New Bitinstant OFAC Rule

[cosmicboy]

Saw that bitinstant is once again sending coins directly to BTC account. You are now required to put your name and DOB, but I don't understand how this can mean anything...if you were a terrorist/criminal, couldn't you just put a fake name and DOB? Or put someone elses name and DOB? This is certainly not any kind of legal evidence....I suppose they have to follow the law, no matter how silly, but really do they expect this law to actually do anything?

-cb

[Yankee (BitInstant)]

Saw that bitinstant is once again sending coins directly to BTC account. You are now required to put your name and DOB, but I don't understand how this can mean anything...if you were a terrorist/criminal, couldn't you just put a fake name and DOB? Or put someone elses name and DOB? This is certainly not any kind of legal evidence....I suppose they have to follow the law, no matter how silly, but really do they expect this law to actually do anything?

-cb

Hey,

Bitcoin is still a very legal grey area. However requires us to follow certain laws, silly or not.

We cross check it with the OFAC blacklist. If its a fake name / DOB then your transfer may not process and you will be banned from using BitInstant

Do you expect arresting an 18 year old for smoking pot is gonna do anything? Not really, but there are still laws.

I hope I answered this.

Charlie

[KillaKat420]

hey is there sommething wrong with bitinstant right now, im trying to go there to place an order and i continuously get a website is not available error

[Yankee (BitInstant)]

hey is there sommething wrong with bitinstant right now, im trying to go there to place an order and i continuously get a website is not available error

https://bitcointalk.org/index.php?topic=122882.0

[KillaKat420]

thanks for the fast response

[cosmicboy]

I understand where you're coming from Charlie and I understand you need to follow the law...but seriously you could put anyone's name and DOB up there...I'm just wondering out loud about what lawmaker would think that is any kind of evidence in the even of an investigation or means anything at all. Thanks for answering though. Long live bitinstant!

-cb

[Yankee (BitInstant)]

I understand where you're coming from Charlie and I understand you need to follow the law...but seriously you could put anyone's name and DOB up there...I'm just wondering out loud about what lawmaker would think that is any kind of evidence in the even of an investigation or means anything at all. Thanks for answering though. Long live bitinstant!

-cb

Pleasure, thanks!

The point is not for an investigation

We cross check it with the OFAC blacklist. If its a fake name / DOB then your transfer may not process and you will be banned from using BitInstant

[firefop]

What's your policy on logging those checks? Are they logged? If so, how long before the logs are purged?

[Rudd-O]

This OFAC entity strikes me as malevolent:

As part of its efforts to support the Iraq sanctions, in 2005 OFAC fined Voices in the Wilderness $20,000 for gifting medicine and other humanitarian supplies to Iraqis.[7] In a similar case, OFAC is still attempting to collect (as of 2011) a $10,000 fine, plus interest, against Bert Sacks for bringing medicine to residents of Basra.

OFAC means "Office of Foreign Assets Control".  They are a group of people exclusively dedicated to ruining the life of anyone who decides to give their property to OFAC's listed "enemies" (that is, total strangers who OFAC would literally prefer to see dead, see above).  Given this level of organizational sociopathy, there is absolutely no guarantee that the information you give OFAC (or good people doing business while threatened by OFAC, like BitInstant and other exchangers) won't be used against you.  In fact, chances are, they will, as they have (which you can see above).  Building a list of which people got how many Bitcoins is merely their first step.  They've punished your fellow men for helping other people, do you think they won't punish you or collaborate with others to punish you?

Whatever the purpose of this name / DOB business is, I would categorically recommend anyone to not cooperate.  Providing OFAC false but credible information is one way to accomplish such a goal.  If you don't have it in you to do this, I suggest you use LocalBitcoins or Bitcoin-OTC instead.

I'm sorry that BitInstant was involuntarily dragged into becoming informants of this criminal organization.

[Yankee (BitInstant)]

Given this level of organizational sociopathy, there is absolutely no guarantee that the information you give OFAC (or good people doing business while threatened by OFAC, like BitInstant and other exchangers) won't be used against you.  In fact, chances are, they will, as they have (which you can see above).  Building a list of which people got how many Bitcoins is merely their first step.  

This is simply not true. No one is building a list of Bitcoiners, please don't spread such a dumbfounded rumor.

We don't give a list to the government or anything, we simply check if your name is on their list and thats it.

Anyone can freely check: http://apps.finra.org/rulesregulation/ofac/1/default.aspx

What's your policy on logging those checks? Are they logged? If so, how long before the logs are purged?

http://bitinstant.com/security outlines our policy that has never changed.

We don't pass your information to the government, we pay a private company to check the names on our behalf.

Thanks

-Charlie

[AndrewBUD]

I typed my name in and this is what I get:


LANGA, Andrew; DOB 13 Jan 1965; Deputy Minister of Environment and Tourism (individual) [ZIMBABWE].

[Rudd-O]

This is simply not true. No one is building a list of Bitcoiners, please don't spread such a dumbfounded rumor.

Yankee, with all due respect, I don't spread rumors.  I said it was a possibility.

We don't give a list to the government or anything, we simply check if your name is on their list and thats it.

Right now, due to the process you are forced to use, they cannot connect Bitcoin purchases with specific people -- at best they can only connect time/date of purchase with a specific name.  So you are literally correct in what you said.

However, there is no guarantee that the process won't change in the future and encroach on Bitcoiners' privacy further.  Remember how "Social Security numbers are not an identity card" gave way to "please give us your Social Security number to verify it's you"?  Well, gradualism is the way these crooks operate, as history proves.

Remember that, right now, pretty much every bank transaction out of the financial system into another currency is logged and available to these crooks (this is how they punish anyone who attempts to send money to, e.g., Iran).  It would not be surprising to see them start pushing to extend the same regime to Bitcoin (which they are beginning to see as a currency, no doubt you know that).

As always, I reiterate my sympathy to you guys.

[DeathAndTaxes]

Right now, due to the process you are forced to use, they cannot connect Bitcoin purchases with specific people -- at best they can only connect time/date of purchase with a specific name.  So you are literally correct in what you said.

What are you talking about?  How about your learn more and stop making stupid assumptions.  OFAC (well technically SDN) is a database.    You (or anyone on the planet) can download a copy.   You can then QUERY the database LOCALLY.    If you (yes YOU) download a copy of the database and query your name how exactly would the government "know" what you queried?  Magical gubbermint gnomes?

TL/DR version
Step 1) Download the SDN http://www.treasury.gov/ofac/downloads/sdnlist.txt
Step 2) Open it up in a text editor and search for your name?
Step 3) (something involving gubbermint gnomes)
Step 4) Gubbermint magically knows what you search for?

Be honest you have no idea what you are talking to and simply spreading FUD.  Troll on brother.

[AndrewBUD]

^... lol....


What happens when bitinstant puts a name in and the exact name reappears on the database?


What are the next steps if this happens?

[Yankee (BitInstant)]

What happens when bitinstant puts a name in and the exact name reappears on the database?

God I hope that never happens.

If it does, I think I have to fill out one of these http://www.treasury.gov/resource-center/sanctions/Pages/forms-index.aspx

[casascius]

More than a decade ago I was hired by a bank to help enhance a system they used to run a remittance network to Mexico.  This is where I learned about the OFAC list for the first time.  It's simple and stupid at the same time.  One of the steps they were required to do was to query to see if a beneficiary name is on the list, and take additional steps if it was.  It is simple string matching.  The people at the bank were fully aware that it was something stupid and easily circumvented but nevertheless something they were required to do.

[Rudd-O]

OFAC (well technically SDN) is a database.    You (or anyone on the planet) can download a copy.   You can then QUERY the database LOCALLY. If you (yes YOU) download a copy of the database and query your name how exactly would the government "know" what you queried?  Magical gubbermint gnomes?

TL/DR version
Step 1) Download the SDN http://www.treasury.gov/ofac/downloads/sdnlist.txt
Step 2) Open it up in a text editor and search for your name?
Step 3) (something involving gubbermint gnomes)
Step 4) Gubbermint magically knows what you search for?

That's one way to look up information, but that's not what Yankee says BitInstant does.  Read his post.  They look the information up on a commercial partner's service.  This service logs everything you search, at the very least in their Web server logs.  Make no mistake, the queries are almost certainly logged with a timestamp, and BitInstant does not control when or even if those logs are ever purged..

For all we know, this service could be reporting who looked up whom when directly to the depraved people that conform OFAC.  They might even be "legally required" to do so for commercial third-party queries, as opposed to people who just download the database.

------------------------------------------------

Finally, I'd like to address your misrepresentations of my character:

What are you talking about?  How about your learn more and stop making stupid assumptions.

Be honest you have no idea what you are talking to and simply spreading FUD.  Troll on brother.

Look, I don't know who you are and I don't know why you feel that I've somehow "wronged" you enough to earn a gratuituous personal attack from you, but if you can't engage me in terms other than defamation, insults and misrepresentation, please don't engage me at all.

[Rudd-O]

^... lol....


What happens when bitinstant puts a name in and the exact name reappears on the database?


What are the next steps if this happens?

That probably means you ain't getting your money or your Bitcoins back.  That is a blacklist, after all, just like the no-fly list.

Yankee: say Person X attempts to withdraw money using BitInstant, and Person X is verbatim on the list (might be a different Person X, but still, on the list).  What will you do regarding the money transfer?  Will you refuse to execute the transfer and return the bitcoins to this person?  Will you keep the bitcoins and the dollars, and refuse to return them to Person X?  What portion of this decision is forced on you by external actors?

[Rudd-O]

More than a decade ago I was hired by a bank to help enhance a system they used to run a remittance network to Mexico.  This is where I learned about the OFAC list for the first time.  It's simple and stupid at the same time.  One of the steps they were required to do was to query to see if a beneficiary name is on the list, and take additional steps if it was.  It is simple string matching.  The people at the bank were fully aware that it was something stupid and easily circumvented but nevertheless something they were required to do.

This is valuable info.  Thanks, man.

[Yankee (BitInstant)]

That's one way to look up information, but that's not what Yankee says BitInstant does.  Read his post.  They look the information up on a commercial partner's service.  This service logs everything you search, at the very least in their Web server logs.  Make no mistake, the queries are almost certainly logged with a timestamp, and BitInstant does not control when or even if those logs are ever purged..

For all we know, this service could be reporting who looked up whom when directly to the depraved people that conform OFAC.  They might even be "legally required" to do so for commercial third-party queries, as opposed to people who just download the database.

No, the service that we use does nothing of that sort.

They just have an API that interfaces with the gov't updated list.

^... lol....


What happens when bitinstant puts a name in and the exact name reappears on the database?


What are the next steps if this happens?

That probably means you ain't getting your money or your Bitcoins back.  That is a blacklist, after all, just like the no-fly list.

Yankee: say Person X attempts to withdraw money using BitInstant, and Person X is verbatim on the list (might be a different Person X, but still, on the list).  What will you do regarding the money transfer?  Will you refuse to execute the transfer and return the bitcoins to this person?  Will you keep the bitcoins and the dollars, and refuse to return them to Person X?  What portion of this decision is forced on you by external actors?

If a customer of ours is on the list, he would not get past our homepage.

Right now, we don't have the API fully integrated so I wont find out until after the transfer.

However, we will not and do not freeze funds, ect.

Our job is to simply report it, with a 1 page form that we are given.