IT troubles cost BOS dear

The FSA has fined Bank of Scotland (BOS) £4.2 million for legacy system failures which meant it held inaccurate mortgage records for 250,000 of its customers.

Mortgage information was held on two separate unaligned systems and there were also problems with two further processes where manual updates were not always carried out. BOS relied on incorrect records for considerable periods of time between 2004 and 2011.

The issue first came to light when the bank put in place a programme to rectify the fact that some Halifax customers had received potentially confusing information about changes to their mortgage contracts, specifically relating to the standard variable rate. While monitoring a consumer forum website, the FSA found a number of customers complaining that they had been wrongly excluded from the programme and had not received goodwill payments. As well as excluding this group, the problem was compounded when BOS incorrectly contacted 33,700 customers who should never have been included in the programme, and mistakenly made goodwill payments totalling £20.4 million to 22,700 of them.

Tracey McDermott, FSA director of enforcement and financial crime, says: "These mistakes stemmed from the fact that Bank of Scotland had an inadequate mortgage records system meaning they could not identify which of those 250,000 customers were subject to a cap on their standard variable rate. This breach is particularly serious because the inaccuracies built up over a period of seven years. There was no structure in place to identify errors as they occurred and no checking procedures thereafter. In a complicated organisation where several legacy systems exist, firms have to make sure they are synchronised, otherwise it is their customers who suffer.”

BOS was found to have breached Principle Three of the FSA’s Principles for Business, which requires a firm to organise and control its affairs responsibly and effectively, with adequate risk management systems. It agreed to settle with the FSA at an early stage of the investigation, thus avoiding a £6 million fine.

    Share Story:

Recent Stories


Creating value together: Strategic partnerships in the age of GCCs
As Global Capability Centres reshape the financial services landscape, one question stands out: how do leading banks balance in-house innovation with strategic partnerships to drive real transformation?

Data trust in the AI era: Building customer confidence through responsible banking
In the second episode of FStech’s three-part video podcast series sponsored by HCLTech, Sudip Lahiri, Executive Vice President & Head of Financial Services for Europe & UKI at HCLTech examines the critical relationship between data trust, transparency, and responsible AI implementation in financial services.

Banking's GenAI evolution: Beyond the hype, building the future
In the first episode of a three-part video podcast series sponsored by HCLTech, Sudip Lahiri, Executive Vice President & Head of Financial Services for Europe & UKI at HCLTech explores how financial institutions can navigate the transformative potential of Generative AI while building lasting foundations for innovation.

Beyond compliance: Building unshakeable operational resilience in financial services
In today's rapidly evolving financial landscape, operational resilience has become a critical focus for institutions worldwide. As regulatory requirements grow more complex and cyber threats, particularly ransomware, become increasingly sophisticated, financial services providers must adapt and strengthen their defences. The intersection of compliance, technology, and security presents both challenges and opportunities.