed in each of the 16 commercial banks and financial institutions, while a Suspicious Transaction Report (STR) format was designed to help financial institutions to report online suspicious transactions to FIU.

Through the Interpol’s I-24/7 communication system, which connects all the 190 member countries, RNP also managed to intercept close to 40 vehicles stolen from other countries, international drug dealers, human traffickers and victims.

editorial@newtimes.co.rw