If we buy papers or contracts from dealers, and the dealers dont do any transactions or take any payments, Do we as a Financial Institution have to require the Dealers to have a written Red Flag policy and procedure? Then, once we buy the contract, our red flag policies and procedures apply, right? Any help is appreciated! Thanks.