FIN-M.1
Altered payment instructions
An account number, amount, or beneficiary can be changed between approval and release.
DOR's answer
DOR checks each instruction against where it came from before money moves.
RA-1.3.2RA-2.4.1
Finance Reference.
The ways payment, market, custody, and account systems get fooled, in plain language, and what DOR does about each one.
Payments and Money Movement
Wires, ACH, instant payments, and the messages between institutions.
FIN-M.2
Unverified instant payments
Instant payments leave before slower checks can finish.
DOR's answer
DOR verifies the instruction at the speed of the payment and holds one it cannot prove.
RA-1.3.1RA-D.4
FIN-M.3
Replayed or reordered financial messages
A valid payment or settlement message can be sent again, or messages delivered out of order.
DOR's answer
DOR knows what it has already received and checks the order.
RA-5.2.1RA-5.2.3
FIN-M.4
Changed vendor bank details
A request to update a vendor's bank account can come from an impostor.
DOR's answer
DOR confirms the request came from the vendor before the change takes effect.
RA-2.4.1RA-3.2.1
Markets and Trading
Prices, orders, clocks, and the models that act on them in milliseconds.
FIN-T.1
Tampered market data
Prices and news can be altered or injected before they reach a trading system.
DOR's answer
DOR confirms each item came from its source, unaltered.
RA-1.3.4RA-1.2.2
FIN-T.2
Faked trading time
A shifted clock corrupts order timestamps and the record regulators rely on.
DOR's answer
DOR checks time where it enters and keeps the true order of events.
RA-5.1.1RA-5.1.2RA-5.3.2
FIN-T.3
Stale data passed as current
An old price or a delayed message can be presented as current.
DOR's answer
DOR confirms how old data actually is and when it was sent.
RA-5.2.4RA-5.2.2
FIN-T.4
Swapped or unapproved models
A model can be altered or replaced while everything around it looks the same.
DOR's answer
DOR confirms the model in use and records what went into each decision.
RA-4.2.1RA-4.2.3RA-6.1.1
Custody and Digital Assets
Who owns what, and what a signer actually approves.
FIN-K.1
Manipulated signing software
The software that shows a signer what they are approving can be altered to show one thing and sign another.
DOR's answer
DOR checks what is actually running and what is actually being signed.
RA-4.1.2RA-1.3.2
FIN-K.2
Altered custody records
Ownership and transfer records can be changed or backdated.
DOR's answer
DOR keeps each record provable from the moment it is written.
RA-6.3.1RA-5.3.1
People and Accounts
The executive on the call, the caller at the bank, the customer at the door.
FIN-P.1
Deepfake executives on calls
A cloned face or voice can join a call as an executive and approve a payment.
DOR's answer
DOR confirms who is on the call while it is happening.
RA-3.2.2RA-3.2.3
FIN-P.2
Cloned voices at the call center
Callers with cloned voices and stolen details can pass as account holders.
DOR's answer
DOR checks the live call and confirms the caller before an account changes.
RA-3.2.2RA-2.4.1
FIN-P.3
Faked documents and faces at onboarding
Generated or edited IDs, selfies, and documents can open accounts.
DOR's answer
DOR checks where each one came from before it is accepted.
RA-1.4.4RA-6.2.2
FIN-P.4
Insiders misusing access
Someone with legitimate access can move money or data for the wrong reason.
DOR's answer
DOR requires a name and a reason for sensitive actions, recorded where no one can edit them.
RA-2.4.2RA-6.3.2
Records and Reporting
The books, the audit trail, and the rules you answer to.
FIN-R.1
Altered or backdated ledgers
Entries and approvals can be changed or created later and dated earlier.
DOR's answer
DOR locks in what was recorded and the order it happened.
RA-5.3.1RA-6.1.3
FIN-R.2
Erased or edited logs
After a break-in, logs are often edited or deleted.
DOR's answer
DOR's record of what your systems received and did cannot be edited or deleted.
RA-4.3.2RA-5.3.2
FIN-R.3
Reports changed after they leave
Statements, filings, and data shared outside the institution can be changed after they leave.
DOR's answer
DOR's proof travels with the data.
RA-6.3.3
No entries match. Try another word, or choose All.
Finance
Start with a briefing.
Bring your payment flows and approval chains, or just the question your treasury team keeps asking. DOR will show you exactly where it fits.