According to FINRA, Ron Yehuda Itin was suspended from association with any FINRA member in any principal capacity for three months on July 12, 2024, and required to requalify by examination as a General Securities Principal. In light of Itin's financial status, no monetary sanction was imposed.
Itin failed to establish and implement a supervisory system reasonably designed to detect and prevent fraudulent fund transmittals and identity theft. As his member firm's designated person responsible for establishing, maintaining, and enforcing its supervisory systems, Itin failed to reasonably design the firm's supervisory system and written supervisory procedures to achieve compliance with the firm's regulatory obligations.
The firm's procedures were generic and were not tailored to the firm's business. When the firm began receiving trading instructions and withdrawal requests from a customer's email address sent by hackers who had gained unauthorized access to it, Itin was aware of these communications and knew that the registered representative servicing the account had not spoken with the customer to confirm the authenticity of those instructions. Itin also knew that the representative was concerned about a possible email hack.
Despite numerous red flags, including the hackers' refusal to contact the firm via telephone to verify the requested transactions and their insistence that the firm accept order and wire instructions by email only, Itin reviewed and approved multiple request forms submitted by the hackers without ever speaking to or communicating with the customer through any method other than the hacked email account. As a consequence, the hackers were able to transfer nearly the full value of the account to outside bank accounts that they controlled, causing the majority of funds in the account to be stolen.
The three-month suspension, in effect from July 15, 2024, through October 14, 2024, underscores the critical importance of proper supervision and responding appropriately to red flags of potential fraud.
