UniCredit China employee embezzled $15mn of clients’ money over 3 years

Bloomberg

A UniCredit SpA employee in China allegedly siphoned off about 100 million yuan ($15 million) of clients’ money over three years by taking advantage of shared passwords and other internal security loopholes, according to people familiar with the matter.
Local police and the China Banking and Insurance Regulatory Commission were informed late last year, and the regulator will levy a penalty in the coming months, the people said, asking not to be identified because they aren’t authorised to speak publicly. The CBIRC has shared information on the matter with other banks, one of the people said.
UniCredit’s employee in China allegedly used a group supervisor’s password to access clients’ accounts without authorisation and fabricated transactions, the people said. The employee used the money to buy apartments in countries including the US, Greece and Japan, and intended to flip them at higher prices to repay UniCredit without raising any red flags, they said.
“UniCredit regrets this incident and apologizes to those affected. The safety and security of our clients’ assets is our primary concern and all efforts have been made to ensure that a similar malicious incident cannot reoccur,” a spokesman for the bank said, though he didn’t provide further details. “The Group strictly complies with all rules and regulations in each market where it operates.”
The CBIRC said in an emailed reply to queries that it has uncovered an incident involving a foreign bank employee misusing their position and powers of employment for embezzlement. It didn’t identify the bank or the individual, and said it will disclose details and punishment at a later time.
The alleged fraud — one of the biggest among foreign banks in China — could become the latest headache for the Italian lender’s Chief Executive Officer Jean Pierre Mustier, who took over about three years ago and inherited issues including a pile of bad debt and possible sanctions violations.
The employee allegedly confessed to the police after the bank detected that money was being illegally routed, they said.