CIPA Fraud Detection Techniques & Reporting 4 — Questions and Answers
Question 1: Structuring, also known as 'smurfing,' involves:
- Using multiple identities to open accounts at the same bank
- Breaking up large cash transactions into smaller ones to avoid CTR reporting thresholds (Correct answer)
- Creating fake invoices to launder money through businesses
- Using stolen cards at multiple ATMs simultaneously
Correct answer: Breaking up large cash transactions into smaller ones to avoid CTR reporting thresholds
Structuring is the illegal practice of breaking transactions into amounts below the $10,000 CTR threshold to avoid regulatory reporting.
Question 2: In identity fraud triage, which victim should typically receive immediate priority assistance?
- A victim with the highest dollar loss
- An elderly victim or someone with limited English proficiency who cannot navigate the recovery process independently (Correct answer)
- A victim whose fraud was committed by a family member
- A repeat fraud victim
Correct answer: An elderly victim or someone with limited English proficiency who cannot navigate the recovery process independently
Vulnerable populations such as elderly or limited-English individuals face greater barriers to self-recovery and require prioritized, guided assistance.
Question 3: Which document is most critical for a fraud victim to file first to establish a legal record of identity theft with law enforcement?
- A FinCEN report
- An FTC Identity Theft Report (Correct answer)
- A Suspicious Activity Report
- A credit dispute letter
Correct answer: An FTC Identity Theft Report
An FTC Identity Theft Report creates an official record recognized by creditors, credit bureaus, and law enforcement to support recovery efforts.
Question 4: Link analysis in fraud detection is used to:
- Identify URLs used in phishing campaigns
- Map relationships between entities such as accounts, devices, and individuals to uncover fraud networks (Correct answer)
- Analyze hyperlinks on dark web marketplaces
- Track outbound links on fraudulent websites
Correct answer: Map relationships between entities such as accounts, devices, and individuals to uncover fraud networks
Link analysis visualizes connections between data points to reveal fraud rings, shared identifiers, and coordinated criminal networks.
Question 5: A key indicator that a business email compromise (BEC) scam is occurring is when:
- An employee receives a mass marketing email
- An executive's email is spoofed or compromised to request urgent wire transfers to a new account (Correct answer)
- A vendor changes their payment portal without notice
- An email contains spelling errors and a suspicious attachment
Correct answer: An executive's email is spoofed or compromised to request urgent wire transfers to a new account
BEC attacks typically impersonate executives to create urgency around fund transfers, bypassing normal verification procedures.
Question 6: Under the Gramm-Leach-Bliley Act (GLBA), financial institutions are required to notify customers of a security breach involving their personal information primarily through:
- Filing a public press release within 48 hours
- Notification requirements set by their primary federal regulator (Correct answer)
- Automatic alerts sent to the FTC
- Direct notification to all affected customers via certified mail only
Correct answer: Notification requirements set by their primary federal regulator
GLBA-covered institutions must follow their primary federal regulator's notification guidelines, which generally require timely customer notification after a breach.
Question 7: Which fraud detection approach uses pre-written 'if-then' logic to block transactions based on known fraud patterns?
- Neural network modeling
- Rule-based systems (Correct answer)
- Unsupervised clustering
- Federated learning
Correct answer: Rule-based systems
Rule-based systems apply deterministic logic (e.g., 'block transactions over $X from country Y') to filter known fraud patterns without machine learning.
CIPA Fraud Detection Techniques & Reporting 4
Structuring, also known as 'smurfing,' involves: