Assess whether to refer to law enforcement or keep civil from mule-account
August 31, 2026
SITUATION Synthetic-identity detection manager in a fintech that just hit $2B payments volume has one working extract — mule-account payroll deposit pattern — after a new device from a different metro on a 2am login. If mule-account payroll deposit pattern cannot support to refer to law, the only defensible Fraud Detection output is hold.
DECISION Synthetic-identity detection manager in a fintech that just hit $2B payments volume must choose To refer to law enforcement / Keep civil using mule-account payroll deposit pattern after a new device from a different metro on a 2am login.
HYPOTHESES TO TEST 1. The population in mule-account payroll deposit pattern is the one a new device from a different metro on a 2am login named, so To refer to law enforcement follows for this Credit and Identity Fraud file. 2. The population in mule-account payroll deposit pattern is adjacent only to a new device from a different metro on a 2am login; Keep civil is the honest Fraud Detection call. 3. A fintech that just hit $2B payments volume already contained a new device from a different metro on a 2am login before mule-account payroll deposit pattern arrived; no new Credit and Identity Fraud path. 4. Provenance on mule-account payroll deposit pattern after a new device from a different metro on a 2am login is broken; do not pick To refer to law enforcement or Keep civil yet.
ANALYSIS REQUIRED 1. Check mule or round-trip markers in mule-account payroll deposit pattern. 2. Map typology and hold authority synthetic-identity detection manager actually has in a fintech that just hit $2B payments volume. 3. Trace funds, counterparties, and reversals in mule-account payroll deposit pattern through the window opened by a new device from a different metro on a 2am login. 4. For this Fraud Detection Credit and Identity Fraud file, read mule-account payroll deposit pattern against a new device from a different metro on a 2am login and write the one fact that would move to refer to law for synthetic-identity detection manager.
RECOMMENDATION Choose To refer to law enforcement / Keep civil on this Fraud Detection / Credit and Identity Fraud packet (mule-account payroll deposit pattern after a new device from a different metro on a 2am login). The follow-on Credit and Identity Fraud action is what synthetic-identity detection manager does next: implement the option, assign an owner, and log the missing fact.
COMMAND RETURNS - Bottom-line Fraud Detection option on to refer to law, then the evidence in mule-account payroll deposit pattern, then the action for synthetic-identity detection manager - Hypothesis scorecard against mule-account payroll deposit pattern: supported / rejected / untestable - What changes to refer to law if a new device from a different metro on a 2am login is later withdrawn - Named option among To refer to law enforcement, Keep civil and the fact that kills the others
Explore more
More Fraud Detection prompts
- Whether a claims ring exists or is coincidental overlap from mule-account
- Assess whether a payment hold survives a customer complaint after an email
- Assess whether a provider should be suspended pending SIU after a claims
- Assess whether the typology is bust-out, first-party, or third-party (f87593)
- Whether to freeze, monitor, or close the account from BEC wire
Explore related decision areas
See governed multi-model AI on your own prompt
Compare GPT-5, Claude, and Gemini side by side, with human review and a decision record built in.

