Assess whether occupancy was misrepresented at origination (d1b481)

Situation

The desk packet is check-kiting multi-bank float map after an email that matches a known BEC lure almost exactly. Synthetic-identity detection manager in an ACH originating credit union has to name Remove access or reverse the item or Temporary compensating control for this Fraud Detection Claims and Benefits Fraud file.

Decision

Synthetic-identity detection manager in an ACH originating credit union must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using check-kiting multi-bank float map after an email that matches a known BEC lure almost exactly.

Hypotheses to test

• The population in check-kiting multi-bank float map is the one an email that matches a known BEC lure almost exactly named, so Remove access or reverse the item follows for this Claims and Benefits Fraud file.
• The population in check-kiting multi-bank float map is adjacent only to an email that matches a known BEC lure almost exactly; Temporary compensating control is the honest Fraud Detection call.
• An ACH originating credit union already contained an email that matches a known BEC lure almost exactly before check-kiting multi-bank float map arrived; no new Claims and Benefits Fraud path.
• Provenance on check-kiting multi-bank float map after an email that matches a known BEC lure almost exactly is broken; do not pick Remove access or reverse the item or Temporary compensating control yet.

Analysis required

• Trace funds, counterparties, and reversals in check-kiting multi-bank float map through the window opened by an email that matches a known BEC lure almost exactly.
• Quantify loss if the hold is released before check-kiting multi-bank float map is complete.
• Test a one-off dispute against the first edge of a scheme around occupancy was misrepresented at.
• For this Fraud Detection Claims and Benefits Fraud file, read check-kiting multi-bank float map against an email that matches a known BEC lure almost exactly and write the one fact that would move occupancy was misrepresented at for synthetic-identity detection manager.

Recommendation

Choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold on this Fraud Detection / Claims and Benefits Fraud packet (check-kiting multi-bank float map after an email that matches a known BEC lure almost exactly). The follow-on Claims and Benefits Fraud action is what synthetic-identity detection manager does next: implement the option, assign an owner, and log the missing fact.