A billion dollars later: What the industry still hasn’t fixed

The recent news that Commonwealth Bank of Australia (CBA) has identified up to A$1 billion in suspected fraudulent home loans caught my attention.  Not because it signals a crisis. It doesn’t.  Stories like this tend to reveal something more interesting, like how the environment around lending is quietly changing. And this one says quite a bit.

At its core, lending has always been built on a fairly simple set of principles. Understand the customer. Assess their ability to repay. Look at the evidence supporting the application and security, make a judgement….easy.  Most people in credit would recognise that as some variation of the classic 3c’s of credit, character, collateral and capacity framework. Those fundamentals still hold.  What’s changing is the environment those principles operate in.

Technology has made lending faster and more accessible than ever. Applications that once took days or weeks can now move through systems in hours. Customers expect that speed and, in many cases, banks have built processes to deliver it.  But technology doesn’t just improve legitimate processes. It also improves the tools available to people trying to game the system.

Reports around the CBA issue suggest the suspected fraud involves falsified financial documents,  in some cases generated using modern digital tools.

That’s a very different challenge from the types of fraud banks have historically been used to detecting.  Fraud used to be messy. The documents didn’t match. Numbers looked wrong. Something simply didn’t feel right.  Now the challenge is that fabricated information can look convincingly real.  When false information looks credible, the job of verifying it becomes much harder.  None of this means the system is broken. Banks deal with fraud every day and have extensive controls designed to detect and manage it.

But it does highlight a broader shift many people in risk have been seeing for a while.  The role of credit risk has gradually expanded.  What used to sit neatly inside credit teams now increasingly overlaps with fraud, financial crime, operational risk and compliance. The surface area we need to think about when assessing risk is simply larger than it used to be.

Which means the tools and approaches used to verify information need to keep evolving as well.  For customers, the likely impact of stories like this won’t be dramatic. But over time it may mean slightly stronger verification processes, deeper data checks and more reliance on trusted data sources.  In other words, the industry will continue balancing two things customers care about - speed and certainty.

This story isn’t really about one bank.It’s another reminder that the environment around lending is shifting, and that verifying the truth behind financial information is becoming just as important as assessing the credit risk itself.

That probably isn’t surprising.  However, it does reinforce one thing, the fundamentals haven’t changed, the context around them has.