Hacker News Reader

> Often times companies are legally barred from disclosing this information.

You are talking specifically about the financial and banking industry. Working in the banking industry , compliance regulation prevents banks from communicating about why your funds are frozen so the SEC can investigate and determine whether are not a fraud or suspicious activity were committed.

Such thing does not exist in the IT Industry. Microsoft ran their in house auditing tools , determined the account was suspiscious , set a flag "is_suspicious" as "true" in their database and the next day a batch ran and suspsended their account.

IT Audit for GAFA is 100% automated , there is no human interaction unlike Banking , Insurance and Finance.

Hence, the fact that BFA must communicate after the investigation about what fraud you committed to properly charge you in court and banned you from the services( You can even be banned in an entire country from owning a bank account depending on the severity ) but they must tell you why.

That is not the case for tech, it is completely unregulated which is why it's making me this upset.

Microsoft is a large company with many services, and some of them may intersect with this type of regulation through law enforcement. The financial sector isn’t the only area of business that have these types of restrictions, and it’s often significantly easier from a business and engineering perspective to block an account entirely than to cherry pick which services can and cannot be used.

This is particularly true when products frequently gain new features or integrations with other company-provided services, as changes in one system might allow an account that’s partially suspended to be able to perform legally-forbidden actions in another (think: something like iMessage gaining Apple Pay support). Yes, you can solve these things with engineering, but not only can that easily cost more than it’s worth, but you also open yourself to massive company risk if you fuck it up and regulators catch wind.

> The financial sector isn’t the only area of business that have these types of restrictions, and it’s often significantly easier from a business and engineering perspective to block an account entirely than to cherry pick which services can and cannot be used.

Yeah, I used to work on a fraud detection team for another company, where some guy got some traction online complaining about how his payment account got shut down. All sorts of bluster about how he scrupulously followed the terms and conditions and how he couldn't possibly be doing anything fraudulent and how we were stealing his money, and lots of bad publicity in threads like this.

Turns out the FBI was investigating the guy for hosting child porn on another service using the same account, and we weren't allowed to respond in any way to his complaining online. So we shut down all his accounts and couldn't really do anything to defend ourselves against his complaints.

In my experience, like 90+% of the loudest complainers of account shutdowns are completely full of it, and are guilty of very obvious violations that they somehow fail to mention when blogging about it. I'm not going to say that false positives from machine learning systems never happen, but people who loudly complain about their accounts being frozen don't have a good track record, and since most companies aren't going to discuss exactly why they got shut down in the open, the prevailing narrative seems to be that the large faceless corporation doesn't care.

How is that justified as compatible with a fair justice system, or have we kind of given up on this when it comes to dealing with modern financial services, or Internet services?

Or is it just as the mentioning of terrorist mean that we leave the confines of modern democracy and enters the territory of fascists policies, as we become what we fight?

the fact that accounts are locked and funds frozen by hacked together system dependent on irrational machine learning algorithms and never heard in open court is the premise for any number of dark dystopian science fiction stories and deeply scary and yet we seem to keep enacting laws and frameworks that rewards companies like Microsoft for arbitrary enforcement by making it impossibly expensive to challenge punishment dished out private enforcers(microsoft/facebook/youtube etc.) who can be punished by the state for not enforcing aggressively enough

> How is that justified as compatible with a fair justice system

It's not. It's also not practiced exactly that way.

There is always a maximum duration for those things, and after that duration secrecy is gone.

Also, before locking somebody's account, the law enforcement people have to get in front of a judge, and make a really good case for why it should happen. Normally judges do not like people asking for unilateral actions (on most places judges are very competent lawyers, and if there is something that lawyers really love is their antagonistic system for decision making).

Money laundering laws are not like anti-terrorism ones.

The problem here is that when it's the banks doing it there really is'nt a court involved, nor police there simply is an algorithm spotting something and usually that's the end of the story.

If the block was followed by mandatory court action by whoever made the block with failure to successfully prosecute resulting in compensation paid to unjustly accused, there would be balance but thats also not how this kind of block works, as the courts are usually not involved when it's the banks/services own mandatory anti-fraud process thats being invoked, and not the police conducting an investigation prior to an actual open court case.

The problem is that private organizations are being asked to police their customers on their own under a framework thats basically outside of the justice systems, under penalty of fines by a justice system, that is not issuing the same fines when the private organization punish the innocent.

Again the problem is we have a mechanism that made some sense when nothing ever happened without sooner or later happening in a court that can/will punish the police for false arrest when/if the resulting prosecution fails, that due to the fact that a false/incorrect negative action no longer have consequences for those making it happen, especially as it happens under the pretense of being done but a free private organization by private organization that are theoretically free to reject customers even if that rejection is practically ordered by the state.

Wait, are you talking from the US? Are banks blocking their customer's money there without the government intervention?

I haven't heard about something like this happening anywhere, but it's not hard to imagine it, unfortunately.

No, situations like described are almost exclusively a result of a governmental request.

Someone who has a) been committing financial crimes and b) finds their funds frozen will probably be able to connect the dots.

If they're barred by law from saying why, fine. If not, they should have to provide at least some reason, and a way to appeal.

In such case, I'd expect the reply to include "unfortunately, we're legally barred from providing any further details".

Well, then, in that case you've basically just told them you closed the account because you suspected it of being involved in {money laundering, funding terrorism, fulfilling the drug trade}.

You don't think the person doing money laundering and finding their accounts frozen won't have figured that out already?

"Gee, it must've been that meme I posted the other day."

It provides a defense -- you can say 'I wasn't laundering money' if that's their claim for what you did, and you can possibly provide evidence that you weren't laundering money; there's no way for you to say that you weren't violating an unknown term because you don't know what that is.

It’s not up to the companies, who (in my experience) largely hate having their hands tied. Legally, saying something like this can be construed as giving information to the target of the investigation, and doing so can result in fines and even jail time.

It’s dumb, and of course a guilty person will know exactly what happened, and of course hearing a response that their account has been closed and they cannot appeal or get any information as to why is going to make it even more blindingly obvious.

"Because terrism" is becoming an all-too-ready and "unassailable" excuse for any action an institution doesn't want to justify nor clarify.

Past a point, this becomes like those building regulations and other points of governance, that are not actually publicly available.

And your democracy fails. Because how can people govern, including themselves, when they don't even know what the rules are? Where the "lines" are?

Maybe, ultimately, it would be more useful to effectively inform the public about such funding, than to hide it away.

Also, there's been another round of conversation in the last some days, about "cashless" payment systems and societies.

What happens, when some initiative or data point -- or someone's personal agenda -- flags you as "suspect"?

When your cards are suddenly deactivated, your accounts frozen, and no one will tell you why? Nor for how long?

This secret behavior -- this secrecy -- needs some serious and effective limitations.

Or we are all going to be at risk of violating society's "terms of service", and made pariah, without explanation nor recourse.

Slippery slope...

> "Because terrism"

Sincere question: what are you conveying by using that spelling of (I assume) "terrorism"?

A colloquialism, plus a hesitation to use the correctly spelled word, what with all the scraping and data aggregation/analysis going on these days.

I don't support it. I also don't want to be flagged for simply discussing it.

Of course, this simple tactic may be futile, on my part.

Which sort of brings us back to the colloquialism.