Case 1: In September 2011, a man (age 32) and an accomplice from China utilized an unlawfully obtained ID and password of another individual to illegally remit 5 million yen into his own savings account. By October 2012, both men were arrested for crimes including computer fraud and violation of the Unauthorized Computer Access Act (Act on the Prohibition of Unauthorized Computer Access). (Saitama Prefecture)

Case 2: In October 2013, a man from the Philippines (age 32) offered information for a fee that was required to receive cash unlawfully transferred to his own savings account and remitted overseas through a fund transfer business operator. In January 2014, the same man was arrested for violation of the Act on Prevention of Transfer of Criminal Proceeds (compensated transfer using an exchange transaction card, etc.). (Aichi Prefecture)

## (2) Countermeasures against Unlawful Money Transfers Related to Internet Banking

I. Arrests of Persons Contributing to Unlawful Money Transfers

In 2013, the police arrested a total of 68 persons who opened an account with the fraudulent intent of allowing it to be utilized by another person, bought and sold accounts, withdrew unlawfully remitted funds, collected cash, and gave instruction on such unlawful actions related to unlawful money transfers.

### I I. Swift Investigation through Collaboration with Prefectural Police

Because in many cases, the addresses of holders of accounts from which funds are remitted, the addresses of holders of accounts into which funds are remitted, and the locations of cash withdrawals span several jurisdictions, it is important to share information on damages and collaborate among prefectural police from the time the perpetration of a crime is confirmed. Therefore, the National Police Agency actively promotes integrated/joint investigations among prefectural police. With the aim of speeding up the initial investigative stage, a Special Cybercrime Taskforce was established at the Metropolitan Police Department in July 2013 to provide relevant prefectural police with results of investigations conducted in Tokyo, where the head offices of financial institutions are concentrated.

III. Requesting Financial Institutions and Other Entities to Strengthen Security Capacity

The police are requesting financial institutions to strengthen security capacity for Internet banking, offering account information for freezing accounts abused in unlawful fund transfers and information on holders of frozen accounts, and advocating more stringent scrutiny of overseas remittances to fund transfer business operators. By doing so, some financial institutions have strengthened security capabilities through measures such as the utilization of a variable password generator (token) that enables the use of one-time passwords without email.

In addition, police are carrying out measures that include exchanging information with businesses offering antivirus software to detect botnets $ ^{*2} $ abused in unlawful money transfers, and collaborating with telecommunications carriers and other entities to warn users of computers that incorporate these botnets.

Variable password generator (token) (image)

IV. Public Relations and Awareness Activity Conducted in Collaboration with Businesses

The police are collaborating with financial institutions to warn users about, and develop their knowledge of, the various modus operandi by which identification codes such as ID and passwords are unlawfully acquired.

In addition, since there have been cases where exchange students and technical interns have bought or sold accounts used in illegal remittance and have withdrawn funds, the police are working with the universities and businesses where such foreigners belong to, for awareness activity.