Assess whether linked accounts should be treated as one case (9747d0)

Situation

In a mortgage correspondent channel, account-takeover device-fingerprint graph is the evidence after a new device from a different metro on a 2am login. Synthetic-identity detection manager has to pick Remove access or reverse the item or Temporary compensating control for this Fraud Detection Payments Fraud close using account-takeover device-fingerprint graph.

Decision

Synthetic-identity detection manager in a mortgage correspondent channel must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using account-takeover device-fingerprint graph after a new device from a different metro on a 2am login.

Hypotheses to test

• Authorize Remove access or reverse the item now; account-takeover device-fingerprint graph already has the discriminator after a new device from a different metro on a 2am login.
• Keep Temporary compensating control in force until account-takeover device-fingerprint graph is completed after a new device from a different metro on a 2am login for synthetic-identity detection manager.
• Treat account-takeover device-fingerprint graph as Approve a documented exception because both readings appear after a new device from a different metro on a 2am login.
• Refuse a Fraud Detection close: synthetic-identity detection manager does not have the page linked accounts should be turns on in account-takeover device-fingerprint graph.

Analysis required

• Check mule or round-trip markers in account-takeover device-fingerprint graph.
• Map typology and hold authority synthetic-identity detection manager actually has in a mortgage correspondent channel.
• Trace funds, counterparties, and reversals in account-takeover device-fingerprint graph through the window opened by a new device from a different metro on a 2am login.
• For this Fraud Detection Payments Fraud file, read account-takeover device-fingerprint graph against a new device from a different metro on a 2am login and write the one fact that would move linked accounts should be for synthetic-identity detection manager.

Recommendation

Choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold on this Fraud Detection / Payments Fraud packet (account-takeover device-fingerprint graph after a new device from a different metro on a 2am login). Lead with the Fraud Detection option account-takeover device-fingerprint graph can support after a new device from a different metro on a 2am login, then the two facts that force it, then the Monday action for synthetic-identity detection manager in a mortgage correspondent channel.