Assess whether occupancy was misrepresented at origination (16ab9c)

Situation

An email that matches a known BEC lure almost exactly put synthetic identity application cluster in front of claims special-investigation lead in a regional bank's card portfolio. This Fraud Detection / Claims and Benefits Fraud close is occupancy was misrepresented at from synthetic identity application cluster, and the live options are Remove access or reverse the item, Temporary compensating control, Approve a documented exception.

Decision

Claims special-investigation lead in a regional bank's card portfolio must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using synthetic identity application cluster after an email that matches a known BEC lure almost exactly.

Hypotheses to test

• The population in synthetic identity application cluster is the one an email that matches a known BEC lure almost exactly named, so Remove access or reverse the item follows for this Claims and Benefits Fraud file.
• The population in synthetic identity application cluster is adjacent only to an email that matches a known BEC lure almost exactly; Temporary compensating control is the honest Fraud Detection call.
• A regional bank's card portfolio already contained an email that matches a known BEC lure almost exactly before synthetic identity application cluster arrived; no new Claims and Benefits Fraud path.
• Provenance on synthetic identity application cluster after an email that matches a known BEC lure almost exactly is broken; do not pick Remove access or reverse the item or Temporary compensating control yet.

Analysis required

• Trace funds, counterparties, and reversals in synthetic identity application cluster through the window opened by an email that matches a known BEC lure almost exactly.
• Quantify loss if the hold is released before synthetic identity application cluster is complete.
• Test a one-off dispute against the first edge of a scheme around occupancy was misrepresented at.
• For this Fraud Detection Claims and Benefits Fraud file, read synthetic identity application cluster against an email that matches a known BEC lure almost exactly and write the one fact that would move occupancy was misrepresented at for claims special-investigation lead.

Recommendation