Assess whether to refer to law enforcement or keep civil from BEC wire

SITUATION The working file is BEC wire instruction-change email thread after a sudden ACH origination from a previously dormant routing. Wire-desk escalation officer in a P&C carrier's auto-body network has to name To refer to law enforcement or Keep civil for this Fraud Detection Credit and Identity Fraud file.

DECISION Wire-desk escalation officer in a P&C carrier's auto-body network must choose To refer to law enforcement / Keep civil using BEC wire instruction-change email thread after a sudden ACH origination from a previously dormant routing.

HYPOTHESES TO TEST 1. The population in BEC wire instruction-change email thread is the one a sudden ACH origination from a previously dormant routing named, so To refer to law enforcement follows for this Credit and Identity Fraud file. 2. The population in BEC wire instruction-change email thread is adjacent only to a sudden ACH origination from a previously dormant routing; Keep civil is the honest Fraud Detection call. 3. A P&C carrier's auto-body network already contained a sudden ACH origination from a previously dormant routing before BEC wire instruction-change email thread arrived; no new Credit and Identity Fraud path. 4. Provenance on BEC wire instruction-change email thread after a sudden ACH origination from a previously dormant routing is broken; do not pick To refer to law enforcement or Keep civil yet.

ANALYSIS REQUIRED 1. Map typology and hold authority wire-desk escalation officer actually has in a P&C carrier's auto-body network. 2. Trace funds, counterparties, and reversals in BEC wire instruction-change email thread through the window opened by a sudden ACH origination from a previously dormant routing. 3. Quantify loss if the hold is released before BEC wire instruction-change email thread is complete. 4. For this Fraud Detection Credit and Identity Fraud file, read BEC wire instruction-change email thread against a sudden ACH origination from a previously dormant routing and write the one fact that would move to refer to law for wire-desk escalation officer.

RECOMMENDATION Choose To refer to law enforcement / Keep civil on this Fraud Detection / Credit and Identity Fraud packet (BEC wire instruction-change email thread after a sudden ACH origination from a previously dormant routing). The follow-on Credit and Identity Fraud action is what wire-desk escalation officer does next: implement the option, assign an owner, and log the missing fact.

COMMAND RETURNS - Bottom-line Fraud Detection option on to refer to law, then the evidence in BEC wire instruction-change email thread, then the action for wire-desk escalation officer - Hypothesis scorecard against BEC wire instruction-change email thread: supported / rejected / untestable - Missing page in BEC wire instruction-change email thread after a sudden ACH origination from a previously dormant routing, if any - Regulatory or exam hook Credit and Identity Fraud would cite