Assess whether to refer to law enforcement or keep civil (d1115f)

SITUATION Claims special-investigation lead in a regional bank's card portfolio has one working extract — ACH return-reason code R10 spike — after a sudden ACH origination from a previously dormant routing. If ACH return-reason code R10 spike cannot support to refer to law, the only defensible Fraud Detection output is hold.

DECISION Claims special-investigation lead in a regional bank's card portfolio must choose To refer to law enforcement / Keep civil using ACH return-reason code R10 spike after a sudden ACH origination from a previously dormant routing.

HYPOTHESES TO TEST 1. ACH return-reason code R10 spike reads as To refer to law enforcement once a sudden ACH origination from a previously dormant routing is lined up to the same Fraud Detection population. 2. ACH return-reason code R10 spike is closer to Keep civil after a sudden ACH origination from a previously dormant routing; To refer to law enforcement would over-claim this Claims and Benefits Fraud extract. 3. A dual reading is still live in ACH return-reason code R10 spike for claims special-investigation lead in a regional bank's card portfolio. 4. ACH return-reason code R10 spike is missing the fact claims special-investigation lead needs after a sudden ACH origination from a previously dormant routing; stop this Fraud Detection close.

ANALYSIS REQUIRED 1. Check mule or round-trip markers in ACH return-reason code R10 spike. 2. Map typology and hold authority claims special-investigation lead actually has in a regional bank's card portfolio. 3. Trace funds, counterparties, and reversals in ACH return-reason code R10 spike through the window opened by a sudden ACH origination from a previously dormant routing. 4. For this Fraud Detection Claims and Benefits Fraud file, read ACH return-reason code R10 spike against a sudden ACH origination from a previously dormant routing and write the one fact that would move to refer to law for claims special-investigation lead.

RECOMMENDATION Choose To refer to law enforcement / Keep civil on this Fraud Detection / Claims and Benefits Fraud packet (ACH return-reason code R10 spike after a sudden ACH origination from a previously dormant routing). If ACH return-reason code R10 spike cannot force a Fraud Detection label under Claims and Benefits Fraud, stop. If ACH return-reason code R10 spike after a sudden ACH origination from a previously dormant routing cannot support To refer to law enforcement versus Keep civil on this Fraud Detection Claims and Benefits Fraud close, claims special-investigation lead must do not infer a control or scheme beyond the transaction and entitlement evidence.

COMMAND RETURNS - Bottom-line Fraud Detection option on to refer to law, then the evidence in ACH return-reason code R10 spike, then the action for claims special-investigation lead - Hypothesis scorecard against ACH return-reason code R10 spike: supported / rejected / untestable - Missing page in ACH return-reason code R10 spike after a sudden ACH origination from a previously dormant routing, if any - Regulatory or exam hook Claims and Benefits Fraud would cite