Whether linked accounts should be treated as one case from ACH return-reason

Situation

Credit and Identity Fraud work in a workers'-comp insurer after a surge in CT claims now turns on linked accounts should be because a check deposited in two banks the same afternoon put ACH return-reason code R10 spike in play. Bank BSA/AML case manager should say what ACH return-reason code R10 spike proves.

Decision

Bank BSA/AML case manager in a workers'-comp insurer after a surge in CT claims must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using ACH return-reason code R10 spike after a check deposited in two banks the same afternoon.

Hypotheses to test

• A check deposited in two banks the same afternoon is noise around an already-controlled Credit and Identity Fraud process in a workers'-comp insurer after a surge in CT claims, given ACH return-reason code R10 spike.
• A check deposited in two banks the same afternoon is the event in ACH return-reason code R10 spike that forces Remove access or reverse the item for bank BSA/AML case manager under Fraud Detection.
• ACH return-reason code R10 spike shows a one-file miss after a check deposited in two banks the same afternoon, not a Credit and Identity Fraud program failure.
• ACH return-reason code R10 spike cannot decide linked accounts should be yet after a check deposited in two banks the same afternoon; hold is the only Fraud Detection close a workers'-comp insurer after a surge in CT claims can defend.

Analysis required

• Check mule or round-trip markers in ACH return-reason code R10 spike.
• Map typology and hold authority bank BSA/AML case manager actually has in a workers'-comp insurer after a surge in CT claims.
• Trace funds, counterparties, and reversals in ACH return-reason code R10 spike through the window opened by a check deposited in two banks the same afternoon.
• For this Fraud Detection Credit and Identity Fraud file, read ACH return-reason code R10 spike against a check deposited in two banks the same afternoon and write the one fact that would move linked accounts should be for bank BSA/AML case manager.

Recommendation

Choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold on this Fraud Detection / Credit and Identity Fraud packet (ACH return-reason code R10 spike after a check deposited in two banks the same afternoon). The follow-on Credit and Identity Fraud action is what bank BSA/AML case manager does next: implement the option, assign an owner, and log the missing fact.