Terrorist Activities On Social Media

For nearly 20 years, the financial sector has been required to report suspicions of terrorist-related transactions. Should similar requirements apply to suspicious communications on social media?

In response to the increased use of social media by extremist groups, the G7 called in May ‘for Communication Service Providers and social media companies to substantially increase their efforts to address terrorist content’. Prime Minister Theresa May had previously expressed the view that companies should ‘report this vile content to the authorities and block the users who spread it’.

Expecting private companies to report terrorist-related activities is not unprecedented: consistent with the recommendations of the Financial Action Task Force (FATF), the global standard-setter in the areas of anti-money laundering and counterterrorist financing, financial institutions are required to file a suspicious transaction report if they suspect any funds to be related to terrorist financing.

Accordingly, transaction reports may provide a useful point of reference when considering recent proposals to introduce reporting requirements for certain types of social media content.

For someone on the outside, it might seem odd that, under current rules, transactions suspected of funding terrorist acts have to be reported to authorities, whereas public communications promoting the same acts generally do not. 
After all, the people that propaganda is meant to attract are as critical to terrorist networks as financial resources. Instead of reporting requirements, the communications monitoring regime relies primarily on the authorities’ ability to intercept data, including through bulk powers.

The reasons for the differences between the monitoring regimes for communications and financial transactions go back to their origins.

Current counterterrorist financing regulations have to a large extent been shaped by the pre-existing anti-money laundering framework. The design of anti-money laundering rules had been influenced by the earlier principle of bank secrecy, namely the notion that banks (in certain jurisdictions) are contractually prevented from disclosing information about their customers.
As a result, the monitoring regime for financial transactions has traditionally placed a primary responsibility on financial institutions to act as gatekeepers and decide on a case-by-case basis which transactions need to be reported to the public authorities.

The monitoring regime for communications has also had to be reconciled with privacy concerns, in particular secrecy of correspondence and freedom of speech. Yet, unlike for the financial sector, the infrastructure for communications (for example, postal services and telecommunications networks) has historically fallen within the purview of governments rather than private actors.

Accordingly, the monitoring regime was predicated on the assumption that law enforcement authorities have the ability to intercept most communications and obtain information without private sector involvement. The monitoring regime for communications has therefore focused on defining the circumstances in which authorities are allowed to make use of their ability to intercept communications, rather than on introducing mechanisms for private entities to share information with public authorities.

However, are such traditional distinctions still relevant? Or should monitoring regimes be more closely aligned?
Unlike traditional communications infrastructure, social media networks have largely been developed without government involvement. Rather, they are run by private actors who have the technical ability to limit external access to the content of communications, such as through encryption.

Technological progress has therefore created the room (and possibly the need) for stronger private sector involvement in the monitoring of communications. Conversely, new technologies may in the future reduce the role of traditional financial institutions in transaction monitoring: virtual currencies, such as Bitcoin, allow users to conduct transactions outside the established financial system, without the involvement of any entity subject to reporting requirements.

Social media companies have not only reshaped the structure of communications networks. By offering payment services, such as money transfers among users, they have also blurred the lines between sectors.

In other words, social media companies are now subject to reporting requirements for some of their activities, such as transactions intended to fund terrorist groups, but not for others, including communications promoting a terrorist group.
In addition, from a criminological point of view, the traditional difference between terrorist propaganda and financing has become more difficult to draw as the definition of the latter has been broadened beyond the specific act of funding a terrorist act or organisation.

For example, according to FATF Recommendation 5, terrorist financing offences should also include attempts to collect funds with the intent that these should be used by an individual terrorist or a terrorist organisation.
This suggests that a public fundraising campaign on a social media platform, which could be considered as a form of communication, would need to be reported as a potential terrorist financing offence.

At a time when security authorities are grappling with the technical innovations available to terrorists and are relying increasingly on private sector actors to assist with their identification and disruption efforts, access to information held by these actors is critical. 

In order to ensure that information is shared effectively, the nature of the relationship between the public and private sectors in each of the financial and communications areas needs to be updated to reflect the evolution of their respective roles since regulations were first conceived.

In this context, any discussions on new reporting requirements for social media companies may benefit from the lessons learnt from the regime for suspicious financial transaction reporting.

RUSI:

You Might Also Read:

Scenarios For Predicting Terrorist Attacks:

Facebook, Twitter and Google Are A 'recruiting platform for terrorism':

Facebook Deploys AI To Block Terror Propaganda:

 

 

« Cyber Caliphate's Scorecard
Cybersecurity: The Cold War Online »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

NovaTech Automation

NovaTech Automation

NovaTech products and services make the world’s power grids and essential process industries more reliable, efficient, sustainable and secure.

NXO France

NXO France

NXO is an independent leader in the integration and management of digital workflows with services covering digital infrastructures, communications & collaboration, and security.

Optiv

Optiv

Optiv is a market-leading provider of end-to-end cyber security solutions. We help clients plan, build and run successful cyber security programs that achieve business objectives.

exceet Secure Solutions

exceet Secure Solutions

exceet Secure Solutions is your experienced specialist for Internet of Things (IoT), Heath Telematics, electronic signatures and timestamps and IT security.

H-11 Digital Forensics

H-11 Digital Forensics

H-11 Digital Forensics is a global leader of digital forensic technology.

AmWINS Group

AmWINS Group

AmWINS are a global specialty insurance distributor with expertise in property, casualty and professional lines including cyber liability.

LogicHub

LogicHub

LogicHub is built on the principle that every decision process for threat detection and response can and should be automated.

HackEDU

HackEDU

HackEDU provides secure coding training to companies ranging from startups to the Fortune 500.

Bright Security

Bright Security

Bright Security is a developer-centric Dynamic Application Security Testing (DAST) solution that helps organizations ship secure applications and APIs quickly and cost-effectively.

Antigen Security

Antigen Security

Antigen Security is a Digital Forensics, Incident Response and Recovery Engineering firm helping businesses and service providers prepare for, respond to, and recover from cyber threats.

Intelligent CloudCare

Intelligent CloudCare

Intelligent CloudCare, a division of IPS, is a full IT Services provider serving the needs of SMBs in the metropolitan New York City region.

Veriti

Veriti

Veriti is a unified security posture management platform that integrates with your security solutions and proactively identifies and remediates potential risks and misconfigurations.

Edgio

Edgio

Edgio provides unmatched speed, security, and simplicity at the edge through globally-scaled media and applications platforms.

Cyber & Data Protection

Cyber & Data Protection

Cyber & Data Protection Limited supports Charities, Educational Trusts and Private Schools, Hospitality and Legal organisations by keeping their data secure and usable.

BuddoBot

BuddoBot

BuddoBot has been a pioneering force in cybersecurity and information technology since 2008.

Jersey Cyber Security Centre (JCSC)

Jersey Cyber Security Centre (JCSC)

Jersey Cyber Security Centre is the jurisdiction's Cyber Emergency Response Team (CERT) and national technical authority for cyber security.