Payments-risk officer must resolve whether a SAR narrative is supportable

Situation

A new device from a different metro on a 2am login put check-kiting multi-bank float map in front of payments-risk officer in a mortgage correspondent channel. This Fraud Detection / Credit and Identity Fraud close is a SAR narrative is from check-kiting multi-bank float map, and the live options are Remove access or reverse the item, Temporary compensating control, Approve a documented exception.

Decision

Payments-risk officer in a mortgage correspondent channel must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using check-kiting multi-bank float map after a new device from a different metro on a 2am login.

Hypotheses to test

• A new device from a different metro on a 2am login is noise around an already-controlled Credit and Identity Fraud process in a mortgage correspondent channel, given check-kiting multi-bank float map.
• A new device from a different metro on a 2am login is the event in check-kiting multi-bank float map that forces Remove access or reverse the item for payments-risk officer under Fraud Detection.
• Check-kiting multi-bank float map shows a one-file miss after a new device from a different metro on a 2am login, not a Credit and Identity Fraud program failure.
• Check-kiting multi-bank float map cannot decide a SAR narrative is yet after a new device from a different metro on a 2am login; hold is the only Fraud Detection close a mortgage correspondent channel can defend.

Analysis required

• Trace funds, counterparties, and reversals in check-kiting multi-bank float map through the window opened by a new device from a different metro on a 2am login.
• Quantify loss if the hold is released before check-kiting multi-bank float map is complete.
• Test a one-off dispute against the first edge of a scheme around a SAR narrative is.
• For this Fraud Detection Credit and Identity Fraud file, read check-kiting multi-bank float map against a new device from a different metro on a 2am login and write the one fact that would move a SAR narrative is for payments-risk officer.

Recommendation

Choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold on this Fraud Detection / Credit and Identity Fraud packet (check-kiting multi-bank float map after a new device from a different metro on a 2am login). The follow-on Credit and Identity Fraud action is what payments-risk officer does next: implement the option, assign an owner, and log the missing fact.