Fraud
When in PINACLE what are the 2 main things we review for a template modification?
Account number modification & name change
During end of day - what are the rules of cancellations and holds? ...include FX
Anything escalated before 3pm is cancelled @ EOD with no client contact
Anything escalated after 3pm (regardless of client contact) is held over
FX before 5:40 is cancelled - FX after 5:40 that needs escalated is held over
Describe account change rules in reference to IBAN/CLABE
Foreign wire - IBAN starts w/ letters - last 6-8 numbers are the same as previous wires
If a website is blocked, what is the best way to find the information?
Look at your phone (since it is not on the PNC network, the website will not be blocked)
Name 3 of the top red flags for ACH Payroll fraud
Risky ABA
Beneficiary works for the originator
No history
Name 4 risky ACH ABA's
Green Dot
Go Bank
AMEX Bank
Meta Bank
If an account number is off by one digit, what do we do with these payments?
We do not escalate and we say that it is a typo.
What type of payment stays on the blacklist, even after it has been reviewed/released by TMF?
Cryptocurrency
If there is history in host, how do you check if the payment alerted and was escalated? (Direct Transmissions and PINACLE)
Look at date/time coll in host and/or look through CFD mailbox sent.
Explain busy beneficiary
If an originator sends to the same beneficiary multiple times within a short period of time.
Explain different BEC frauds:
CEO
Payroll
Vendor
CEO - when the CEO of the originator company's email is taken over and is requesting payment
Vendor - when our clients are emailed by the "vendor" but it's really the fraudster sending the email
Payroll - portal takeover or student/employees email gets hacked
If we see a client has a template that is import and there are no modifications to the account number - why is that and what do we do with the payment?
we can release these payments as the templates were moved from 1 FI to ours.
On originator/beneficiary website, where can you find the location of the company?
Contact or locations tab
Or scroll all the way to the bottom
How do review a MID and File ID in DART?
File ID:
Commercial ACH Details
MID:
Commercial Party Historical Transactions
If you see a different ABA in ATF than what is showing in RCM, what programs do you search?
Mainframe VBDI
Webview (check image system)
Name at least 3 high risk countries
China
Hong Kong
Great Britain
Hungary
United Kingdom
Mexico
Filter the top line, remove duplicates, and save as an excel docu
If you see a template that says imported w/ no modifications, how would you further review?
If we see a client has a template that is import and there are no modifications to the account number, we can release these payments as the templates were moved from 1 FI to ours
What program should we review for every wire?
STX
What is a red flag for an IVR wire?
Little to no wire history (found in SB or STX)
Long time customer
When there is a new beneficiary that when we review in google/bing does not show exact match of name, what do we do?
ESCALATE - if there is not an exact name match (BONUS: if this is a PINACLE wire and it is either freeform or if the template was just created)
If at EOD we have two TWIs on hold, one is ok to release and one is escalated - what do we do with both wires?
we release the one that is good to go and hold the one we actually escalated
For a Fed Ext, when are we required to stay on for 3rd party?
We are required to stay on any time PINACLE is left open (this does not matter what bank calls for the ext - CFD is required to verify if PINACLE is staying open)
Describe what constitutes a location discrepancy
Including large bank ABA's
When the ABA location does not match the location for the beneficiary lookup.
Large bank ABA's do not count as a discrepancy because they have multiple locations - analysts are required to review large bank main locations and research before sending for SR.
With change in account numbers for international wires, what is something we should be checking for each time?
Country change