Assess whether a SAR narrative is supportable today (9fa303)

Situation

After a check deposited in two banks the same afternoon, ACH return-reason code R10 spike is what SIU investigator can touch in a workers'-comp insurer after a surge in CT claims. Fraud Detection will live with Remove access or reverse the item versus Temporary compensating control on this Payments Fraud file.

Decision

SIU investigator in a workers'-comp insurer after a surge in CT claims must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using ACH return-reason code R10 spike after a check deposited in two banks the same afternoon.

Hypotheses to test

• The population in ACH return-reason code R10 spike is the one a check deposited in two banks the same afternoon named, so Remove access or reverse the item follows for this Payments Fraud file.
• The population in ACH return-reason code R10 spike is adjacent only to a check deposited in two banks the same afternoon; Temporary compensating control is the honest Fraud Detection call.
• A workers'-comp insurer after a surge in CT claims already contained a check deposited in two banks the same afternoon before ACH return-reason code R10 spike arrived; no new Payments Fraud path.
• Provenance on ACH return-reason code R10 spike after a check deposited in two banks the same afternoon is broken; do not pick Remove access or reverse the item or Temporary compensating control yet.

Analysis required

• Map typology and hold authority SIU investigator actually has in a workers'-comp insurer after a surge in CT claims.
• Trace funds, counterparties, and reversals in ACH return-reason code R10 spike through the window opened by a check deposited in two banks the same afternoon.
• Quantify loss if the hold is released before ACH return-reason code R10 spike is complete.
• For this Fraud Detection Payments Fraud file, read ACH return-reason code R10 spike against a check deposited in two banks the same afternoon and write the one fact that would move a SAR narrative is for SIU investigator.

Recommendation

Choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold on this Fraud Detection / Payments Fraud packet (ACH return-reason code R10 spike after a check deposited in two banks the same afternoon). If ACH return-reason code R10 spike cannot force a Fraud Detection label under Payments Fraud, stop. If ACH return-reason code R10 spike after a check deposited in two banks the same afternoon cannot support Remove access or reverse the item versus Temporary compensating control on this Fraud Detection Payments Fraud close, SIU investigator must do not infer a control or scheme beyond the transaction and entitlement evidence.