Case Management

Audit Test Alert

Mule activity detected: MG-DEMO-ACCT-003

ScamGuard — deepfake_impersonation

ScamGuard — mule_recruitment

ScamGuard Recovery — elderly_vulnerable

ScamGuard — elderly_vulnerable

ScamGuard Recovery — business_email_compromise

ScamGuard — business_email_compromise

ScamGuard — remote_access_scam

Smurfing Network Detected — C010 Recruiter Node

ScamGuard — romance_scam

ScamGuard Recovery — investment_scam

ScamGuard — investment_scam

ScamGuard Recovery — bank_impersonation

ScamGuard — bank_impersonation

Fraud signal: sim swap — DEMO-FRAUD-CUST-001

Mule activity detected: MG-DEMO-ACCT-003

Transaction HOLD: MG-DEMO-TXN-

Sanctions hit — John Doe (exact 100%) on outbound wire 90k

Suspicious wire-out — structuring pattern

Mule investigation — structuring wire-out

Mule investigation — structuring wire-out

Mule investigation — structuring wire-out

Mule investigation — structuring wire-out

Suspicious wire-out — structuring

Mule investigation — structuring wire-out

Mule investigation — structuring wire-out

Mule investigation — structuring wire-out

Mule investigation — structuring wire-out

Mule investigation — structuring wire-out

KYC Risk Review - Douglas, Gwendolyn (CRITICAL)

Sleeper account activation — dormant→high velocity

Authorized push payment fraud — impersonation

ACCEPT — LegalHold target case

ScamGuard Recovery — deepfake_impersonation

Mule investigation — structuring wire-out

Trade-based laundering — invoice overvaluation

Layering via rapid transfer-out to offshore corridor

Structuring pattern — sub-threshold cash deposits

Denver Mule Ring — coordinated pass-through

KYC enhanced due diligence — PEP source of wealth

Sanctions hit — OFAC SDN match on counterparty

Sanctions rescreen — entity profile change trigger

Insider collusion — account opening anomalies

Card-not-present fraud spike — compromised credentials

Dedup ring — shared device fingerprint across 4 onboards