Account & Entity Screen
Why use Account and Entity Screen?
The Account & Entity Screen has been developed in the wake of growing concern about vendor conveyancer fraud. With lenders tightening panels, fraud has moved along the line in a conveyancing transaction and criminals are stealing identities of real firms, or setting up their own fake firm in order to dupe you into sending money to them. Account & Entity Screen provides you with enhanced risk management in fund transmission.
The SRA issued 22 alerts relating to identity theft in 2012, rising to 102 in 2013 and an unprecedented 187 in 2014.The trend continued throughout 2015, with 183 scam alerts. In the first 6 months of 2016 over 100 alerts have been issued already.
The FCA believes there are 1400 organised crime gangs trying to steal mortgage funds at any given time and they can use the brand of a solicitors/conveyancers firm that is well known to gain an extra badge of legitimacy.
Cases such as Lloyds TSB v Markandan, Purrunsing v A’Court & Co and House Owners Conveyancers Limited & Uddin and Nationwide v Davisons have found solicitors to be in breach of trust.
More recently not using Lawyer Checker has been used in a Letter of Claim to suggest that a conveyancer who has sent funds to a fraudster is negligent.
Vendor Conveyancer Fraud is a real threat to your business, your brand and your clients. Checking the Find a Solicitor list is no longer enough.
What is Consumer Bank Account Checker?
Consumer Bank Account Checker is an enhanced due diligence tool for a firm to check a consumer’s bank account details. This service allows you to check the personal bank account details of a client you are either sending funds to or receiving funds from.
You can use Consumer Bank Account Checker to verify that the bank account details you have been sent by a client are correct before transferring funds to them. You can also use this service to validate source of funds by checking who owns the bank account from which you received the funds.
What is DMARC?
DMARC stands for Domain-based Message Authentication, Reporting and Conformance.
It is a protocol that was built on top of the existing protocols SPF and DKIM.
DMARC does a few things:
1. It takes into account the results from SPF and DKIM
2. It requires not only for SPF or DKIM to pass but for them to also align with the domain found in the From address in order for DMARC to pass.
3. Reports SPF, DKIM and DMARC results back to the domain found in the From address (ie. sender).
4. Finally tells receivers how to treat emails that fail DMARC validation by specifying a policy in DNS.
Where does our data for Account & Entity Screen come from?
Our database has been constantly building for over 5 years from two main sources. The initial source was a bulk import of data from a group of solicitors own data which data back to 2009. During the building of the service we have been to numerous different bodies such as the SRA, Law Society, CML and the City of London police (to name just a few) who have all seen the system and are aware of where we get our data from. No questions have been raised on this point. The other source of information that builds our database is through searches that are carried out by clients. Each search acts like a credit footprint to build up records on both existing and new accounts that we have information for.
How much does Account & Entity Screen cost and how do I pay?
The price is £10 +VAT, this can be charged as a disbursement. All payments for Lawyer Checker searches are taken by direct debit which is set up on registration of your account. We invoice at the start of the month for any searches carried out in the previous month. From 1st September 2018, a Minimum Usage Policy will be introduced for all Lawyer Checker account holders which will be £20 + VAT, the equivalent of 2 Account & Entity Screen searches, for months where less than this amount is charged in searches. More information on this policy can be found in the Terms and Conditions.
How is the Account & Entity Screen data protection compliant?
We have been in touch with the Information Commissioners Office to ensure that what we are doing is compliant. We have confirmation that as it would not be possible to identify an individual from the client account information we hold, we do not fall within data protection regulations.
Does Account & Entity Screen cover Scotland?
No, the Scottish system completes on cheques therefore Lawyer Checker does not apply. The Account & Entity Screen service is only designed for the jurisdiction of England & Wales.
Does Account & Entity Screen cover Licenced Conveyancers?
Yes, the service covers all entities that perform residential conveyancing. This can include building firms and councils.
When in the transaction should I perform the search using Account & Entity Screen?
We recommend that you carry out the search when you get Requisitions on Title and before Exchange of Contracts. There is also an option to update the search for free, immediately before completion by clicking on ‘Search Update’ in the Account section of the website. You can then find the search you want to update and click ‘Perform Update’. The result will be emailed to you in the same timescale as with initial results.
What details do I need to enter to perform a search on Account & Entity Screen?
All you need is the client account details of the firm you are sending money to and their name and postcode. You will also need to enter some details about the case concerned.
What if I don't have the account details early enough to perform an Account & Entity Search?
We would recommend that you ask the other side for the account details in order to carry out this search. Is it worth the risk of not asking for the details a little earlier? Both pilot and new user firms have been able to successfully get account details of the other side earlier in the transaction so that they can perform these checks.
How long will it take to receive my result when using Account & Entity Screen?
Using the Account and Entity Screen service, you will receive a result immediately with the check of the account against our database. If the result is Infrequent or Unknown, we will send you a further research email within 4 working hours. If you are concerned about the length of time it will take to carry out searches, we have the option for you to integrate your case management system directly to our system. Please contact us and we will send you over the integration pack.
How do I get my results from Account & Entity Screen?
Your results will be sent via email with link to download from site. This will enable you to log in to a secure portal on the website and download your result via PDF.
What results will I receive from Account & Entity Screen Checker?
Using the Account and Entity Screen service, you will immediately receive an email with the result of your check against the database.
If the result is Infrequent or Unknown, you will receive a further email within 4 working hours that has further research into the entity carried out by our team.
|
Result
|
What does this mean?
|
|
Frequent
|
Good track record regarding conveyancing transactions within the Lawyer Checker database.
|
|
Infrequent
|
A track record has been identified but not all checks have been passed. At this point you will receive further research.
|
|
Unknown
|
Unknown means that there is no previous track record that has been identified within the Lawyer Checker database. At this point you will receive further research.
We suggest you exercise caution in these circumstances and fully review your file for any risk indicators.
|
What should I do with the results from Account & Entity Screen?
Any response sent by Lawyer Checker is not a statement by Lawyer Checker that this bank account is safe, suspicious, invalid or unsafe.
Information provided by Lawyer Checker should be used in conjunction with other information on file to consider whether it is appropriate to transfer money to that account.
Approximately 85% of results will come back as Frequent therefore if a result is Infrequent or Unknown, it may present a potential risk and we suggest that you seek to satisfy yourself that you are comfortable with sending money to this account.
Consider all the information we have provided to you in conjunction with other information you have on file. There may be a legitimate reason why the account has presented a potential risk, such as incorrect details, or it may require further investigation.
If you feel that the information you have still presents a risk; we suggest that you pick up the phone to the COLP/COFA at that firm and ask them to confirm their bank details.
If you are still not comfortable sending money to the other side, you may wish to consider discussing the risk with your clients and discharging the mortgage directly or aborting the transaction.
What are Update Searches?
As well as the Initial search that you carry out when you get Requisitions on Title, included in the price is the option to update this search before completion. This allows for additional peace of mind that nothing has changed since your first search.
In order to carry out the update search, please click on ‘Search Update’ in the Account section of the website. You can then find the search you want to update and click ‘Perform Update’.
What are 'Search Updates'?
As well as the Initial search that you carry out when you get Requisitions on Title, included in the price is the option to update this search before completion. This allows for additional peace of mind that nothing has changed since your first search. In order to carry out the update search, please click on ‘Search Update’ in the Account section of the website. You can then find the search you want to update and click ‘Perform Update’.
How do I add users to Account & Entity Screen?
The Key Contact for the firm, created on registration will be the first Admin User. The Admin User is able to add other users by going to the ‘Account’ section of the website and clicking on ‘Manage Users’.
The user will be sent their unique log-in details to the email address entered. They can then log-in to the system and perform searches.
Please ensure that the email address is entered correctly as it is not possible to change the address once added.
Do you have professional indemnity insurance?
We do have professional indemnity insurance. For more information, please contact us.
Terms and Conditions (Account & Entity Screen)
To download our Terms and Conditions, please click here.
How is Consumer Bank Account Checker different to the Account & Entity Screen?
Account & Entity Screen is a tool to check the details of a law firm before you send funds to them whereas Consumer Bank Account Checker is a tool for checking the account details of your consumer clients.
Why use Consumer Bank Account Checker?
How do you know that you are sending funds to the correct bank account for your client? There is a huge and growing opportunity for criminals to hijack transactions and hack into personal systems such as email, Consumer Bank Account Checker allows you to check that the bank account details you have been given are correct.
This product compliments and adds protection to your existing Anti-Money Laundering procedures by evidencing that your client is the owner of the account that you are remitting funds to or receiving funds from.
Where does our data come from for Consumer Bank Account Checker?
Our data comes from Experian, a leading global informational services company, who have been working directly with banks to gain access to their client data form verification purposes. After extensive research we have carefully chosen to partner with Experian and we are confident that they offer the very best data and service available.
How much does Consumer Bank Account Checker cost?
The current pay as you go price is £2.50 +VAT.
If you sign up to a 12 month subscription, the price per search will be reduced.
From 1st September 2018, a Minimum Usage Policy will be introduced for all Lawyer Checker account holders which will be £20 + VAT, the equivalent of 2 Account & Entity Screen searches, for months where less than this amount is charged in searches. More information on this policy can be found in the Terms and Conditions.
How do I pay for Consumer Bank Account Checker?
All payments for Lawyer Checker searches are taken by direct debit which is set up on registration of your account. We invoice at the start of the month for any searches carried out in the previous month.
If you have a subscription, payment will be taken by direct debit and your schedule will show the equal monthly instalment for this.
What details do I need to enter to perform a search on Consumer Bank Account Checker?
All you need is your client’s First Name, Surname, Date of Birth, Full Address, Bank Account Number, Sort Code.
How do I get my results for a Consumer Bank Account Checker search?
Your results will be sent via email with link to download from site. This will enable you to log in to a secure portal on the website and download your result via PDF.
Where does our data come from for Account & Entity Screen?
Our database has been constantly building for over 5 years from two main sources. The initial source was a bulk import of data from a group of solicitors own data which data back to 2009. During the building of the service we have been to numerous different bodies such as the SRA, Law Society, CML and the City of London police (to name just a few) who have all seen the system and are aware of where we get our data from. No questions have been raised on this point.
The other source of information that builds our database is through searches that are carried out by clients. Each search acts like a credit footprint to build up records on both existing and new accounts that we have information for.
What result will I receive?
Using the Account and Entity Screen service, you will immediately receive an email with the result of your check against the database. If the result is Infrequent or Unknown, you will receive a further email within 4 working hours that has further research into the entity carried out by our team. For sample results of the Account and Entity Screen service, please click here.
How long will it take to receive my result when using Consumer Bank Account Checker?
Results are given in real-time subject to all correct information being received.
What result will I receive when using Consumer Bank Account Checker?
You will receive a PDF result that contains four clear sections to show your result. For more information on the Consumer Bank Account Checker service, please click here.
Section 1: Account Check
This section shows if the account details you have searched match a valid bank account. You will receive one of three results:
|
Result
|
What does this mean?
|
|
Match
|
The account details you provided match to an existing bank account.
|
|
No Match
|
The account details you provided do not match to an existing bank account. We suggest you exercise caution in these circumstances and fully review your file for any risk indicators.
|
|
Unable to Check
|
Unable to Check means that the bank account exists but Experian do not hold the data and therefore cannot confirm the ownership. This means a definitive response cannot be given.
It could be because Experian do not hold ownership data for this bank or that the account is on old terms with their bank and therefore we do not have consent on this particular account due to its age.
We suggest you exercise caution in these circumstances and fully review your file for any risk indicators. You will not be charged if you receive this kind of result.
|
Section 2: Account Ownership Check
If you have completed the joint/single ownership field on your order form, this section will show whether the account you are searching has matched to the type of ownership
|
Result
|
What does this mean?
|
|
Match
|
The ownership type you entered matches the account record.
|
|
No Match
|
The ownership type you entered does not matchthe account record.
|
Section 3: Personal Details Check
This section of your result shows whether the name and Date of Birth (DOB) you entered match the personal details that are linked to the account you have searched. This provided as a score, out of 9.
Please note that a sophisticated fraudster may set up a bank account with the name of a legitimate individual and therefore you should consider this in conjunction with the Account sections of your result.
|
Score
|
What does this mean?
|
|
1
|
No match (name and/or DOB are incorrect). Typically, you would reject this.
|
|
3
|
Possible match (name and/or DOB are partly wrong). We recommend you check the particulars searched.
|
|
5
|
Probable match (name and/or DOB are slightly wrong). We recommend you check the particulars searched.
|
|
7
|
Highly probably match (name correct and DOB two digits out). We recommend you check the particulars searched.
|
|
8
|
Highly probable match (name correct and DOB one digit out). We recommend you check the particulars searched.
|
|
9
|
Exact match to name and DOB searched.
|
Section 4: Address Details Check
This section of your result shows whether the address you entered match the address details that are linked to the account you have searched. This provided as a score, out of 9.
Please note that a sophisticated fraudster may set up a bank account with the name of a legitimate individual and therefore you should consider this in conjunction with the Account sections of your result.
|
Score
|
What does this mean?
|
|
1
|
No match. Typically you would reject this and we recommend you check the details searched.
|
|
2
|
Possible match. Typically you would reject this and we recommend you check the details searched.
|
|
5/6
|
Probable match (some details missing/partly wrong). We recommend you check the details searched.
|
|
7/8
|
Highly probably match (minor details missing/partly wrong). We recommend you check the details searched.
|
|
9
|
Exact match to address searched.
|
Will I be charged if I receive an Unable to Check result?
No, if you receive an Unable to Check Result you will not be charged for the search. An explanation of what this result means can be found above.
If you have a subscription for Consumer Bank Account Checker and you receive an Unable to Check result, the search will not be counted as one of your annual search amount.
Are there any restrictions on bank accounts that I can check?
This service only works on personal Current Accounts within the United Kingdom. Please Note: we can only perform checks on bank accounts registered with a UK address.
As a provider of credit check services, Experian have access to a large majority of information relating to bank accounts in the UK. They work with the majority of banks on all tiers and are limited only where they do not have consent to release information on certain accounts (Unable to Check results).
How do you deal with Personal Data?
For full information on Lawyer Checker’s Data Protection commitments, please view our Data Protection statement click here.
If your question hasn’t been answered here, please contact our team and we will be happy to help.
Terms and Conditions (Consumer Bank Account Checker)
To download our Terms and Conditions, please click here.
Does OnDMARC require installation?
No, DMARC is a protocol that relies only on the configuration of 3 types of DNS records:
1) DMARC record: declares the policy to be applied when validating emails received from your domain. And allows OnDMARC to start monitoring the sources of your email traffic.
2) SPF record: declares the list of IP addresses for the services that are allowed to send emails on behalf of your domain.
3) DKIM records: services sending emails on your behalf should sign these using DKIM and the public key for these signatures are hosted as DNS records
Do you provide support?
We provide support via email and phone.
Additionally we can provide personalised support with a custom SLA as an add-on service. If you sign up for this service a member of our team will work with you on configuring and maintaining your protection.
What does the process of setting up DMARC look like?
OnDMARC will guide you through the steps of securing your email.
For detail of the full process see our Getting Started Guide.
What does full DMARC protection result in?
Congratulations, your domain is now protected against impersonation attempts. As a bonus, a correctly configured domain also improves the deliverability of your emails.
From now on, your domain is protected so new email sources that are not authorised to send emails on your behalf will be blocked by their receivers. When you want to add a new email service to send emails on your behalf, make sure to follow their instructions on how to setup SPF and DKIM correctly. All major CRM and bulk email services (i.e.: Sendgrid, Mailchimp, Drip, etc...) support these protocols so there should be no problem for you.
Do both senders and receivers have to implement DMARC in order for it to be effective?
Only you need to have DMARC in order to protect your domain from being used in phishing attacks. Almost all email receivers are DMARC enabled so they will be able to execute your DMARC configuration.
We have not had any phishing attacks that use our exact domain.
The chances are that without a DMARC reject policy your domain has been used multiple times without your knowledge. We offer a free 14 day trial in which you will see reports of how your domain is being used before you commit to anything.
Does DMARC stop phishing by lookalike domains?
DMARC will not stop phishing from lookalike domains but it is best practice to purchase your lookalike domains and park them.
How long does it take to set up OnDMARC?
Setting up OnDMARC is very simple.
For detail of the full process see our Getting Started Guide.
How easy is it to send emails from an unprotected domain?
With simple instructions that can be found online it is relatively straightforward for anyone with some technical knowledge to send an email from an unprotected domain.
How does Office 365 handle inbound emails that fail DMARC?
In usual circumstances, if the sending server (email sent by you) is correctly setup with DMARC (this is called p=reject) the receiving server will not receive the email at all. In the case of the receiving server being Microsoft Office 365, instead of rejecting the email outright, the server will mark the email as spam. This means that instead of not receiving the email at all, the email will be treated in line with the receiving server's spam and quarantine processes.
