Assess whether a SAR narrative is supportable today (bb3826)

Situation

An ACH originating credit union cannot treat a customer calling to reverse a 'authorized' card charge as color commentary on ACH return-reason code R10 spike. Synthetic-identity detection manager must close a SAR narrative is from that extract under Fraud Detection / Claims and Benefits Fraud.

Decision

Synthetic-identity detection manager in an ACH originating credit union must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using ACH return-reason code R10 spike after a customer calling to reverse a 'authorized' card charge.

Hypotheses to test

• The population in ACH return-reason code R10 spike is the one a customer calling to reverse a 'authorized' card charge named, so Remove access or reverse the item follows for this Claims and Benefits Fraud file.
• The population in ACH return-reason code R10 spike is adjacent only to a customer calling to reverse a 'authorized' card charge; Temporary compensating control is the honest Fraud Detection call.
• An ACH originating credit union already contained a customer calling to reverse a 'authorized' card charge before ACH return-reason code R10 spike arrived; no new Claims and Benefits Fraud path.
• Provenance on ACH return-reason code R10 spike after a customer calling to reverse a 'authorized' card charge is broken; do not pick Remove access or reverse the item or Temporary compensating control yet.

Analysis required

• Quantify loss if the hold is released before ACH return-reason code R10 spike is complete.
• Test a one-off dispute against the first edge of a scheme around a SAR narrative is.
• Check mule or round-trip markers in ACH return-reason code R10 spike.
• For this Fraud Detection Claims and Benefits Fraud file, read ACH return-reason code R10 spike against a customer calling to reverse a 'authorized' card charge and write the one fact that would move a SAR narrative is for synthetic-identity detection manager.

Recommendation

Choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold on this Fraud Detection / Claims and Benefits Fraud packet (ACH return-reason code R10 spike after a customer calling to reverse a 'authorized' card charge). The follow-on Claims and Benefits Fraud action is what synthetic-identity detection manager does next: implement the option, assign an owner, and log the missing fact.