Assess whether to refer to law enforcement or keep civil (eaad74)

SITUATION BEC wire instruction-change email thread arrived with a 400% utilization jump in 11 days for synthetic-identity detection manager. That is a Fraud Detection Payments Fraud decision on to refer to law in a mortgage correspondent channel.

DECISION Synthetic-identity detection manager in a mortgage correspondent channel must choose To refer to law enforcement / Keep civil using BEC wire instruction-change email thread after a 400% utilization jump in 11 days.

HYPOTHESES TO TEST 1. A 400% utilization jump in 11 days is noise around an already-controlled Payments Fraud process in a mortgage correspondent channel, given BEC wire instruction-change email thread. 2. A 400% utilization jump in 11 days is the event in BEC wire instruction-change email thread that forces To refer to law enforcement for synthetic-identity detection manager under Fraud Detection. 3. BEC wire instruction-change email thread shows a one-file miss after a 400% utilization jump in 11 days, not a Payments Fraud program failure. 4. BEC wire instruction-change email thread cannot decide to refer to law yet after a 400% utilization jump in 11 days; hold is the only Fraud Detection close a mortgage correspondent channel can defend.

ANALYSIS REQUIRED 1. Quantify loss if the hold is released before BEC wire instruction-change email thread is complete. 2. Test a one-off dispute against the first edge of a scheme around to refer to law. 3. Check mule or round-trip markers in BEC wire instruction-change email thread. 4. For this Fraud Detection Payments Fraud file, read BEC wire instruction-change email thread against a 400% utilization jump in 11 days and write the one fact that would move to refer to law for synthetic-identity detection manager.

RECOMMENDATION Choose To refer to law enforcement / Keep civil on this Fraud Detection / Payments Fraud packet (BEC wire instruction-change email thread after a 400% utilization jump in 11 days). Lead with the Fraud Detection option BEC wire instruction-change email thread can support after a 400% utilization jump in 11 days, then the two facts that force it, then the Monday action for synthetic-identity detection manager in a mortgage correspondent channel.

COMMAND RETURNS - Bottom-line Fraud Detection option on to refer to law, then the evidence in BEC wire instruction-change email thread, then the action for synthetic-identity detection manager - Hypothesis scorecard against BEC wire instruction-change email thread: supported / rejected / untestable - Missing page in BEC wire instruction-change email thread after a 400% utilization jump in 11 days, if any - Regulatory or exam hook Payments Fraud would cite