Assess whether to refer to law enforcement or keep civil (cc5f10)

SITUATION ACH return-reason code R10 spike arrived with a 400% utilization jump in 11 days for synthetic-identity detection manager. That is a Fraud Detection Payments Fraud decision on to refer to law in a mortgage correspondent channel.

DECISION Synthetic-identity detection manager in a mortgage correspondent channel must choose To refer to law enforcement / Keep civil using ACH return-reason code R10 spike after a 400% utilization jump in 11 days.

HYPOTHESES TO TEST 1. A 400% utilization jump in 11 days is noise around an already-controlled Payments Fraud process in a mortgage correspondent channel, given ACH return-reason code R10 spike. 2. A 400% utilization jump in 11 days is the event in ACH return-reason code R10 spike that forces To refer to law enforcement for synthetic-identity detection manager under Fraud Detection. 3. ACH return-reason code R10 spike shows a one-file miss after a 400% utilization jump in 11 days, not a Payments Fraud program failure. 4. ACH return-reason code R10 spike cannot decide to refer to law yet after a 400% utilization jump in 11 days; hold is the only Fraud Detection close a mortgage correspondent channel can defend.

ANALYSIS REQUIRED 1. Quantify loss if the hold is released before ACH return-reason code R10 spike is complete. 2. Test a one-off dispute against the first edge of a scheme around to refer to law. 3. Check mule or round-trip markers in ACH return-reason code R10 spike. 4. For this Fraud Detection Payments Fraud file, read ACH return-reason code R10 spike against a 400% utilization jump in 11 days and write the one fact that would move to refer to law for synthetic-identity detection manager.

RECOMMENDATION Choose To refer to law enforcement / Keep civil on this Fraud Detection / Payments Fraud packet (ACH return-reason code R10 spike after a 400% utilization jump in 11 days). If ACH return-reason code R10 spike cannot force a Fraud Detection label under Payments Fraud, stop. If ACH return-reason code R10 spike after a 400% utilization jump in 11 days cannot support To refer to law enforcement versus Keep civil on this Fraud Detection Payments Fraud close, synthetic-identity detection manager must do not infer a control or scheme beyond the transaction and entitlement evidence.

COMMAND RETURNS - Bottom-line Fraud Detection option on to refer to law, then the evidence in ACH return-reason code R10 spike, then the action for synthetic-identity detection manager - Hypothesis scorecard against ACH return-reason code R10 spike: supported / rejected / untestable - Named option among To refer to law enforcement, Keep civil and the fact that kills the others - Owner and next date for synthetic-identity detection manager in a mortgage correspondent channel