Whether to refer to law enforcement or keep civil from account-takeover

SITUATION After a new device from a different metro on a 2am login, account-takeover device-fingerprint graph is what card-issuing fraud analyst can touch in an ACH originating credit union. Fraud Detection will live with To refer to law enforcement versus Keep civil on this Credit and Identity Fraud file.

DECISION Card-issuing fraud analyst in an ACH originating credit union must choose To refer to law enforcement / Keep civil using account-takeover device-fingerprint graph after a new device from a different metro on a 2am login.

HYPOTHESES TO TEST 1. Account-takeover device-fingerprint graph reads as To refer to law enforcement once a new device from a different metro on a 2am login is lined up to the same Fraud Detection population. 2. Account-takeover device-fingerprint graph is closer to Keep civil after a new device from a different metro on a 2am login; To refer to law enforcement would over-claim this Credit and Identity Fraud extract. 3. A dual reading is still live in account-takeover device-fingerprint graph for card-issuing fraud analyst in an ACH originating credit union. 4. Account-takeover device-fingerprint graph is missing the fact card-issuing fraud analyst needs after a new device from a different metro on a 2am login; stop this Fraud Detection close.

ANALYSIS REQUIRED 1. Test a one-off dispute against the first edge of a scheme around to refer to law. 2. Check mule or round-trip markers in account-takeover device-fingerprint graph. 3. Map typology and hold authority card-issuing fraud analyst actually has in an ACH originating credit union. 4. For this Fraud Detection Credit and Identity Fraud file, read account-takeover device-fingerprint graph against a new device from a different metro on a 2am login and write the one fact that would move to refer to law for card-issuing fraud analyst.

RECOMMENDATION Choose To refer to law enforcement / Keep civil on this Fraud Detection / Credit and Identity Fraud packet (account-takeover device-fingerprint graph after a new device from a different metro on a 2am login). The follow-on Credit and Identity Fraud action is what card-issuing fraud analyst does next: implement the option, assign an owner, and log the missing fact.

COMMAND RETURNS - Bottom-line Fraud Detection option on to refer to law, then the evidence in account-takeover device-fingerprint graph, then the action for card-issuing fraud analyst - Hypothesis scorecard against account-takeover device-fingerprint graph: supported / rejected / untestable - What changes to refer to law if a new device from a different metro on a 2am login is later withdrawn - Named option among To refer to law enforcement, Keep civil and the fact that kills the others