A total of 11 banking institutions have been fined by regulators to the tune of nearly $2 billion dollars after they used instant messaging apps such as iMessage and WhatsApp for business communications. It’s alleged that the financial institutions allowed and, in some cases, even encouraged the use of consumer-grade messaging apps, resulting in scores of record keeping violations.
The banks that were fined a combined total of $1.8 billion by the Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC) for using unapproved messaging apps included some major industry players like Goldman Sachs, Morgan Stanley, Bank of America, Citigroup, Credit Suisse, Cantor Fitzgerald & Co, UBS Group, Deutsche Bank, Barclays, Cantor and Nomura Holdings, Inc,
The nearly-$2 billion in fines issued to nearly a dozen banking institutions for “pervasive off-channel communications” using messaging apps like iMessage and WhatsApp has been described as a “landmark case” for the SEC and CFTC, with a broad investigation that began in 2021. Many were surprised by these messaging app fines since the SEC, in particular, has historically reserved these sky-high penalties for fraud cases.
“Today’s actions — both in terms of the firms involved and the size of the penalties ordered — underscore the importance of record keeping requirements: they’re sacrosanct. If there are allegations of wrongdoing or misconduct, we must be able to examine a firm’s books and records to determine what happened,” SEC Enforcement Director Gurbir Grewal told the Wall Street Journal.
The highest single CFTC fine went to Bank of America, after the institution was found to have “widespread and long-standing use of unapproved methods to engage in business-related communications.” That’s according to a settlement order issued by the CFTC.
What Led to these Regulatory Non-Compliance Fines for Using Instant Messaging Apps?
Record keeping is the primary issue at the core of these banking industry fines. Laws and U.S. regulators alike require financial institutions and investment firms to keep a detailed record of all client communications, transactions and so forth. These stringent record keeping requirements are in place because regulatory organizations and federal agencies routinely perform investigations and monitoring to ensure banks, broker-dealers and traders are fully compliant with all applicable laws, regulations and rules.
But the banks failed to preserve the messaging data, which included a wide range of topics, including trades, debt and equity deals. Preserving messaging data is extremely challenging when it comes to consumer-grade IM apps like WhatsApp because each user’s account is installed on a personal device that is fully controlled by the employee.
According to the CFTC, they uncovered a 2020 message from a trader to a colleague that said, “We use WhatsApp all the time, but we delete convos regularly.” The CFTC also revealed that a head of a Bank of America trading desk told employees to delete messages off their personal devices, encouraging them to communicate on Signal, an encrypted messaging app. That individual reportedly resigned in 2022, although it’s believed that Bank of America was aware of these actions as early as 2021, according to the CFTC.
Even more deception was uncovered at Nomura, according to the Wall Street Journal, which reported that in 2019, a trader deleted messages on his personal device after he learned that the CFTC sought to secure the messaging data as part of an investigation. It’s alleged that the trader also “made false statements to the CFTC about his compliance with the records request.”
WhatsApp, iMessage and other popular instant messaging apps also lack tools that allow for efficient auditing and exports of messaging data, making it nearly impossible to comply with record keeping requirements. Lots of these apps also retain messaging data for a finite period of time, so much of the data in question was already lost by the time the banks’ regulatory non-compliance came to light.
What’s more, the employee is in control of both the WhatsApp account and the device. In theory, the employee could decline the company’s request to gain access to their messaging data and there’s not much — if anything — that the business could do about it.
Compare this to enterprise apps where the business can maintain a high degree of control over the mobile app, its data and the device that it’s installed on. Business instant messaging apps like SayHey Messenger® also include data export capabilities, auditing tools and other features that allow companies to achieve and maintain full regulatory compliance with record keeping requirements, reporting requirements and more.
Instant Messaging Built for Business Communications: SayHey Messenger®
Banks, traders and others in the investment and financial sector companies may feel a bit dismayed by these SEC and CFTC fines because at the end of the day, instant messaging has become an integral part of the corporate landscape. In fact, messaging apps have been found to be some of the most effective business communication tools. But there are enterprise messaging solutions, like SayHey Messenger®. an instant messaging mobile app for businesses both large and small.
SayHey Messenger® is a unique and regulatory-compliant business instant messaging platform that solves many of the challenges that companies face when it comes to communication. The team at 7T developed SayHey Messenger® as a method for patching the holes in your company’s messaging situation.
The SayHey Messenger® app features:
- Data sovereignty for control and ownership of all messaging data;
- Fully compliant instant messaging for regulated businesses;
- Seamlessly integrates into existing company software platforms;
- Admin portal for moderation, auditing, and inclusivity;
- SayHey Spaces for company-wide broadcasts and team collaborations;
- Engaging, intuitive user interface for incredible adoption rates;
- Send compliant SMS messages to external users with full data retention; and
- Custom UI with your logo, colors and branding elements for a style that’s all yours.
SayHey Messenger® offers two different deployments: a SayHey Messenger® Business deployment with a mobile app platform (for iOS and Android) and web app portal. There’s also SayHey Messenger® Enterprise deployments, which entail storing all messaging data in the client’s private cloud environment and the platform is fully integrated within the client’s existing software platforms, including mobile applications. This allows users to access their instant messages without leaving the screen, leading to greater productivity, higher user adoption rates and better efficiency.
Consider using SayHey Messenger® as your business messaging platform. And the best part? We can deploy this business messaging solution in a matter of days. Contact us today to learn more about SayHey Messenger®.
