Whether a provider should be suspended pending SIU from BEC wire

Situation

The desk packet is BEC wire instruction-change email thread after a new device from a different metro on a 2am login. Payments-risk officer in a mortgage correspondent channel has to name Remove access or reverse the item or Temporary compensating control for this Fraud Detection Credit and Identity Fraud file.

Decision

Payments-risk officer in a mortgage correspondent channel must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using BEC wire instruction-change email thread after a new device from a different metro on a 2am login.

Hypotheses to test

• A new device from a different metro on a 2am login is noise around an already-controlled Credit and Identity Fraud process in a mortgage correspondent channel, given BEC wire instruction-change email thread.
• A new device from a different metro on a 2am login is the event in BEC wire instruction-change email thread that forces Remove access or reverse the item for payments-risk officer under Fraud Detection.
• BEC wire instruction-change email thread shows a one-file miss after a new device from a different metro on a 2am login, not a Credit and Identity Fraud program failure.
• BEC wire instruction-change email thread cannot decide a provider should be yet after a new device from a different metro on a 2am login; hold is the only Fraud Detection close a mortgage correspondent channel can defend.

Analysis required

• Map typology and hold authority payments-risk officer actually has in a mortgage correspondent channel.
• Trace funds, counterparties, and reversals in BEC wire instruction-change email thread through the window opened by a new device from a different metro on a 2am login.
• Quantify loss if the hold is released before BEC wire instruction-change email thread is complete.
• For this Fraud Detection Credit and Identity Fraud file, read BEC wire instruction-change email thread against a new device from a different metro on a 2am login and write the one fact that would move a provider should be for payments-risk officer.

Recommendation

A mortgage correspondent channel needs a named owner on a provider should be. Assign payments-risk officer to execute Remove access or reverse the item when BEC wire instruction-change email thread after a new device from a different metro on a 2am login is complete, or Temporary compensating control when the Credit and Identity Fraud packet still lacks the discriminator in BEC wire instruction-change email thread.