Federal Service for Financial Monitoring. Financial investigations. Lecture (Vladimir Teplov) Generally edited

N.A. Pimenov

Associate Professor of the Department of Tax Police

FINANCIAL investigations:

BASIC APPROACHES

Investigating offenses and crimes in the financial sector presents significant challenges. This is primarily due to the fact that unfavorable trends have emerged in the structure and dynamics of crimes committed in the financial sector, the social danger of such acts has increased, cases of this category are overwhelmingly multi-episode, with an extensive network of criminal connections not only on the territory of the Russian Federation, but and abroad, sophisticated financial schemes using the latest electronic technologies are often used here.

The effectiveness of the investigation of offenses and crimes in the financial sector depends on a number of reasons: on specific circumstances, on the situation, on the knowledge and skills of the person conducting the investigation, etc.

At the same time, theoretical developments are also important. The lack of development of many concepts makes it difficult to implement a unified policy in the fight against offenses and crimes in the financial sector. First of all, in our opinion, this concerns the concept of “financial investigations”.

This concept has recently been often used both in foreign and Russian law enforcement practice.

Thus, police units created to investigate financial and white collar crimes, including money laundering, are often called financial investigation teams. The term “financial investigations” is actively used and applied in the vocabulary of international organizations created to combat money laundering, such as the Financial Action Task Force on Money Laundering (FATF), the Caribbean Financial Action Task Force on Money Laundering and a number of others. From the Russian side in activities

International organizations in the field of combating the legalization (laundering) of criminal proceeds are attended by the Committee of the Russian Federation on Financial Monitoring (FMC of Russia).

In Belarus, for example, the Department of Financial Investigations of the State Control Committee of the Republic of Belarus deals with issues of tax and financial crimes.

Under the Main Directorate of International Cooperation of the Federal Tax Service of Russia (GUMS FSNP of Russia), the Coordination Council of Tax (Financial) Investigation Bodies of the CIS Countries (KSONR) has been created.

The term “financial investigations” has not yet been accepted, precisely verified, either in domestic science or in law. The vagueness and vagueness of this concept creates uncertainty in understanding the essence and content of the term “financial investigation” and does not allow it to be used effectively in practice due to different interpretations.

As is known, the subject of the investigation belongs to the field of preliminary investigation of crimes.

The investigation is defined as preliminary because it is carried out before the trial of the case, during which, as is known, the question of a person’s guilt in committing a crime is decided and punishment is imposed for the act committed.

The preliminary investigation stage immediately follows the stage of initiating a criminal case.

Its content is the activities of the body of inquiry, the investigator and the prosecutor, aimed at, through investigative actions to collect evidence, quickly and completely reveal the crime, comprehensively and objectively establish the circumstances of the case, expose those guilty of committing this crime, and ensure that they are brought to criminal responsibility and prepare criminal case materials for trial.

In addition, in a specific criminal case, it is necessary to find out the reasons and conditions that contributed to the commission of the crime, take the necessary measures to eliminate them, and also take measures to compensate for the damage caused by the crime.

However, in order for the court to be able to resolve a criminal case and make a lawful, reasonable and fair verdict, the investigative body must collect sufficient evidence that can be used as the basis for a verdict. In addition, during the preliminary investigation, circumstances may be established that give grounds to terminate the criminal case.

According to the current criminal legislation of the Russian Federation, a preliminary investigation is carried out in the vast majority of criminal cases sent to court. Only in cases precisely specified in the law is its production not required, for example, in cases of private prosecution - part two of Art. 20 Code of Criminal Procedure of the Russian Federation. The investigation ends with the adoption of a final procedural decision (termination of a criminal case, referral of a criminal case to court) or is suspended on the grounds specified in the law. The preliminary investigation is carried out in the form of a preliminary investigation or in the form of an inquiry (Article 150 of the Criminal Code of the Russian Federation).

The main form of investigation is the preliminary investigation. This is determined, firstly, by the fact that the legislator refers to this area the proceedings in most criminal cases (Article 150 of the Criminal Code of the Russian Federation), and secondly, by the fact that a preliminary investigation can also be carried out in cases falling within the competence of the investigative bodies, if the court or prosecutor deems it necessary.

Inquiries are carried out in criminal cases of crimes specified in part three of Art. 150 of the Criminal Code of the Russian Federation. Inquiry into cases for which a preliminary investigation is mandatory is initiated by the inquiry body and consists of carrying out urgent investigative actions to establish and consolidate traces of the crime. Such investigative actions include: inspection; search; notch; detention and interrogation of suspects; examination; interrogation of victims and witnesses. The prosecutor is immediately notified of the commencement of such an inquiry. This form of inquiry is limited to 10 days from the date of initiation of the criminal case. After this period, the case is sent to the investigator.

However, if the person who committed the crime is not found, the investigative agency takes operational investigative measures to identify him and informs the investigator about the results.

In addition to performing common responsibilities with the preliminary investigation bodies, some investigative bodies are entrusted with carrying out the necessary operational investigative activities in

for the purpose of identifying and solving crimes and exposing those who committed them. This activity is not an inquiry, but refers to the independent functions of the inquiry bodies provided for by the Law on Operational-Investigative Activities and other acts.

The procedure for preliminary investigation discussed above is fixed by the norms of procedural law and regulates the relations arising in the process of investigating crimes in criminal cases.

The Big Legal Dictionary gives the following formulation of the concept of “investigation”: “Investigation (preliminary investigation) is a stage of the criminal process, consisting of the activities of the inquiry and preliminary investigation bodies, carried out under the supervision of the prosecutor, to collect, consolidate and study evidence in order to establish the presence or absence of a crime. , the persons guilty of committing it, the nature and extent of the damage caused by the crime, and other circumstances relevant to the case.”

In our opinion, the above interpretation of “investigation” is not sufficient in relation to the financial sector, since it does not cover the entire variety of financial violations and not only significantly narrows the possibilities of law enforcement practice, but also imposes restrictions on the subjects of the investigation.

From the above definition it follows that the term “investigation” covers only those acts for which criminal liability is provided.

At the same time, it is known that not all financial offenses are crimes. And to mechanistically combine the concept of “finance” and the above definition of “investigation” in order to form a completely new concept of “financial investigations,” in our opinion, would be illogical for a number of reasons.

To clarify the essence of the required concept, let us turn to the object of investigation in the financial sector - finance.

Financial relations express monetary relations that arise:

° between enterprises in the process of acquiring inventory, selling products and providing services;

° between enterprises and higher-level organizations when creating funds of funds and their distribution from these higher-level organizations;

° within the enterprise during the formation and circulation of its funds;

° within the household when forming and using the family budget;

° between the state and enterprises when enterprises pay obligatory payments to the budget system and finance expenses;

° between the state and citizens when they make taxes and voluntary payments;

° between enterprises, citizens and extra-budgetary funds when making payments and receiving funds;

° between individual links of the budget system, etc.

Directly, money servicing financial relations forms financial resources.

Depending on the level of subjects of financial resources, the following are distinguished:

Public finances Finances of enterprises and organizations Household finances.

Depending on the objects of financial resources, the following are distinguished:

° decentralized financial resources that are created at the micro level;

° centralized financial resources created at the macro level.

As we see, on the one hand, finance is an integral part of monetary relations, on the other hand, finance arises on the basis of the movement of real money in cash and non-cash form in various spheres and levels of expanded reproduction. This, in fact, is where the variety of legal norms regulating financial relations arises.

The movement of money outside the legal framework leads to certain violations in the financial sector, and in this case we can talk about financial offenses and

crimes. The movement of money outside the legal framework, characterized as a socially dangerous act, will be a financial crime and regulated by criminal law.

At the same time, as practice shows, not all financial violations are crimes and, accordingly, cannot be reduced only to criminal liability. A significant part of them is regulated by the Tax Code; Customs Code; Budget Code; Code of Administrative Offenses; currency legislation, etc.

In this regard, the subject of investigation in the financial sector, in our opinion, is “financial irregularities”. The arguments in favor of this approach are as follows: firstly, this term covers the entire variety of forms of financial relations, and secondly, it carries all the characteristic signs of an encroachment on relations in the formation, distribution, redistribution and use of funds of funds (financial resources) of entities economic relations.

The correlation of identified violations and the degree of public danger (offense or crime), as well as the rules of law governing a specific financial violation, is the prerogative of the subjects conducting this investigation. In this interpretation, the subjects of financial investigations should include not only law enforcement agencies, but also regulatory authorities - the Ministry of Taxation, the Central Bank, the Ministry of Finance, the Accounts Chamber, etc. Partly, private firms can also be included as subjects conducting financial investigations within the framework of the Russian Federation Law “On Private detective and security activities in the Russian Federation."

Thus, the purpose of investigations in the financial sector is not limited only to the inevitability of punishment, but also pursues the restoration of the violated financial interests of the injured party.

In our opinion, the characteristics of financial investigations should contain the following elements:

Object - finance.

Subject: financial violations.

The goal is punitive: the inevitability of punishment for committed offenses and crimes; legal restoration: restoration of the violated financial interests of the injured party.

Subjects: law enforcement and regulatory authorities, private firms.

It must be added here that any investigation by its nature is active and requires certain actions to be taken to achieve a result. Regulation of relations arising in the process of financial investigations is carried out within the framework of procedural law.

Thus, based on the above, we can propose the following formulation of the concept of “financial investigations”:

“Financial investigations as a procedural activity should be understood as the collection, consolidation, comprehensive consideration, study of the significant circumstances of the committed violation associated with an encroachment on the relations of formation, distribution, redistribution and use of funds of funds (financial resources) of subjects of economic relations "

The versatility and uncertainty of many factual data of the issue under study does not allow us to fully draw accurate conclusions and propose a complete classification of financial investigations. However, we believe that the known evidence in the field of financial offenses and crimes allows us to propose an approach to the classification of financial investigations, which is based on the classification of financial violations.

So, depending on the sphere of circulation, they distinguish:

Financial irregularities in the field of taxation Financial irregularities in the field of the credit market Financial irregularities in the field of the interbank money market

Financial irregularities in the insurance market Financial irregularities in the foreign exchange market Financial irregularities in the circulation of securities Financial irregularities in the market of goods and services.

Depending on the type of operations, violations are distinguished in the field of settlement, accounting, credit, currency, and stock transactions.

Depending on the stage of financial relations, there are:

violations at the stage of formation of funds of funds; violations at the stage of distribution and redistribution of funds;

violations at the stage of using funds.

Depending on the type of finance, there are: violations in the field of public finances; violations in the field of corporate finance; violations in the household sector.

We believe that the above classification organically corresponds with financial investigations and is self-sufficient for its correction and co-optation into the classification of financial investigations. This allows us to propose it as a basis for classifying financial investigations.

In order not to repeat ourselves, let us give as an example a fragment of the classification of financial investigations.

As already mentioned, depending on the scope of treatment, financial investigations in the field of taxation are distinguished; financial investigations in the credit market; financial investigations in the field of interbank money market, etc.

At the same time, based on the above arguments, the proposed classification of financial investigations requires the following additions.

© Depending on the subjects conducting the investigation, it is necessary to distinguish:

Financial investigations conducted by government bodies within the limits of their powers (in case of violation of the interests of the state, legal entities and individuals);

Financial investigations conducted by private

organizations within the framework of existing legislation (in case of violation of the interests of legal entities and individuals only).

© Depending on the level of social harm, it is necessary to distinguish:

Financial investigations of violations, responsibility for

the commission of which is provided for in the Tax Code; Customs Code, Budget Code; Code of Administrative Offences; foreign exchange

legislation, etc.;

Financial investigations of violations, liability for which is provided exclusively in the Special Part of the Criminal Code.

Thus, the classification of financial violations is systemic in nature and has a certain completeness; it organically combines the versatility of financial relations and the necessary consistency and integrity of the rules of procedural law. This circumstance, it seems to us, allows us to test the proposed classification in practical work when conducting financial investigations.

In conclusion, I would like to note that the study of this topic makes it possible to better understand the signs of offenses and crimes committed in the financial sector, to understand the meaning and content of the relevant norms of criminal and other law, and therefore requires further discussion and scientific polemics.

INTRODUCTION TO THE COURSE

"FINANCIAL INVESTIGATIONS"

Tutorial

Accredited educational private institution of higher education

"Moscow Financial and Legal University MFUA"

Tutorial

INTRODUCTION TO THE COURSE

"FINANCIAL INVESTIGATIONS"

IN STATE FINANCIAL MONITORING

(using the example of Rosfinmonitoring)

for students and students of higher educational institutions studying basic disciplines in the field of combating the legalization (laundering) of proceeds from crime and the financing of terrorism

Reviewer:

A.G. Zabelin, Doctor of Economics, Professor, Rector of the Academy of Education and Science of the Moscow Faculty of Law.

Glotov V.I., Korotkiy Yu.F., Gobrusenko K.I. Introduction to the course “Financial investigations” in state financial monitoring (using the example of Rosfinmonitoring): Textbook / edited by Ph.D. Yu.A. Chikhanchina. – Moscow: MFYuA Publishing House, 2015. – 88 p.

In the textbook, the authors (PhD, Prof. V.I. Glotov, Candidate of Legal Sciences, Yu.F. Korotkiy and Candidate of Legal Sciences, K.I. Gobrusenko) discuss the specifics of conducting financial investigations , incl. legal basis of this process, its methodology, information support, documentation of progress and results.

ISBN 978-5-94811-221-3

© V.I. Glotov, 2015

© Yu.F. Short, 2015

© K.I. Gorbusenko, 2015

© MFLA Publishing House, 2015

Introduction……………………...……………………………………………...….…... 5

Chapter I. General issues of financial investigations

§ 1. Definition of the concept of “financial investigations”……………….....…….….8

§ 2. The concept of information in the field of AML/CFT……………………….………..………11

§ 3. Search and discovery of information necessary for conducting financial investigations………………………………………….………….13

§ 4. Financial investigation as an information process…………….…..18

§ 5. Reasons and grounds for conducting a financial investigation.................................21

§ 6. Types of financial investigations……………………………………………………………22

§ 7. Main stages of financial investigation…….…………………………23

Test questions for Chapter I………………………………………………….26

Chapter II. Conducting financial investigations

§ 1. Legal regulation of information support for financial investigations……………….........………………...... ......27

§ 2. Sources of information used when conducting financial investigations…………………..……………………………………..…………33

§ 3. Features of the formation of information resources necessary for conducting financial investigations……………………………..………..37

§ 4. Objects of financial investigations…………………………….………..44

§ 5. Documentation of the progress and results of the financial investigation...47

Test questions for Chapter II………………………………………………...50

Chapter III. Selected issues of methodological support for conducting financial investigations

§ 1. Approaches to the development of financial investigation techniques………………51

§ 2. Concept and approaches to identifying connections between objects of financial investigations………………………...……………………………………………………….55

§ 3. The essence of the problem-thematic approach………………………..………..65

§ 4. Use of modern information technologies when analyzing the situation in the field of AML/CFT.................................... ....................................72

Test questions for Chapter III…...…………………………………………...77

List of sources and literature used……………………………...78

Appendix………………………………………………………………………………………81

INTRODUCTION

Legalization (laundering) of proceeds from crime and the financing of terrorism pose a serious threat to every state in the world community, disrupt the normal functioning of its main economic institutions, and prevent control over the country’s financial system by government agencies.

A special place in the international system of combating the legalization (laundering) of proceeds from crime and the financing of terrorism1 is occupied by financial intelligence units, one of the main activities of which is organizing the fight against these types of crimes with the participation of not only law enforcement, but also other executive authorities, public associations and commercial structures. On the territory of the Russian Federation, these functions, along with the powers to develop state policy and legal regulation in this area, are assigned to the Federal Service for Financial Monitoring (Rosfinmonitoring).

The effectiveness of the fight against money laundering and the financing of terrorism largely depends on the proper organization of the system for collecting, processing, accumulating and using in the activities of Rosfinmonitoring information that is important for identifying, preventing and solving crimes related to the legalization of criminal proceeds and the financing of terrorism, or other in other words, from organizing financial investigations. The creation of such a system is a necessary condition for the timely detection of facts of money laundering and terrorist financing, as well as the identification, prevention and disclosure of predicate crimes (i.e., primary crimes in relation to legalization). In turn, this process depends on the use of various sources of information, departmental and non-departmental information resources, including in electronic form, which are formed and accumulated within a variety of information systems. The significance of any source of information or information resource is determined, first of all, by the ability to provide it with the necessary data in order to solve the problems of Rosfinmonitoring.

The variety of ways to commit predicate crimes and crimes related to the legalization of criminal proceeds and the financing of terrorism, combined with the use of various techniques and means of disguise, significantly complicates the detection of their signs. At the same time, as practice has shown, various methods of committing such crimes are characterized by stable repetition, objectively determined by the system of functioning of the financial mechanism of economic entities of each individual state, which creates the prerequisites for the use of modern information technologies in identifying, preventing and solving crimes of this category. In some cases, only with the help of modern information technologies does it become possible to identify facts of legalization (laundering) of criminal proceeds. Consequently, the scientific development and application of new information technologies in financial investigations is an important reserve for increasing the effectiveness of measures taken by law enforcement and financial authorities to combat the legalization (laundering) of criminal proceeds and the financing of terrorism.

The process of collecting, processing, accumulating and analyzing information necessary for an effective fight against money laundering and the financing of terrorism is content of the financial investigation. The consideration in this textbook of specific issues of its legal regulation, organizational and methodological support is due to the need to develop in students, students of higher educational institutions studying basic disciplines in the field of AML/CFT and specialists starting their professional career, the following set of knowledge, skills and abilities:

Mastering basic concepts and understanding the essence of conducting a financial investigation;

Knowledge of the stages and types of financial investigations;

Studying the legal basis for conducting a financial investigation;

Understanding the procedure for using various sources of information necessary to conduct financial investigations;

Familiarization with the features of the formation of information resources necessary for conducting financial investigations;

Instilling skills in the correct use of information resources and modern information technologies when conducting financial investigations.

The proposed training manual is of practical importance, since it formulates scientifically based recommendations for organizing financial investigations in the area of ​​AML/CFT that meet the realities of today.

CHAPTER I. GENERAL ISSUES OF CONDUCT

FINANCIAL INVESTIGATIONS

§ 1. Definition of the concept of “financial investigations”

The phrase “financial investigations” has come into domestic use and is quite widely used in the activities of internal corporate services (for example, economic security, internal control), commercial structures; departments of the same name have appeared in higher educational institutions, studying the problems of criminal attacks in the financial sector1, it has attracted attention representatives of the Russian scientific community2. Some consulting companies now have a range of services, such as: independent financial investigations and asset searches, financial investigations and assistance in controversial situations, investigations of financial fraud and fraud, etc. As a rule, these services are aimed at countering illegal attacks on the property of private organizations. Regarding this phrase, which has become widespread on the Internet, different points of view are expressed and different definitions are given.

In this tutorial, we will consider the term “financial investigations” as an interdisciplinary category that explains processes that lie at the intersection of different branches of knowledge in relation to the activities of the Federal Service for Financial Monitoring. This approach correlates with the experience of various countries in the fight against money laundering and terrorist financing, since, in accordance with the developed international terminology, the activities of financial intelligence units similar to Rosfinmonitoring are based on conducting financial investigations.

Financial investigations translated into Russian) is the process of identifying financial transactions associated with financial irregularities and (or) crimes, which should be understood as illegal actions aimed at obtaining, using or distributing financial resources.

For example, the structure of the US Department of the Treasury includes the Financial Crimes Enforcement Network or FinCEN, a financial intelligence unit whose activities are aimed at conducting financial investigations in order to identify and record financial transactions related to crimes. The essence of financial investigations as a practical activity is to apply a complex of knowledge of applied economic sciences to identify and record various types of crimes related to financial transactions and other transactions. At the same time, financial transactions and other transactions may constitute the very essence of criminal activity.

An expert in the field of scientific and methodological support for organizing and conducting financial investigations, George A. Manning, in his work “Financial Investigations and Forensic Accounting”1 indicates that the methods used to identify and investigate financial crimes represent an interdisciplinary concept that combines accounting, financial analysis and law enforcement activities. Mastering these methods requires studying various branches of legislation, banking and other applied disciplines.

Conducting financial investigations comes down to identifying the financial component of criminal activity and recording its traces. At the same time, financial investigations cannot be identified with the categories “financial analysis”, “financial control”, “crime investigation”. At the same time, based on an interdisciplinary concept, when conducting financial investigations it is necessary to be able to assess the financial stability and efficiency of business entities, which is the subject of financial analysis, to operate with facts about violations by participants of financial, credit, currency transactions, established by the state norms and rules, identified specially authorized financial control bodies, and apply methods for investigating certain types of crimes. In this context, our understanding of crime investigation methods We rely on the definition of R.S. Belkin, according to which this is a system of scientific provisions and recommendations developed on their basis for organizing and implementing the investigation and prevention of certain types of crimes1.

Thus, subject of financial investigations are financial transactions and other transactions that may be related to money laundering and the financing of terrorism. Target of financial investigations are individuals and legal entities. Contents of the financial investigation constitutes the process of collecting, processing, accumulating and analyzing information necessary for an effective fight against money laundering and the financing of terrorism. The facts obtained from the financial investigation are given a legal assessment.

Based on the above, the following interpretation of the definition of financial investigation is proposed.

Financial investigation- a form of organizing the process of collecting, processing, accumulating and analyzing information and other materials in order to identify and document facts containing sufficient grounds indicating that operations and transactions are related to the laundering of proceeds from crime or the financing of terrorism.

§ 2. The concept of information in the field of AML/CFT

The procedure for collecting, processing, recording and using information in the activities of Rosfinmonitoring is an information process. Conducting a financial investigation involves, first of all, organizing the information process and working with information.

Information is one of the central concepts of modern science, which has widely entered into scientific use since the middle of the last century. The development of human activity is unthinkable without the exchange of information, its accumulation, systematization, analysis and evaluation.

Etymologically, the term “information” comes from the Latin word “informatio” - explanation, presentation, awareness. According to the definition of S.I. Ozhegov, it means various kinds of messages and information1.

Content of the concept of information can be revealed as a property of matter. So, A.I. Trusov believed that “...information covers the reflection of objects and phenomena in human consciousness, phenomena and processes in each other, without connection with consciousness”2. In criminology, changes in the environment, as a consequence of the reflection of an event in this environment, are information about this event3.

The Federal Law “On Information, Information Technologies and Information Protection” considers information content as “information (messages, data) regardless of the form of their presentation”4.

The process of observing and reflecting reality is a continuous or discrete acquisition of data, which together can carry valuable information, and data for any subject, including an analyst, can become information only when he can correctly evaluate and detect them in them new knowledge.

Of particular importance for Rosfinmonitoring analysts1 has any social information containing information that can be used to fight crime. Such information must have the following necessary properties: relate to the entire process of fighting crime or to any element of it, be specific, sufficiently complete and, finally, reliable.

In order to solve the problem of increasing the efficiency of the implementation of the functions assigned to the Federal Service for Financial Monitoring in combating the legalization (laundering) of proceeds from crime and the financing of terrorism, it is necessary to timely provide the analytical units of Rosfinmonitoring with information indicating various signs of illegal activities in the field of AML/ML. FT. An indispensable condition for employees of analytical departments to perceive such information is the unification of concepts and terms, eliminating discrepancies. In this regard, facts of illegal activities in the field of AML/CFT must be reflected in the information using terms defined by current regulations.

Information that constitutes the content of the information of the analytical divisions of Rosfinmonitoring, basically reflect the financial and economic activities of legal entities and individuals and may include various types of secrets.

The legislation of the Russian Federation establishes special regimes for the collection, storage and dissemination of certain categories of information. These include: state secrets, covering state1 and official2 secrets; information reflecting the financial and economic activities of taxpayers, including such types of secrets as banking secrets and deposit secrets3, tax4 and commercial5 secrets and others.

Consequently, only information that is obtained in accordance with regulatory legal acts and, in accordance with the same regulatory legal acts, can be used by them, is subject to collection, accumulation, processing and storage by the analytical divisions of Rosfinmonitoring.

Based on the above, it is necessary to highlight the following parameters as the most important, which the information of the analytical divisions of Rosfinmonitoring must correspond to: reliability, completeness, consistency of presentation; timely, quantifiable; relevance and associated value.

Regularities (actually existing relationships, interdependence) related to the formation, detection, receipt, verification and recording of information in the field of AML/CFT are the most important component of the subject of the theory of financial investigations.

§ 3. Search and discovery of information necessary for financial investigations

Search as an independent element in the system of measures for identifying persons and facts of operational interest was identified in the early 70s of the last century by scientists when studying the problems of operational investigative activities.

In the system of law enforcement agencies carrying out operational investigative activities (ORA), reconnaissance and search work is distinguished, and in its structure, operational search and analytical search1. Wherein analytical search is considered as a method of “penetration” into documentary sources of information and information arrays containing knowledge about objects of operational interest, and their detailed study in order to obtain operationally significant results.

In practice and in the literature, the term “analytical intelligence” is used, which is generally defined as "intelligence in the information environment" and, on the other hand, how “obtaining new knowledge about an object or phenomenon under investigation based on analytical processing of obtained intelligence information and information about known facts” 2.

B.Ya. takes a strictly differentiated approach to defining the role of search and analysis in the information activities of a law enforcement agency. Nagilenko4. He believes that “unlike search, the basis of analysis is the subject’s already acquired knowledge about the characteristics of the object being sought, as well as found, collected and verified information characterizing the identified (discovered) object.” Considering search and analysis as elements of the cognition process, it is argued that “it seems absurd to call search analytical, and analysis search.” When solving analytical problems related primarily to identifying certain types of crimes and the persons who committed them, it is proposed to use the term “analytical intelligence,” which in turn “determines the specificity of the methods of this type of analysis and the relevant information technologies used.” At the same time, it is assumed that when carrying out analytical reconnaissance, one can only reconnoiter something, i.e. find out about the presence or absence of the required data, investigate individual facts and their relationships on their basis, obtain information characterizing the objects being studied.

In our opinion, recognition of signs of a crime carried out according to the generated information models operationally significant search features, which should be understood as a set of indicators recorded on tangible media that make it possible to characterize the actions or inactions of persons falling under the legislative model of a crime (corpus delicti). Therefore, analysis is preceded by information search.

The process of combating money laundering and terrorist financing involves identifying the most significant, interconnected data, the volume and content of which allows us to characterize persons committing criminal acts, as well as to identify the very facts of money laundering and terrorist financing.

The discovery of information necessary for conducting a financial investigation is based on the use of the laws of logical thinking, such techniques and procedures as analysis and synthesis, deduction and induction, abstraction, generalization, analogy, and syllogism.

Of great importance when conducting financial investigations are data sets characterizing criminally active persons, the facts of legalization themselves and related objects, events, phenomena and processes.

In the course of collecting information on the problem being studied, the analyst’s task is to bring the selected data into a more suitable, rational form in order to comprehend, generalize, and identify patterns and trends.

Generalization and systematization of available data allows us to establish relationships between them and draw conclusions or assumptions.

During the analysis, the objects and direction of development of the causal relationship are established: action - cause - consequences.

Process for discovering information relevant to AML/CFT consists of several stages, the sequence of which seems appropriate to be displayed in a diagram (see Figure 1).

Rice. 1. Process for discovering information relevant to AML/CFT

1. Data collection.

2. Data assessment.

3. Organize your data.

4. Description of the data.

5. Application of logical thinking techniques.

6. Conclusion, conclusions, forecasts, assessments.

7. Proposing hypotheses.

Collection of data about the desired objects (persons, events, facts, objects, etc.) is one of the stages of the cognitive process from which the search for information relevant to AML/CFT begins.

The next step is to evaluate all the collected data that forms the information.

At the data organization stage, all collected information is grouped and structured.

Description of the data helps to highlight the most significant, interconnected data that forms information relevant to AML/CFT.

Techniques of logical thinking based on the information received make it possible to assess the volume and content of the received data necessary to identify facts of money laundering and terrorist financing. At this stage, it seems possible to draw intermediate conclusions based on the available data.

At the stage of putting forward hypotheses, several versions are formed, which are subsequently tested.

The process of discovering information needed to conduct financial investigations is a cycle of the steps described above. Conclusions, conclusions, forecasts and assessments are one of the important and key stages, which can be separated into a separate part of the mentioned cycle. It reflects the final result of the entire process of detecting information relevant to AML/CFT. As a rule, this stage occurs after the implementation of logical thinking techniques.

In many ways, the result of the work done depends on the forms of presentation of information. Information (messages, data) can be presented in text, graphic, tabular and other forms.

The text version is used when describing subjects, objects, processes, phenomena, as well as when preparing documents. The form of presenting information in the form of a coherent text is chosen if the main document in the document is information about actions or relationships between the subject and the object - a statement of any provisions, decisions, facts, events.

The form of presenting the unified text of a document in the form of a table is chosen if the main thing is information about the object and its characteristics.

The table can be considered as the result of a certain formalization, during which the text is deprived of its usual grammatical coherence, and the content of the text is conveyed by simplified structures, numbers or other signs.

A table is a form of presentation of a unified text containing information that is a characteristic of several objects according to a number of characteristics. The table has two levels of text division: vertical - graphs and horizontal - lines.

The generalized names of features in the table make up the heading and subheadings of the column (head), and the names of objects – the heading and subheadings of the table rows located in the leftmost column (sidebar).

Graphic information allows you to clearly display business processes or the results of calculating some indicators, as well as connections between subjects and objects.

§ 4. Financial investigation as an information process

The procedure for collecting, processing, recording and using information in the field of AML/CFT is an information process that is determined as a result of the conscious, organized activities of analysts to solve the tasks assigned to them. One of the main tasks of the analytical divisions of Rosfinmonitoring is to identify AML/CFT facts and identify persons associated with them. An important condition for successfully solving these problems is the preliminary collection of information.

The entire process of financial investigation can be divided into four main stages: obtaining (collecting) data that forms information, processing information, accumulating information, analyzing and issuing information. (See Figure 2.)

Rice. 2. Main stages of financial investigation

Collection data about the desired objects (events, facts, objects, persons, etc.) is one of the stages of the cognitive process from which the acquisition of new knowledge begins. The need to perform the task of identifying facts indicating that operations or transactions are related to the laundering of proceeds from crime or the financing of terrorism dictates to analytical units the need to organize a search for the necessary data.

The next stage of the information process of analytical units is treatment received data. The obtained data about persons, objects, events and other objects and processes must be analyzed, systematized and structured for the purpose of their subsequent accumulation and integration with other information resources based on an automated information system. These data should help solve the main tasks facing Rosfinmonitoring.

Consequently, all documentary media of analytical information must pass through dedicated departments that analyze them and select information for the formation of information arrays and entering them into a special data bank. This process must be continuous.

In this case, it is necessary to have uniform criteria by which information is selected based on the results of the analysis of the received information contained on a documentary medium, and appropriate information technologies to automate the process of generating and using a special data bank.

Source data is not always complete, ordered, generalized, and therefore sometimes cannot be used to construct, let alone make, tactical and strategic management decisions. Therefore, they must be supplemented by information contained in various information systems.

Information collected and properly processed for identification by relevant details (characteristic features), containing knowledge necessary and suitable for solving the tasks of Rosfinmonitoring, must be recorded on a tangible medium for subsequent use.

Accumulation processed and structured collected information that forms information relevant for AML/CFT, includes taking into account the preliminary results of a financial investigation, formed from information arrays that accumulate systematized data sets characterizing criminally active persons, the very facts of money laundering and terrorist financing and related with them objects, events, phenomena and processes. These data sets are displayed on appropriate storage media, which are a means of storage, transmission and perception.

Such carriers can have a very different physical nature. These include, for example, ordinary paper or cardboard used for preparing documents, card files, magazines, albums, etc., magnetic or laser disks used in automated information systems, etc.

Analysis And issuance information containing knowledge in the field of AML/CFT is the last stage of the information process in the activities of the analytical divisions of Rosfinmonitoring.

It is the analysis during a financial investigation that makes it possible to decompose the fact of money laundering or terrorist financing into its component elements and establish the nature of the relationship between them.

These operations are carried out directly by employees and heads of analytical divisions of Rosfinmonitoring.

§ 5. Reasons and grounds for conducting a financial investigation

Financial investigations cannot be carried out in relation to an indefinite number of individuals and legal entities. To conduct a financial investigation, there must be a reason and basis.

Reason for conducting a financial investigation serve:

a) messages from organizations carrying out transactions with funds or other property received by Rosfinmonitoring in accordance with the Law;

b) requests from foreign FIUs received by Rosfinmonitoring through international cooperation channels in the prescribed manner;

c) written requests from law enforcement and other government authorities;

d) materials based on the results of inspections carried out by the division of the organization of supervisory activities of Rosfinmonitoring2;

e) written appeals and statements from organizations and citizens;

f) instructions from the management of Rosfinmonitoring;

g) the results of an initiative search through external information resources, including the media, as well as materials obtained during interaction with government bodies and organizations;

h) materials on proactive detection of signs and facts of legalization (laundering) of criminal proceeds and financing of terrorism, obtained as a result of the use of developed methods and modern information technologies.

Grounds for conducting a financial investigation serves as verifiable factual data on possible transactions and transactions with funds or other property related to the legalization (laundering) of criminal proceeds and the financing of terrorism.

§ 6. Types of financial investigations

Depending on the nature of the information and materials that served as the basis for financial investigations, the following are distinguished: types of financial investigations:

a) proactive financial investigations - based on the results of proactive detection of signs and facts of legalization (laundering) of criminal proceeds and financing of terrorism based on the use of developed methods and modern information technologies, external information resources, including the media, as well as materials obtained during interaction with government agencies authorities and organizations;

b) international financial investigations based on materials from foreign FIUs;

c) financial investigations based on materials from law enforcement and other government bodies;

d) financial investigations initiated based on the results of the supervisory activities of Rosfinmonitoring;

e) financial investigations initiated based on the results of consideration of appeals and applications from organizations and citizens.

§ 7. Main stages of financial investigation

The financial investigation process includes the following main steps:

A) "primary analysis" stage:

- information retrieval , selection, analysis and evaluation of information from the database on operations and transactions for the purposes of its initial verification;

Information search through external information resources, including the media and materials on interaction with authorities, for proactive detection of facts containing possible signs of AML/CFT and requiring initial verification;

Analysis and assessment of information proactively selected and received from external organizations regarding the priority of its inclusion in the primary review;

b) "primary verification" stage- checking information proactively selected or received through information exchange channels with external organizations, using available internal and external information resources (databases) to determine whether there are grounds for conducting an in-depth check or making a decision to send information and materials to law enforcement agencies without conducting an in-depth check ;

V) stage of “in-depth financial investigation”- conducting an in-depth audit through additional collection (including sending written requests to authorities, credit and non-credit organizations and foreign financial intelligence units), analytical processing and assessment of the information received for the sufficiency of the grounds indicating that operations, transactions related to the legalization (laundering) of criminal proceeds and the financing of terrorism;

G) stage of “implementation of the results of the financial investigation”.

SOME ASPECTS OF THE RELATIONSHIP OF FINANCIAL INVESTIGATIONS WITH THE PROCESS OF IDENTIFICATION AND INVESTIGATION OF CRIMES RELATED TO HUMAN TRAFFICKING

MM. MAKARENKO

The material basis for the legalization (laundering) of criminal proceeds in the Russian Federation, among others, consists of income received as a result of kidnapping and trafficking in persons, as well as other related illegal activities. Having undergone legalization, they contribute to the creation of an appropriate basis for the reproduction of organized crime.

In order to combat this type of criminal activity, Russia has a system of regulatory legal acts, the central place of which is occupied by the Federal Law of August 7, 2001 N 115-FZ “On combating the legalization (laundering) of proceeds from crime and the financing of terrorism ". It is aimed primarily at solving the following issues:

Creation of a national system for preventing the legalization (laundering) of criminal proceeds;

Establishing the responsibilities of financial institutions and other persons engaged in financial transactions in order to prevent these actions;

Determination of the main tasks, functions and powers of the national financial intelligence unit, including in terms of interaction with financial institutions and government bodies;

Regulation of international cooperation in this area, including the exchange of information with competent authorities of foreign states and the provision of mutual legal assistance.

These issues are of key importance for creating and ensuring the functioning of a national system for combating the legalization (laundering) of criminal proceeds and the financing of terrorism.

At the same time, in order to meet international standards, the national AML/CFT system must include other critical components:

Criminal prosecution of acts related to the legalization of criminal proceeds and the financing of terrorism;

Providing the authorized body with information constituting bank secrecy and liability for their illegal disclosure;

Supervision over the fulfillment of relevant requirements by financial institutions and other persons and the application of administrative penalties for its violation.

All of these issues are addressed to one degree or another in Federal Law No. 115-FZ of August 7, 2001, but they are also directly regulated within the framework of other federal laws. Persons guilty of violating this Law bear administrative, civil and criminal liability in accordance with the legislation of the Russian Federation.

By Decree of the President of the Russian Federation of June 11, 2005 N Pr-984, the Concept of the National Strategy for Combating Money Laundering and the Financing of Terrorism was adopted and is being implemented.

The national system for combating money laundering and the financing of terrorism is designed to ensure the implementation of a unified state policy in this area. It consists of two main subsystems that differ in their subject composition, features of legal regulation and tasks to be solved: law enforcement block and financial monitoring.

At the same time, financial monitoring can, in turn, be divided according to the same criteria into two main levels: primary financial monitoring and state financial monitoring.

The subjects of the law enforcement block of the national system for combating money laundering and the financing of terrorism are considered to be law enforcement agencies whose competence includes the investigation of these crimes (Ministry of Internal Affairs of Russia, FSB of Russia, Federal Drug Control Service of Russia and prosecutors).

Relations in the subsystem are regulated mainly by the norms of criminal and criminal procedural legislation, as well as federal laws defining the rights and responsibilities of these bodies. The main task of law enforcement agencies within this subsystem is to identify, suppress and investigate crimes related to the laundering of criminal proceeds, including those obtained from human trafficking, as well as the financing of terrorism, and the fight against these types of crimes.

The main subjects of primary financial monitoring are organizations carrying out transactions with funds or other property. The responsibilities of these organizations include, in particular, proper verification of clients, identification of suspicious transactions and submission of relevant information to the Federal Service for Financial Monitoring (Rosfinmonitoring), subordinate to the Ministry of Finance of Russia. It is at this level of the national system that the task of preventing the laundering of criminal proceeds, including from human trafficking, should be solved. Rosfinmonitoring ensures control over financial transactions based on information received from the above-mentioned primary financial monitoring entities, verification of this information and, if there are sufficient grounds, transfer of information and materials to law enforcement agencies.

Rosfinmonitoring, being a key element of the national AML/CFT system, ensures, through interdepartmental coordination mechanisms, coordinated interaction of all law enforcement and financial monitoring entities in order to solve the problem of combating the laundering of criminal proceeds, including from human trafficking, including international cooperation in this area.

The entire financial monitoring subsystem, including relations between its subjects, as well as between these subjects and consumers of financial services, is regulated mainly by the provisions of financial and administrative law.

The concept of “financial investigations” goes beyond the general framework of financial control. This difference is due to the fact that financial investigations are not tasked with covering the entire set of financial flows for compliance with established standards. Financial investigations are faced with a much narrower and more complex task - to identify the financial flow associated with the crime, to record, through economic research, its necessary financial characteristics, which differ from deviations included in the subject of control, special complexity, intent to commit and concealment of traces of illegal activity .

The initial data for conducting relevant financial investigations by Rosfinmonitoring are:

Results of the initial selection of information from incoming messages from financial and other organizations and from the Rosfinmonitoring database;

Information requests from Russian law enforcement agencies regarding persons involved in criminal cases and operational materials being verified for crimes of mercenary nature;

Information requests from foreign FIUs.

The entire flow of messages entering the database is subjected to primary analysis using special software. The purpose of such an analysis is to obtain a complete picture of suspicious financial transactions of an individual or legal entity in order to identify the entire chain of links of operations (transactions) and connect together pieces of information into an appropriate scheme.

Information interaction with Russian law enforcement agencies and financial intelligence units of foreign countries is carried out by Rosfinmonitoring during ongoing financial investigations. For the purposes of financial analysis and investigations, other external information resources are also used - databases of registration, licensing and law enforcement agencies, media publications, etc.

Based on the results of such financial investigations, if there are sufficient grounds indicating that operations (transactions) are related to the legalization (laundering) of proceeds from crime, relevant information materials are sent to law enforcement agencies in accordance with their competence, which are accompanied by detailed schemes legalization of criminal proceeds.

The decision on the existence of sufficient grounds for their transfer to law enforcement agencies is made by the Expert Council of Rosfinmonitoring, chaired by the head of the Service. Financial analysts - developers of specific materials - report to the Council their conclusions and proposals on completed financial investigations. Along with permanent members of the Expert Council, representatives of relevant law enforcement agencies who can confirm the existence of grounds for initiating a criminal case are invited to individual meetings.

After transferring such materials to law enforcement agencies, Rosfinmonitoring employees provide further support, including obtaining additional information from Russian or foreign sources. Law enforcement agencies inform Rosfinmonitoring about the results of consideration of materials received from it.

It is necessary to note the inadmissibility of mixing the concepts of “financial investigations” and “the process of identifying and investigating crimes,” including those provided for in Art. Art. 174, 174.1 of the Criminal Code of the Russian Federation. There is no doubt that financial investigations are a key component of this activity, but do not replace it as a whole.

In the process of identifying and investigating intellectual crimes of this category, it is not an abstract law enforcement officer who participates, but several individuals carrying out quite diverse activities, only partially reducible to specialized financial analysis. As a rule, several participants are involved in this process.

Employees of units carrying out operational investigative activities (investigative officers) and employees of departments (directorates) of documentary checks and audits act within the framework of operational investigative activities and pre-investigation checks in order to identify and initially document signs of crimes. Their activities are aimed at collecting information about acts containing signs of criminal activity, and are regulated by the Laws “On Operational-Investigative Activities” and “On the Police”, as well as the Instruction on the procedure for police officers to conduct checks and audits of financial, economic, entrepreneurial and trade activities.

Practice shows that in this work, analysis of financial information, focused on identifying shadow cash and material flows, is extremely important and necessary. At the same time, the dominant aspects are the analysis of relationships in financial statements and the identification of dubious areas of financial and economic activity for further in-depth study within the framework of an already initiated criminal case.

However, this stage cannot be reduced solely to financial investigations. Its basis is the receipt and assessment of operational information through the implementation of operational investigative activities (interrogation, surveillance, wiretapping of telephone conversations, infiltration, etc.), including covert methods.

The stage of identifying signs of a crime, if they are actually detected in the actions of specific individuals, develops into criminal proceedings. The key participants here are the investigator and the expert economist. Their activities are regulated by the Code of Criminal Procedure of the Russian Federation. The investigator's task is to collect, verify and evaluate evidence containing factual data included in the subject of proof. For this purpose, the criminal procedural legislation provides the investigator with a toolkit consisting of a clearly defined set of procedural actions (inspection, search, seizure, interrogation, confrontation, appointment of a forensic examination, etc.). An economic expert is involved in proceedings in a specific criminal case from the moment a decision is made to appoint a forensic economic examination.

In summarizing the issues raised to be resolved by expert economists, the essence of this work comes down to conducting a financial analysis of previously identified financial and business transactions and describing, on its basis, the economic characteristics of the actions of persons controlling shadow financial flows and organizations associated with them. This information is subsequently used by the investigator to formulate the subject of evidence in a criminal case.

The investigator (the person who conducts the criminal investigation) does not conduct in-depth specialized financial analysis. Despite this, in order to understand the meaning of their activities and effectively manage the investigation process, the investigator must master this technique. It should be noted that the investigator has a slightly different area of ​​activity, which consists of a legal assessment of the collected facts, including the economic characteristics of the crime established by the financial investigation.

Thus, the detective and the investigator represent the legal side of the process of identifying and investigating crimes, and the auditor and expert economist represent the economic side. Specific financial analysis for this category of criminal cases is carried out by auditors and economic experts when conducting inspections and forensic economic examinations, and also, partly, by detectives and investigators - during an express analysis of the facts of financial and economic activities and a meaningful assessment of audit reports and the conclusions of expert economists.

In conclusion, it should be noted that financial investigations do not replace the procedural activities of law enforcement agencies, but, on the contrary, form the basis for generalizing and analyzing the economic side of the process of identifying and investigating crimes related to human trafficking. The complex composition of these criminal acts, which are sometimes transnational in nature, suggests that their prevention and suppression can only be ensured by a combination of criminal legal methods with a set of preventive measures within the financial sector.

Our company provides assistance in writing coursework and theses, as well as master's theses on the subject of Law Enforcement Agencies of the Russian Federation, we invite you to use our services. All work is guaranteed.

Topic: Theoretical foundations of financial investigations in the field of AML/CFT Federal Service for Financial Monitoring

Information analysis - obtaining knowledge about objects necessary for conducting a financial investigation Accumulation of processed and structured collected information that forms analytical information Information processing analysis, systematization and structuring of the received data for the purpose of their subsequent accumulation and integration with other information resources. Collection of data about the desired objects (events, facts, objects, persons, etc.). STAGES OF THE INFORMATION PROCESS

Unified State Register of Legal Entities a) organizational and legal form, full name and abbreviation; b) Main state registration number (OGRN), identification number/reason code for registration (TIN/KPP) of the legal entity; c) state registration number of the entry and the date of its entry into the Unified State Register of Legal Entities (USRLE); d)) name and address of the body that carried out the state registration of the legal entity; e) last name, first name and patronymic of the head and chief accountant of the legal entity, their work telephone numbers; e) identification data of the founders of the legal entity; f) code of the all-Union classifier of sectors of the national economy; g) numbers of bank accounts, indicating the dates of their opening and closing, indicating the names of banking institutions.

USRIP information array a) last name, first name, patronymic of the registered individual entrepreneur, his date of birth and address of the place of registration; b) his identification number (TIN); c) number and date of issue of the individual entrepreneur certificate; d) addresses of retail outlets; e) identification data of registered cash registers and addresses of the places where they are installed; f) bank account numbers and names of banking institutions.

Information array “Booking an air ticket to” a) last name, first name of the air passenger; b) date of birth; c) number and type of document; d) date and place of purchase of the air ticket; e) date of departure, flight number; f) information about persons who jointly purchased tickets

Reasons and grounds for conducting a financial investigation. The grounds for conducting a financial investigation are: a) messages from organizations carrying out transactions with funds or other property received by the Pension Fund of the Russian Federation in accordance with current legislation; b) requests from foreign FIUs received through international cooperation channels in the prescribed manner; c) written requests from law enforcement and other government authorities; d) written appeals and statements from organizations and citizens; e) a certificate of discovery of facts containing possible signs of ML/TF and identified as a result of an proactive search through external information resources, including the media, as well as during interaction with government authorities and organizations. The basis for conducting a financial investigation is verifiable factual data on possible transactions and transactions with funds or other property related to the legalization (laundering) of criminal proceeds and the financing of terrorism a.

Stage of “primary analysis” - information search, analysis, evaluation and selection of information from the database of operations and transactions for the purposes of its initial verification; - information search through external information resources, including the media and materials of interaction with authorities, for proactive detection of facts containing possible signs of AML/CFT and requiring initial verification; - analysis and assessment of information proactively selected and received from external organizations regarding the priority of its inclusion in the primary review;

Stage of “primary verification” Checking information proactively selected or received through information exchange channels with external organizations, using available internal and external information resources (databases) to determine whether there are grounds for conducting an in-depth check or making a decision to send information and materials to law enforcement agencies authorities without conducting an in-depth inspection;

Stage of “in-depth financial investigation” Conducting an in-depth examination through additional collection (including sending written requests to authorities, credit and non-credit organizations and foreign financial intelligence units), analytical processing and assessment of the information received for the sufficiency of grounds indicating that that operations and transactions are related to the legalization (laundering) of criminal proceeds and the financing of terrorism a.

The stage of “implementation of the results of the financial investigation” - sending information and materials to law enforcement agencies; - sending information and materials to foreign FIUs within the framework of international cooperation in the field of combating the legalization (laundering) of criminal proceeds and the financing of terrorism; - informing law enforcement agencies without disclosing bank secrecy, indicating the counterparties of identified financial transactions, approximate amounts, period of transactions and their nature. Information without disclosing bank secrecy is carried out in the event of detection of financial transactions in the absence of sufficient grounds to believe that they are related to the legalization (laundering) of criminal proceeds or the financing of terrorism.

The stage of “support of transferred materials” is the implementation of information and analytical support of transferred information and materials in interaction with law enforcement agencies and foreign FIUs, namely: - conducting additional financial investigations into newly discovered circumstances and persons involved; - sending information and materials to law enforcement agencies in addition to those previously sent; - control over the results of consideration by law enforcement agencies of transmitted information and materials, as well as procedural decisions taken on them.

Types of financial investigations a) proactive financial investigations - based on the materials of the primary analysis, assessment and selection from the database of information on operations and transactions, as well as on the materials of the proactive detection of signs and facts of legalization (laundering) of criminal proceeds and financing of terrorism and as a result of a search on external information resources; b) international financial investigations - based on materials from foreign FIUs; c) financial investigations based on materials from law enforcement and other government bodies; d) financial investigations initiated based on the results of supervisory activities; Inspection of those organizations in the field of activity of which there are no supervisory authorities, for example, notaries, bookmakers. e) financial investigations initiated based on the results of consideration of appeals and applications from organizations and citizens.

The main forms of documenting the progress and results of activities carried out within the framework of a financial investigation: a) documents (certificates, memos, conclusions, expert evaluation sheets, diagrams, tables, etc.); b) specialized records (including records of persons involved, registration records of financial investigation cases, archival records, etc.); c) files (materials) of financial investigations.

Types of cases (materials) of financial investigations a) primary materials (PM) - are created at the stage of primary verification; b) information collections (IP) - created at the stage of in-depth financial investigation; c) control and observation cases (CND) - initiated at the stage of control support of materials transferred to law enforcement agencies with the disclosure of bank secrecy.

Certificate-conclusion on the material of the initial check for In. No___________from__________. 1. Information about the involvement of the person(s) involved in criminal activity: ?1.1 Is there a plot of the criminal activity of the persons involved in the audit? 1.2 There is a plot, but there is not enough information about the predicate crime? Is there no plot of the crime? 2. Result of the initial check: 2.1 Operations were identified. Total quantity:___ Amount:_________________? 2.2 Identified transactions: - confirm information about the predicate crime - suggest the presence of signs of ML/TF? -economic significance of the case 3.3 Object of encroachment - budgetary funds 3.4 Corruption 3.5 Financing of terrorism (extremism) 3.6 Other (specify)___________________ ?4. Decision based on the results of the initial inspection: 4.1 Stop the inspection with sending information to law enforcement agencies without disclosing bank secrecy (specify where ) 4.2 Take the material into an in-depth financial investigation 4.3 Transfer the material to the central office 4.4 Prepare the material for transfer under Art. 8 Federal Law 115 ??????_______________________ (developer) _______________________ (manager)

Definition of the concept of typology. Typology (from the Greek. Typos - imprint, form, sample and logic) is a method of scientific knowledge, which is based on the division of systems of objects and their grouping using a generalized model and type; used for the purpose of comparative study of essential features, connections, functions, relationships, levels of organization of objects. The main logical forms used by typology: standard classification, systematics, taxonomy. Typology is based on identifying the similarities and differences of the objects being studied, on finding reliable ways to identify them, and in its theoretically developed form it seeks to display the structure of the system under study, to identify its patterns that make it possible to predict the existence of as yet unknown objects. Logical forms used by typology: firstly, classification, the purpose of which is to build hierarchical systems of classes and their subclasses based on certain characteristics that are not characteristic of objects (name, number) or inherent in them; secondly, systematics, which presupposes the most complete and dissected classification of a given set of objects with a fixed hierarchy of units of description; thirdly, taxonomy, within the framework of which the principles of rational classification and systematics are specifically studied and justified.

Individuals and legal entities Other countries Offshore companies Transfers abroad by individuals Individuals and legal entities Offshore territory

The sphere of finance is the area of ​​circulation of monetary and currency values, as well as an actively developing most important element of the domestic economy. In conditions of freedom of economic relations and the still imperfection of their legal regulation, the financial sector has become one of the most attractive for the commission of criminal acts, both by individual criminals and organized crime groups. A significant number of various criminal financial transactions continue to take place here. Criminal activity in the financial sector is characterized by the commission of a complex of illegal actions aimed at interfering with the movement of mainly cash or their substitutes, unrelated or isolated from the movement of other commodity values.

The concept " financial crimes", being forensic, includes a very broad group of crimes that have similarities in their forensic characteristics. This concept is mainly associated with criminal actions in the form of fraud (Article 159 of the Criminal Code), (Article 160 of the Criminal Code), legalization (laundering) of funds (Article 174 of the Criminal Code), illegal obtaining of a loan (Article 176 of the Criminal Code), malicious evasion from repayment of accounts payable (Article 177 of the Criminal Code), production or sale of counterfeit money or securities, counterfeit credit or payment cards and other payment documents (Articles 186, 187 of the Criminal Code), failure to return funds in foreign currency from abroad (Article 193 of the Criminal Code), etc. In many cases, such criminal activity coexists with illegal entrepreneurship (Article 171 of the Criminal Code), illegal banking activities (Article 172 of the Criminal Code), false entrepreneurship (Article 173 of the Criminal Code), deliberate or fictitious bankruptcy (Article 196, 197 of the Criminal Code), etc. As a rule, financial crimes are closely related to tax crimes (Articles 198, 199 1, 199 2 of the Criminal Code).

Subject criminal activities of this type are, first of all, monetary resources in rubles or foreign currency, foam papers and their surrogates (for example, plastic cards), providing settlement transactions between business entities and individuals. There is a widespread introduction into the financial sphere of methods for carrying out settlement operations using the latest information technologies based on the use of electronic computing and communication technology. Significant volumes of financial information reflecting the property rights of entities are stored on computer storage media in the form of “electronic” documents. Criminal acts involving such documents are often associated with unauthorized access to computer information. It is important to take into account that modern computer technologies have had a revolutionary impact on the criminal technique of producing traditional documents on paper, which can only be distinguished from genuine ones using special knowledge and technology.

Methods of committing financial crimes are very diverse. Criminal financial transactions can be roughly grouped as follows:

• operations in the field of settlement mechanisms in monetary (including foreign exchange) circulation, taking advantage of imperfect legal regulation of the settlement mechanism between counterparties or the lack of official control over its functioning;
• operations in the field of circulation of payment documents or securities, based on the imperfection of organizational legal and technical methods of protecting these financial instruments, banking products, etc.;
• operations in the field of borrowed resources, bank lending, based on the unlawful receipt of funds under the guise of borrowed resources, their misuse or misappropriation;
• fictitious lending operations, accompanied by bribery of responsible bank employees and distribution of borrowed funds among criminals;
• operations in the field of information financial computer technologies, based on the imperfection of means and mechanisms for protecting such information systems of financial institutions from unauthorized access to this information and its management from the outside.

All crimes of this type are characterized by serious and often quite lengthy preparation for their commission. At this stage, the financial mechanism necessary for the implementation of the criminal plan and corresponding to the specified parameters is selected. The concept of such a mechanism includes: identifying gaps in the current regulatory framework and the mechanism for implementing a specific financial transaction, allowing to legalize the most important elements of a criminal financial transaction or give them the appearance of legality; collecting samples of forms, stamps of signatures or production of necessary documents reflecting similar legal financial transactions; determining the most rational sequence of the upcoming document flow; selection or creation of specific financial institutions and legal entities that ensure the movement of financial resources; production or receipt of documents reflecting future financial transactions; selection or hiring of performers of individual operations, acquisition of technical equipment, including computer and communication equipment, etc.

It is typical for financial crimes that their actual commission is carried out in a very short time; the organizers of the crime, having set specific goals for themselves, stop criminal actions immediately upon achieving them.

Criminals' knowledge of banking technologies allows them to avoid rapid detection of illegal transactions and gain access to funds as quickly as possible. At the same time, banking instruments are actively used both in committing thefts and in introducing criminal capital into legal circulation.

After a crime has been committed, active measures are taken to conceal it, often associated with the liquidation of enterprises and financial institutions, their fictitious or deliberate bankruptcy, destruction of documents, distortion of accounting, statistical and other reporting, transfer to other positions or dismissal of persons who knew something about the progress of the financial transaction.

Situation, emerging or created by criminals for the possibility of committing these crimes, first of all, is formed under the influence of various kinds of inconsistencies, contradictory, undeveloped provisions existing in the legislation regulating the financial sector; the ill-conceived nature of individual decisions and the mechanism for their implementation in the actions of relevant officials, etc.

Acquisitive crimes associated with the use of various financial information systems are most often facilitated by an environment of weak control over the operating procedures in a particular information system and insufficient security of such information systems from unauthorized access. For example, insufficient protection against fraudulent actions of bank payment documents, insufficiently high quality of their production and safety procedures, etc.

A favorable situation for the fraudulent use of plastic payment cards arises due to the lack of reliable electronic or telephone communication with payment processing centers, untimely receipt of a “stop list” by organizations accepting payments, and the inattention of persons accepting payments on such cards.

Acquisitive crimes associated with the use of financial information systems built on computers, their networks and systems are most often facilitated by an environment of weak control over the procedure in the information system and its insufficient protection from unauthorized access.

The situation in which illegal lending is carried out and the subsequent evasion of the return of funds received is characterized by insufficiently thorough examination by lenders of data about the borrower, a lack of detailed verification of his financial condition and economic activities that ensure the repayment of the loan received, as well as control over the activities of the borrower after receiving the loan.

The situation with illegal entrepreneurship and banking activities is also close to the above.

If crimes of this kind are committed by organized crime groups, then it is advisable to include data on the specifics of the region in which the organized crime group operates as elements of the context for their commission. These features influence the choice of the basic type of financial crimes that an organized crime group aims to commit, and the most accessible and effective ways to commit them. For example, in large cities with a large number of banks and their branches, crimes are most often committed with the use of securities and with the help of information technology, i.e., the most attractive for organized crime groups are banks with large amounts of money and a huge number of depositors. In smaller industrial cities, financial crimes are more often associated with illegal businesses and illegal banking activities. In such cities it is easier for firms and banks to operate without a license.

OCGs that commit financial crimes are characterized by a small number (ranging from two to three to ten people), a relatively simple organizational structure with a fairly high general professional and criminal level of members of its management and even executive levels. These groups are usually created in a situational and contractual manner and for a relatively short period of time, compared to organized crime groups created to carry out a long-term criminal business. Hence the weakness of the corrupt connections of the analyzed groups. The leaders of such criminal groups are characterized by a greater degree of activity in committing crimes and directing the efforts of its members. Their weakest links are the persons performing technical functions.

In general typological features of all subjects These crimes are largely similar. Most of them are dominated by acquisitive attitudes, a passion for profit, and the desire to quickly accumulate wealth by any means. The organizers of such crimes and those who commit them have a relatively high level of education. Every two out of three offenders have not only secondary, but also specialized secondary and higher education. Most of them are directly involved in financial and commercial activities at different functional levels (managers and other organizers of commercial structures, banks, etc.). Among them there are always people who have information about the activities of credit and financial institutions and know the shortcomings in their activities. The gender composition is predominantly male, although the number of female offenders in these cases is significantly higher than in others. The main age group consists of people aged 25 years and older (75%).

The circumstances to be established during the investigation of financial crimes, regardless of their type, are largely determined on the basis of their forensic characteristics and taking into account the subject of proof. In their content and division into groups, they are similar to the list of circumstances to be clarified during the investigation of crimes against property through embezzlement, embezzlement, fraud and extortion.

Basic provisions of the methodology for investigating financial crimes

The investigation of financial crimes begins with the initiation of criminal cases on various grounds.

When checks, shares, plastic payment cards and credit memos are used for criminal purposes, such grounds may include data indicating that these documents received by the bank, and plastic cards received at the places of payment for them, are counterfeit. In case of non-repayment of the loan and malicious evasion of its repayment, the basis is information (materials of the bank) about the exhaustion of all means of influence at its disposal on the debtor if there are signs of a crime falling under the criminal law in the debtor’s behavior. In the case of illegal entrepreneurship and banking activities, the grounds are data indicating the unlicensed activities of commercial firms or banks, and data on the infliction of large material damage by these structures on citizens or other business entities. If financial crimes are committed by organized crime groups, then information from the investigative body most often appears as the source material for initiating a criminal case.

The sources of primary information serving as the basis for initiating these criminal cases are usually materials on the legalization of the operational investigative work of the Ministry of Internal Affairs, the FSB, tax services, customs authorities and their corresponding pre-investigation checks, as well as data from prosecutorial checks, materials from audits and audits, press data , statements from citizens, etc. Accordingly, at the beginning of the investigation, a number of the most common typical investigative situations usually arise. Their content is largely determined by the source, type and volume of information received, the nature and intensity of interference in obtaining priority information, and the degree of possible use of the surprise factor during the investigation. Among the most common and most common are a number of typical situations:

• a message was received from financial organizations containing signs of criminal acts that resulted in significant material damage. The offender is known or unknown. The factor of surprise most often cannot be used, because the criminal is either informed about the direction of the materials to the investigation, or the time that has passed after this does not allow working “hot on the trail.” This situation is actually typical for most financial crimes;
• materials on the results of operational-search actions were received from the investigative bodies, containing data on facts of criminal activity of individuals that could be legalized procedurally. Using the element of surprise at the beginning of an investigation is possible and often necessary for successfully solving a crime. For example, the following are possible: being caught red-handed; investigative and operational actions “hot on the heels” to identify the funds of criminals, which may be subject to collection; operational and investigative actions to ensure receipt of all necessary documentation, etc.;
• the situation is the same as the second, but the received materials from operational-search actions indicate the possible commission of this crime by members of a specific organized crime group, about the criminal activities of which the operational-search authorities had no previous information;
• a criminal or criminals are caught red-handed while committing a crime or immediately after it.

The greatest difficulty for investigation is presented by situations related to the activities of organized crime groups, when the person who committed the crime is unknown, and also when significant time has passed since its commission.

When investigating financial crimes, the following is of great importance for the success of criminal proceedings: establishing effective interaction investigators with operational investigative bodies within the framework of an investigative and operational group (created for the investigation) or in the form of carrying out individual investigative orders. Such interaction is especially important when the crime is committed by an organized crime group. In such a case, the receipt of materials by the investigative authorities is usually preceded by the collection of relevant materials about the activities of the specified group by the investigative body. At the same time, at the stage of collecting materials, it is necessary that the investigative bodies carrying out operational-search activities interact with the relevant services of other law enforcement agencies that have the necessary information and use the data of registration state bodies. It is also important to interact with bank security services and private detective agencies, because these services, which conduct intelligence work to check bank clients, accumulate their own information material, including about the activities of organized crime groups in the credit and financial sector.

When analyzing materials received from financial organizations, the investigator should pay attention to the following:

• whether all the necessary documents indicating the wrongfulness of the act, taking into account the characteristics of each type of crime in this group, are presented;
• whether these documents are original or copies are provided;
• Are there any explanations from bank employees in the materials confirming the facts of the offense.

It is advisable for the investigator to have a general certificate describing specific facts, indicating the persons who have information about them, indicating their coordinates (telephone numbers, addresses). At this stage, it is necessary to carefully collect, with the participation of specialists, regulatory material regulating the area of ​​financial activity being studied.

At the same time, investigators, already at the stage of analyzing the received primary information, should pay attention to whether it contains signs of criminal activity committed by an organized group. These in these cases can be: careful thought and very high professionalism in its implementation; the impossibility of its implementation by one person without the existence and operation of an organized structure; the nature of the criminal action (associated with the receipt of large sums of money); information about the probable connection between commercial, government and banking structures within the framework of a criminal action; ingenious, sophisticated and quick ways to sell criminally obtained sums of money and material assets; pressure on the investigator already at the stage of studying primary materials in order to persuade him to refuse to initiate a criminal case, etc.

The investigation can begin with a red-handed operation. But in any case, all actions of the investigator after the initiation of a criminal case at all stages of its investigation must be carefully planned. In cases of this type, this requirement is of particular importance.

Initial investigation plan should be focused on checking the reliability, clarifying the factual data that served as the basis for initiating a criminal case, collecting new factual data and preventing possible attempts by interested parties to hide traces of the crime. Investigative versions are put forward taking into account the available primary material regarding unclear circumstances about the perpetrators, the motives and purposes of their actions, methods of committing the crime, etc.

Further investigation plan should provide not only for follow-up actions on versions that have not yet been completed, but also for the promotion and verification of other possible versions. For example, is the crime under investigation limited to the facts on which it was initiated, or is this only part of its episodes? This version always arises when it is established that the crime under investigation was committed by an organized crime group.

In order to quickly understand what violations of the current rules and regulations governing a specific type of financial activity have been committed, it is very useful forensic matching method relevant norms, rules, requirements for the proper conduct of specific financial transactions with the characteristics of the behavior of persons participating in these transactions in the case under investigation. The essence of this method is schematically the following: all identified circumstances of criminal behavior that characterize its mechanism and situation are collected into a single information block. Then, another block collects all the regulatory information on how this financial transaction should have been carried out in accordance with current regulations and requirements. Then these two information blocks (like matrices) are superimposed on one another. As a result of comparison, it is possible to immediately identify the nature of the violations committed and the circle of people associated with these violations.

When using forensic analysis method official functions of participants in a financial transaction, it is possible to identify what specific violations of current rules were committed by each participant in the financial activity under study.

To identify how a specific financial offense was carried out, it is advisable to use a method established in criminology, such as recognition of the method of committing a criminal act: according to its typical characteristics; by audit; operational investigative means and by analogy.

The complex and procedure for carrying out initial investigative actions depend on the nature of the initial investigative situations and the characteristics of certain types of crimes of this group.

In the first situation Most initial investigative actions usually lack the effect of surprise. It is characterized by the following set of initial and other actions of the investigator, regardless of the type of crime committed:

• extraction and study of the necessary regulatory documents regulating this type of financial activity;
• seizure and inspection of necessary bank documents not presented in the primary materials;
• inspection and preliminary examination of counterfeit foam papers and other bank documents with the help of which the crime was committed;
• seizure, inspection and study of documents showing the movement of funds through the accounts of those institutions and organizations that appear in false banking documents;
• interrogation of bank employees (managers and those employees who discovered forged documents or worked with them when processing the corresponding banking transaction);
• appointment and conduct of audits, audits of forensic and other forensic examinations for the study of documents;
• search of suspected persons in order to identify and seize various documents and other objects relevant to the case;
• seizure of amounts of money accrued on the basis of forged bank documents to commercial banks, and of amounts of money credited under payment orders to other organizations.

In the second situation It is advisable to use the effect of surprise as successfully as possible at the beginning of the investigation when conducting initial investigative actions. This situation is usually characterized by the following set of initial investigative actions and operations:

• conducting an investigative operation to detain persons suspected of theft and other financial fraud red-handed, interrogating them and conducting a personal search;
• search at the place of residence and work of the detainee and seizure of his property;
• inspection of seized counterfeit documents and other objects;
• excavation, inspection and study of necessary documentation;
• questioning of witnesses;
• appointment and conduct of audits;
• appointment and conduct of examinations.

Third situation is collective in nature and includes information about all previous situations. When it is established that members of an organized crime group have committed a crime, it is necessary to immediately take measures to create an investigative and operational group, obtain available intelligence information from the investigative bodies, and establish appropriate interaction with operational units. The set of initial investigative actions depends on which information from the investigative situation dominates in each specific case.

Fourth situation is close to the second and differs only in that it no longer requires the development and conduct of an operation to detain a person suspected of a financial crime red-handed. In this situation, when a criminal is caught red-handed, the investigation is usually carried out according to the following scheme:

• a personal search of the detainee and a search at the place of residence and work, during which all documents in his possession should be confiscated (fake, financial, notebooks, floppy disks, drafts, transport documents, receipts for payment of long-distance calls, draft documents, etc.) ;
• interrogation of a suspect;
• inspection of the vehicle used by the detainee;
• interrogation of witnesses (administration and bank employees who were presented with a check to receive money or material assets; persons confirming certain circumstances of the criminal’s actions). If necessary, presentation for identification and confrontation may be carried out.

It is also necessary to widely use the possibility of monitoring telephone conversations of relatives, colleagues and partners of the detainee, and seizing his postal and telegraph correspondence. It would also be useful to establish control over his personal paging and radio communications.

Criminal activity in the field of payment mechanisms for monetary (including foreign exchange) circulation is characterized by illegal transactions in cash payments between organizations, violation of currency legislation, and legalization (laundering) of funds. These actions require criminals to quickly communicate with counterparties - domestic and foreign financial institutions, including via modem, and to constantly (often hourly) exchange information with partners and clients. Accounting for criminal financial transactions is often carried out using computer technology. These circumstances must be taken into account when planning detention and subsequent urgent investigative measures in cases of this category.

In case of criminal activity in the field of circulation of payment documents or securities, during the initial investigative actions, facts of shortages, sales or acquisition of blank bank checks, bills of exchange and persons involved in them are revealed. To clarify these circumstances, not only investigative, but also operational-search actions, as well as materials from inventories and audits are used.

Thefts through the use of counterfeit bills of exchange, which have become widespread due to the massive and partial release of promissory notes into financial circulation by banks and other market participants for use for settlement purposes, are in many ways similar to thefts through counterfeit checks, which are also intended for settlement purposes. Therefore, there is much in common in the set and features of the initial investigative and other actions in such cases. Investigative actions such as seizure, inspection, study and forensic studies of counterfeit bills of exchange and other documents related to bill transactions, interrogations of persons who accepted bills of exchange for payment and carried out financial transactions with them, as well as managers and other employees of banks and organizations are important. , to whose accounts the money was received. An important area of ​​investigation is to identify the mechanism for producing counterfeit documents and the persons carrying out these actions.

A significant role is played by the data of operational investigative work to study the activities of the relevant banks and other organizations involved in settlements with counterfeit bills.

When investigating thefts using plastic payment cards, the most typical is the fourth investigative situation. In these cases, after arrest, a personal search of the criminal and a search at the place of residence are carried out, during which it is desirable to discover and seize everything that is important for the investigation (drafts in which the criminal practiced signing signatures on behalf of the owner of the payment card; items received using cards ; used and other cards, as well as documents identifying their owner; copies of invoices for goods stolen using cards, etc.). Of great importance for the investigation are the immediate interrogation of the suspect, the identification of the owner of the card and his interrogation about the circumstances of its loss and the time of its last use by the owner. After this, it is advisable to obtain from the card owner samples of his handwriting and signature for handwriting research. The complex of urgent investigative actions also includes interrogation of employees of retail outlets who served the criminal and possible eyewitnesses; presenting a suspect for identification; Confrontations, seizure and inspection of necessary documentation from the accounting department of a trading enterprise; obtaining the necessary information about the card owner from the issuing bank.

The first and second investigative situations in such cases arise less frequently, because cases of fraud with payment cards by Russian commercial banks are most often hidden so as not to scare away potential clients and not lose old ones. Therefore, investigators contact these banks and obtain the necessary information from them only after starting an investigation in the first situation. It should be borne in mind that banks, after a client’s statement about the “leakage” of funds from his account, conduct an internal investigation. The investigator needs the materials of such an investigation to be included in the case.

Criminal activity in the field of borrowed resources is characterized by the first, second and third investigative situations. The success of the investigation of such activities largely depends on the ability of the investigator to analyze documents of a financial nature, his knowledge of the features of banking activities, bank lending, etc. It is necessary to take into account the specifics of the credit policy of a particular financial structure related to the decisions of the founders, the volume of its authorized capital, the mandatory requirements of the Central Bank Bank of the Russian Federation, the situation on the credit market at the time of making the decision to issue a loan and other important circumstances. It is necessary to understand the source of the resources from which the loan was issued, and also to document the direction in which these funds were spent. The latter can often indicate the presence of criminal intent. Loan documents and knowledge of the peculiarities of credit and financial activities make it possible to collect information important for the investigation, compare its individual information blocks and more correctly understand all the circumstances of the act under investigation.

Criminal activity in the field of information financial technologies can be carried out as an independent activity or be an element of other methods of committing financial crimes.

Forensics play an important role in the investigation of financial crimes. These include forensic examinations (handwriting, fingerprinting, technical and forensic examination of documents), printing, forensic accounting, forensic economics, examinations in the field of computer information technologies. Their purpose and implementation is associated primarily with the study of documents in order to identify various types of forgeries in them (including how old the documents were made); research into the essence, reliability and reality of relevant financial transactions; possibilities and methods of unauthorized access to information support of financial activities, etc.