Preparing for the FACT Act: Identity Theft Flags
In the South, cold winter winds are called Yankee Clippers. In the Northern states they are called Canadian Cold Fronts. Canadians blame the arctic. No matter what you call it or whom you blame, the FACT Act is blowing in fast. It's time to get ready. And a warm parka won't do the trick. There's a lot of work to be done.
Let's start with preparation for identity theft flags. As with many of the FACT Act provisions, the identity theft flags will generate new responsibilities in parts of the organization that have not typically carried such key compliance responsibilities. We have compared the FACT Act to Y2K because the provisions reach all through the organization and give central roles to jobs and functions that are not typically leads when it comes to compliance.
Instead, the FACT Act will turn some of our procedures upside down and call for new ones. Information coming from credit bureaus regarding identity theft flags must be routed to several places within the institution - and acted upon. Information within the institution regarding identity theft must similarly be reported to or shared with other creditors and the credit bureaus.
Preparing for the identity theft flags necessarily involves mapping some new functions and designing methods for compliance. Compliance attention tends to be concentrated on product sales. The taking of applications, making of loans, and opening accounts is the first focus of any compliance program, whether we are talking about OFAC or Truth in Lending.
Unlike product sales or delivery, the fraud alert involves less of the lobby and more of the back room. It will involve taking in information from several sources and dispersing information to others. To design and manage a compliance program, you will need to map a process that may not have been mapped before in this context. And you will need to provide or help develop procedures. Here are some steps to help you get started.
- You must be equipped to receive consumer calls alleging fraud and theft.
- Some staff must be qualified to evaluate incoming consumer calls and to initiate appropriate action.
- The customer's first call may not provide all the information you need. Establish a protocol for collecting additional information. This means forms to collect information, forms for dispersing information as required, and timing guidelines.
- Someone has to place the fraud alert flag on the customer's accounts - all of them. The responsible person or function must be able to receive information about flags from the consumer direct alerts and from credit bureau alerts.
- After placing the fraud alert, there must be a system for maintaining that alert for 90 days or for the extended 7-year period if the consumer extends the alert. In addition, you will need a process - both responsibility and authority - to remove the flag when the time requirement is expired or when the consumer requests it.
- Establish a system for transmitting fraud alerts to other creditors and to the credit bureau while the alert is in place.
- You'll need new account rules when flags are in place for that customer. This means procedures, training, and a method for dealing with exceptions. Evaluating the bona fides of the customer gives new dimension to CIP.
- Operating systems must take account of flags to prevent credit line increases, issuance of new cards, and changes of address. This means working with systems people.
- Finally, CIP should play a very important role in identity theft procedures. You need to know not only that the customer is legitimate, but you need to know enough to determine that the customer is who they claim to be - and not the thief. Review your CIP with this purpose in mind.
Copyright © 2004 Compliance Action. Originally appeared in Compliance Action, Vol. 9, No. 10, 10/04
Privacy Policy Disclaimer Recommend This Site ! Contact Us
BankersOnline is a free service made possible by the generous support of our advertisers and sponsors. Advertisers and sponsors are not responsible for site content. Please help us keep BankersOnline FREE to all banking professionals. Support our advertisers and sponsors by clicking through to learn more about their products and services.
|
|