Assess whether linked accounts should be treated as one case (cab1b0)

Situation

Account-takeover device-fingerprint graph arrived with an email that matches a known BEC lure almost exactly for account-opening quality reviewer. That is a Fraud Detection Claims and Benefits Fraud decision on linked accounts should be in a mortgage correspondent channel.

Decision

Account-opening quality reviewer in a mortgage correspondent channel must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using account-takeover device-fingerprint graph after an email that matches a known BEC lure almost exactly.

Hypotheses to test

• An email that matches a known BEC lure almost exactly is noise around an already-controlled Claims and Benefits Fraud process in a mortgage correspondent channel, given account-takeover device-fingerprint graph.
• An email that matches a known BEC lure almost exactly is the event in account-takeover device-fingerprint graph that forces Remove access or reverse the item for account-opening quality reviewer under Fraud Detection.
• Account-takeover device-fingerprint graph shows a one-file miss after an email that matches a known BEC lure almost exactly, not a Claims and Benefits Fraud program failure.
• Account-takeover device-fingerprint graph cannot decide linked accounts should be yet after an email that matches a known BEC lure almost exactly; hold is the only Fraud Detection close a mortgage correspondent channel can defend.

Analysis required

• Check mule or round-trip markers in account-takeover device-fingerprint graph.
• Map typology and hold authority account-opening quality reviewer actually has in a mortgage correspondent channel.
• Trace funds, counterparties, and reversals in account-takeover device-fingerprint graph through the window opened by an email that matches a known BEC lure almost exactly.
• For this Fraud Detection Claims and Benefits Fraud file, read account-takeover device-fingerprint graph against an email that matches a known BEC lure almost exactly and write the one fact that would move linked accounts should be for account-opening quality reviewer.

Recommendation

Choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold on this Fraud Detection / Claims and Benefits Fraud packet (account-takeover device-fingerprint graph after an email that matches a known BEC lure almost exactly). Lead with the Fraud Detection option account-takeover device-fingerprint graph can support after an email that matches a known BEC lure almost exactly, then the two facts that force it, then the Monday action for account-opening quality reviewer in a mortgage correspondent channel.