Zero-Day Post-Trade Analysis Won’t Stop the Front Runners

On July 19, U.S. authorities arrested HSBC Holdings PLC’s global head of foreign exchange cash trading for his involvement in a series of trades effected in December 2011. The trades in question are nothing more than front-running. Here’s the gist of what happened:

Cairn Energy, a UK-listed oil and gas producer, approached HSBC in 2011 to convert $3.5 billion in proceeds from the sale of an Indian subsidiary to pounds. With the knowledge of a large buyer entering the market for sterling, the HSBC foreign exchange desk engaged in aggressive buying in the days and hours leading up to the conversion. On the day of the conversion, the HSBC desk liquidated their position generating $3 million in profits for the bank on top of the $5 million in fees tied to the client’s transaction.

I have no idea whether or not these trades were flagged by internal surveillance teams and simply swept under the rug, but I can assure you that this type of activity, combined with such a serious breach of client confidentiality, is very detectable with the right tool set.

So what is the right tool set? One that doesn’t focus on zero-day analysis.

Zero-day refers to the number of days between the time a trade is effected and some external event (like a client’s pending currency conversion). The post-trade analysis on the day of the currency conversion likely didn’t raise any questions. You have an FX desk selling out of pounds and a client buying into pounds. This is exactly what you would expect. But what did the days leading up to the conversion look like?

Probably something like this:

Source: Ascendant Compliance Manager

This is an example of a 3-month rolling volume profile analysis where the light blue line represents the FX client trades and the dark blue line represents HSBC trades in the cash market for GBP. It is evident that a pattern of escalating bank trades emerges shortly after Cairn Energy approached HSBC. If rolling volume profiles were put in front of a trading surveillance analyst in real-time each day, this most certainly would have raise a red flag.

Of course, this is a very simplified example. The complexity of the bank’s FX transactions surrounding this event would require a more sophisticated analysis, and potentially, the analysis of trades in other markets. But in an event like this, one thing is certain – it is impossible to rely on systems that ignore the tremendous amount of data available to us in the transaction history. Post-trade analysis that begins and ends with the days trading activity is simply ineffective.

Latest Content

Schedule 13D/13F Clarity on ETF Issues

Do I need to file a 13D or 13G if my client accounts hold in excess of 5% of an ETF? Generally, no. The SEC has granted no-action relief to ETFs with respect to compliance with Section 13(d) of the Securities Exchange Act. Section 13(d) was designed to require disclosure when holders begin to accumulate … Continued

New Remedy Coming for SEC’s Custody Rule?

The SEC’s Custody Rule continues to be a common source of confusion and a landmine for noncompliance. Custodial paperwork has caused huge headaches for investment advisers, who are not a party to the agreement and may not even have a copy of the custodial new account paperwork. The issue with existing guidance is that it … Continued

SEC Issues MiFID II No-Action Relief

Some industry anxiety was assuaged on October 26 with three no-action letters that offer relief for some US regulated broker-dealers and investment advisers regarding European MiFID II regulations. The letters followed consultation with the European authorities, and are designed to address concerns that investors could lose access to valuable research. MiFID II is a series of regulations … Continued

Regulatory Changes Impacting RICs and Service Providers

A year ago, the SEC adopted Investment Company Reporting Modernization Rules and Forms, as well as rules pertaining to liquidity risk management programs and swing pricing. New forms N-Port and N-Cen along with amendments to Regulation S-X significantly change the current reporting regime for most registered investment companies (RICs) because they require more comprehensive disclosure and … Continued

Publicly Available Information Heightens Need for Cybersecurity Vigilance

For any business, “ports” that allow for communication generally need to be open (for example, ports 80 and 443 for websites, and port 500 for VPN access). While most of these ports allow you to engage in critical functions, there are often ports that remain open despite being unneeded or unused. These available ports present … Continued

Mailing List

Subscribe to the Ascendant Compliance email list for the latest compliance resources, conferences, ComplianceCasts™, and more.

Loading form...

Contact Us

Ascendant works together with clients to identify and assess critical needs through customized plans. If you need assistance with compliance functions, regulatory services, cybersecurity or technology tools, we’d love to speak with you.