Assess whether to refer to law enforcement or keep civil after an email that

SITUATION Payments Fraud work in a credit-card issuer during a holiday-authorization spike now turns on to refer to law because an email that matches a known BEC lure almost exactly put mule-account payroll deposit pattern in play. Card-issuing fraud analyst should say what mule-account payroll deposit pattern proves.

DECISION Card-issuing fraud analyst in a credit-card issuer during a holiday-authorization spike must choose To refer to law enforcement / Keep civil using mule-account payroll deposit pattern after an email that matches a known BEC lure almost exactly.

HYPOTHESES TO TEST 1. An email that matches a known BEC lure almost exactly is noise around an already-controlled Payments Fraud process in a credit-card issuer during a holiday-authorization spike, given mule-account payroll deposit pattern. 2. An email that matches a known BEC lure almost exactly is the event in mule-account payroll deposit pattern that forces To refer to law enforcement for card-issuing fraud analyst under Fraud Detection. 3. Mule-account payroll deposit pattern shows a one-file miss after an email that matches a known BEC lure almost exactly, not a Payments Fraud program failure. 4. Mule-account payroll deposit pattern cannot decide to refer to law yet after an email that matches a known BEC lure almost exactly; hold is the only Fraud Detection close a credit-card issuer during a holiday-authorization spike can defend.

ANALYSIS REQUIRED 1. Check mule or round-trip markers in mule-account payroll deposit pattern. 2. Map typology and hold authority card-issuing fraud analyst actually has in a credit-card issuer during a holiday-authorization spike. 3. Trace funds, counterparties, and reversals in mule-account payroll deposit pattern through the window opened by an email that matches a known BEC lure almost exactly. 4. For this Fraud Detection Payments Fraud file, read mule-account payroll deposit pattern against an email that matches a known BEC lure almost exactly and write the one fact that would move to refer to law for card-issuing fraud analyst.

RECOMMENDATION Choose To refer to law enforcement / Keep civil on this Fraud Detection / Payments Fraud packet (mule-account payroll deposit pattern after an email that matches a known BEC lure almost exactly). Lead with the Fraud Detection option mule-account payroll deposit pattern can support after an email that matches a known BEC lure almost exactly, then the two facts that force it, then the Monday action for card-issuing fraud analyst in a credit-card issuer during a holiday-authorization spike.

COMMAND RETURNS - Bottom-line Fraud Detection option on to refer to law, then the evidence in mule-account payroll deposit pattern, then the action for card-issuing fraud analyst - Hypothesis scorecard against mule-account payroll deposit pattern: supported / rejected / untestable - What changes to refer to law if an email that matches a known BEC lure almost exactly is later withdrawn - Named option among To refer to law enforcement, Keep civil and the fact that kills the others