Snowden outs NSA's "Follow The Money" international banking spies

by Lee Munson on September 16, 2013

According to a new report, referencing leaks from Edward Snowden, the National Security Agency (NSA) has been widely monitoring international banking and credit card transactions. The agency allegedly targeted customers of Visa Inc. as well as the Society for Worldwide Interbank Financial Telecommunication (SWIFT).

According to Germany's Der Spiegel newspaper, information leaked by former NSA contractor Snowden shows that surveillance of financial transactions was carried out by a branch of the security agency known as "Follow The Money" (FTM).

The details of all the monitored transactions were then transferred to an NSA database called "Tracfin." Snowden claims that in 2011 that database held 180 million records of which 84% were related to credit card transactions.

Der Spiegel alleges that the NSA targeted transactions in Europe, the Middle East and Africa to:

collect, parse and ingest transactional data for priority credit card associations, focusing on priority geographic regions.

In response to that allegation the newspaper quotes a Visa spokesperson who, "ruled out the possibility that data could be taken from company-run networks," whilst Mashable has a quote from Visa security and privacy representative Rosetta Jones:

With respect to the claims in the Der Spiegel article, we are not aware of any unauthorized access into our network. Visa takes data security seriously and, in response to any attempted intrusion, we would pursue all available remedies to the fullest extent of the law. Further, it’s Visa’s policy to only provide transaction information in response to a subpoena or other valid legal process.

"A deep invasion of privacy"

According to the documents there seemed to be at least some concern over the collection of such financial data.

The UK's intelligence agency, GCHQ, queried the legal issues surrounding "financial data" and its own involvement in the program saying that, "The collection, storage and sharing of politically sensitive data is a deep invasion of privacy", and involved "bulk data" full of "rich personal information," much of which "is not about our targets."

Whilst this news may be further confirmation that the NSA is involved in widespread spying, it is probably not a huge revelation to many.

In fact the real surprise may be that the Tracfin database 'only' stored 180 million records, considering that SWIFT itself processes over 15 million transactions every day.

The whole point of having an intelligence agency is to monitor the actions of potential enemies and the money trail is often a very good starting point for any investigation. It appears that this financial monitoring was almost exclusively targeting non-US citizens anyway so few, if any, domestic laws would have been broken.

Furthermore, the US Treasury already has an agreement with SWIFT which affords it consensual access to international transaction records, as confirmed by former Homeland Security chief Juan Zarate and SWIFT's own CEO Leornard Schrank just a couple of months ago. This agreement is further backed up by a European treaty which came into effect on August 1, 2010.

http://nakedsecurity.sophos.com/2013/09/16/snowden-outs-nsas-follow-the-money-international-banking-spies/

---

Editor's Note:
Is it just me, or does anyone else find it funny that the only thing we know about the information "leaked" by Snowden has come from publications like The Guardian, The Washington Post, and now Der Spiegel? I mean, okay Snowden leaked the information, but doesn't this somehow make those publications culpable of threatening U.S. National Security?

By the way, where's the raw data? Why can't I just download this information, and find out what the NSA has been up to? How come I have to rely on these publications to sift through it for me? It all seems very suspicious to me.