Assess whether a SAR narrative is supportable today (5ea7f4)

Situation

A mule account receiving 14 unrelated payrolls in a week put BEC wire instruction-change email thread in front of wire-desk escalation officer in a P&C carrier's auto-body network. This Fraud Detection / Credit and Identity Fraud close is a SAR narrative is from BEC wire instruction-change email thread, and the live options are Remove access or reverse the item, Temporary compensating control, Approve a documented exception.

Decision

Wire-desk escalation officer in a P&C carrier's auto-body network must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using BEC wire instruction-change email thread after a mule account receiving 14 unrelated payrolls in a week.

Hypotheses to test

• The population in BEC wire instruction-change email thread is the one a mule account receiving 14 unrelated payrolls in a week named, so Remove access or reverse the item follows for this Credit and Identity Fraud file.
• The population in BEC wire instruction-change email thread is adjacent only to a mule account receiving 14 unrelated payrolls in a week; Temporary compensating control is the honest Fraud Detection call.
• A P&C carrier's auto-body network already contained a mule account receiving 14 unrelated payrolls in a week before BEC wire instruction-change email thread arrived; no new Credit and Identity Fraud path.
• Provenance on BEC wire instruction-change email thread after a mule account receiving 14 unrelated payrolls in a week is broken; do not pick Remove access or reverse the item or Temporary compensating control yet.

Analysis required

• Check mule or round-trip markers in BEC wire instruction-change email thread.
• Map typology and hold authority wire-desk escalation officer actually has in a P&C carrier's auto-body network.
• Trace funds, counterparties, and reversals in BEC wire instruction-change email thread through the window opened by a mule account receiving 14 unrelated payrolls in a week.
• For this Fraud Detection Credit and Identity Fraud file, read BEC wire instruction-change email thread against a mule account receiving 14 unrelated payrolls in a week and write the one fact that would move a SAR narrative is for wire-desk escalation officer.

Recommendation