FORTUNE — In December 2001, Richard Reid tried to blow up an American Airlines international flight by igniting explosives in his shoes. The FAA immediately swung into action, and in short order all departing passengers had to remove their shoes for security screening.
On Christmas Day 2009, Umar Farouk Abdulmutallab tried to blow up an international flight using explosives packed in his underwear. This did not lead to passengers having to remove their underwear — though it did give rise to the expression “Don’t touch my junk!” which enjoyed its own 15 minutes of fame.
No one has since been threatened by shoe bombs or knicker bombs. The authorities would have us feel reassured at what a good job they are doing, while skeptics observe that all we have done is protect ourselves against yesterday’s threats.
In the sorry tale of AAA-rated CDOs, we are not sure which is worse: the idea that the ratings agencies may have been criminally negligent in assigning AAA ratings to toxic investments, or the fact that the government was nowhere to be seen when the disaster was a-building, but is here with a multi billion-dollar shakedown after the fact. However you view it, the authorities are making S&P go through the equivalent of removing their shoes at security, almost a decade after it failed to curtail the rating firms’ contribution to the biggest financial disaster in a century.
The courts have generally agreed with the ratings agencies’ position that what they publish is independent journalism and protected by the First Amendment. We find this disheartening, as well as incomprehensible rubbish. Meanwhile, the Department of Justice complaint against S&P says financial institutions relied on credit ratings “to identify and compare risks” among various instruments. This is also misleading and we think we know why.
Financial institutions are required by SEC rules to purchase investment-grade rated investments. Portfolio managers are also mindful of the high utility of AAA ratings in defending poor performance. It is less a question of portfolio risk — would that the average portfolio manager could recognize a credit risk if he tripped over it! — than of career risk: The government mandated CYA factor allows portfolio managers to sleep soundly at night, safe from the threat of both regulators and plaintiffs’ counsel, even as the value of the assets they manage dribbles away. The government does not want to out itself as the prime suspect in its own case, which is why the complaint says the firms used ratings “to identify and compare risks,” rather than for their actual purpose as a government sanction to reduce their cash reserves.
What is a “Ratings agency,” anyway? The SEC is an “agency.” The DEA is an “agency.” The Secret Service and the CIA are “agencies.” Calling the rating firms “agencies” implies they are part of an arm of the government. Under a decades-old bargain with Wall Street, the SEC designates these firms as NRSROs — Nationally Recognized Statistical Rating Organizations – and requires financial institutions to buy debt that is rated investment grade, giving the NRSROs regulatory standing. The SEC website says “A credit rating agency is a firm that provides its opinion …” How can the SEC discipline the raters when the Commission’s own definition accepts the First Amendment argument? This looks like a textbook definition of Regulatory Capture.
Today, even after the massive failure of rating the exotic instruments of the past decade, the biggest value of the major rating firms is their massive databases. Moody’s Investor Services (MCO) has been gathering and analyzing data on a broad range of industries since 1914. Its bond models are based on a century’s worth of data and modeling experience, and the imposition of the NRSROs’ models as the standard has caused bond issuers to conform to structures the raters find acceptable.
What happened in the recent meltdown was largely attributable to two problems. First, the raters’ standard models did not apply to the new-fangled synthetic instruments being created and traded like so many hotcakes.
Debt analysts work from established models. They determine what kind of debt an issue represents, then plug in the numbers and run it against their historical database. This works very well — except when it doesn’t. In the CDO debacle, the analysts were largely using their standard models, and coming up with results that proved disastrous. Imagine taking your French traveler’s phrase book and trying to talk your way out of a drug bust in Mongolia.
Unlike analysts who write company research for stock investors, bond analysts don’t go out into the field. They rely on information from issuers. The ratings firm analysts didn’t determine whether anyone was actually living in the homes that secured the residential mortgage-backed securities (RMBS – one of the categories mentioned in the DOJ complaint.) Their models were not structured to reflect the risk that a pool of mortgages might include million dollar homes bought with no money down by window washers earning $18,000 annually.
The second problem may seem surprising. It appears the competition for high-ticket business drove a frantic race to the bottom among the NRSROs. A recent paper from the London School of Economics concludes: “relative to monopoly, rating agencies are more likely to inflate ratings under competition, resulting in lower expected welfare.” The authors find the lowering of standards was driven not by the banks pressuring the raters to inflate ratings, but by the rating firms themselves who focused on “the trade-off between maintaining reputation (to increase profits in the future) and inflating ratings today (to increase current profits.)” The rating agencies needed no prodding to act in bad faith. They were induced not by greedy bankers, but by the unfettered operation of the free market. The authors cite a range of academic work that concludes the issuer-pay model leads to inflated ratings in a competitive scenario.
The statistics are shocking – one wonders why no one was shocked at the time. “According to Fitch Ratings (2007), around 60% of all global structured products were AAA-rated, compared to less than 1% for corporate and financial issues.” How can a majority of a category be ranked “superior?” After an unprecedented jump in defaults the rating firms “lowered the credit ratings on structured products widely, indicating that the initial ratings were likely inaccurate.” The complaint describes the panic that gripped the CDO markets in 2007 once S&P was forced by reality to start issuing downgrades.
The DOJ points to divergent assumptions: The ratings departments consistently were more upbeat on Collateralized Debt Obligations (CDOs) than were the compliance departments of the same rating firms. In the event, even those cautious assessments proved wildly optimistic, which would not have mattered anyway, as “signals from the surveillance department were ignored.”
The DOJ case appears to rest on a novel legal theory. Under the Financial Institutions Reform, Recovery, and Enforcement Act of 1989 (FIRREA) Justice accuses S&P of defrauding a federally insured institution, thereby defrauding the taxpayer. The government also accuses S&P of favoring the issuing banks in order to increase market share (the conclusion of the LSE paper) and alleges “S&P falsely represented to investors that its ratings were objective, independent, and uninfluenced by conflicts of interest.”
The Justice Department seems to argue that S&P bamboozled major financial institutions into issuing toxic mortgage-backed securities, implying that they would not have issued tens of billions of dollars’ worth of bad paper if S&P had alerted them to risks in the portfolios. This appears facetious, but the NRSROs are supposed to act as gatekeepers to the system, and are so designated by the SEC.
The DOJ Complaint, though sobering reading, may lead nowhere. The DOJ does not seek to prevent the courts from agreeing that the raters are mere journalists voicing an opinion, nor to impose any greater duty of care on portfolio managers and institutions when buying AAA-rated paper, nor to strengthen the SEC and its oversight of the raters. It will require tightened internal standards at the NRSROs, but the real outcome is likely to be an industry-wide ban on ever putting anything in writing, rather than any Road To Damascus rethink of the business model.
The complaint names a number of S&P executives with significant decision-making authority, including the authority to override analyst ratings and slap a higher rating on an instrument. But while they are shown making key calls at the core of the crisis, no redress is sought from these executives. The only entity charged with committing fraud, or any wrongdoing, is “S&P.” This reminds us of the signs waved in protest at the Citizens United Supreme Court decision: “I’ll Believe A Corporation Is A Person When Texas Executes One.”
We think the likely outcome is a high-priced settlement, not a conviction. We don’t believe the DOJ wants to go to trial. The presence of those pesky emails probably makes this case juicy bait in their eyes, but they have to be aware of how difficult it will be to prove that S&P corporation acted with prior intent to defraud. We think it is clear that the NRSROs were negligent, in that they used tried and true models for completely new market structures, ones which not even the folks creating them really understood.
And we accept the obvious power of market forces. Ratings are a commodity. S&P does not have a perceptible edge on Moody’s in terms of database or the brilliance of its analysts. It can only really compete on the basis of offering more for less, which should have been obvious to regulators, Congress, investors, issuers … coulda, woulda, shoulda.
Once this is over, we think S&P will go back to doing what it has always done best: providing decent employment for highly unremarkable business school grads — folks who learn to crunch the numbers but who don’t have what it takes to make it on Wall Street. They will continue to build and to apply their century-old troves of data, though on occasion an analyst may actually go on-site to determine whether assets pledged to secure a bond issue actually exist.
S&P employees will be given rigorous training around the use of various forms of electronic communication. The rating firms will hire additional compliance personnel, not to oversee the process of issuing ratings, but to make sure no one is sending emails about it.
Business will, in short, return to Usual. The DOJ will cash a big check and pat itself generously on the back. And just as we are now safe from shoe bombers on airplanes, we will be protected from the risks in subprime-backed RMBS. We have seen the self correcting process of the Invisible Hand in the financial markets before, and it is gratifying to know it works so well. When was the last time you heard of someone losing their entire fortune in tulip bulbs?