First, you can't delay (until the customer files a police report) your investigation of the claim that the "gentleman" made concerning the June -- August debit card transactions. You can, however, refuse to treat them as unauthorized electronic fund transfers (UEFTs) based on the definition of UEFTs in the regulation at 1005.2(m). Your customer gave the live-in the card and PIN for use previously and had not notified the bank that the companion's use was to be terminated.
You can require the police report in connection with the apparently forged checks. You can also require your customer to provide you with an affidavit that those checks are forged. I'd also look at those checks and see whether your customer is too late in notifying you about them.
You can also shut the customer and his account down and bring charges against his companion if the bank sustains any loss. The customer has made it clear he can't manage his account and isn't capable of keeping it from being used by his companion. This situation shows every sign of being one that won't go away on its own.
If the customer is elderly, you may have an elder financial abuse case to report.
_________________________
John S. Burnett
BankersOnline.com
Fighting for Compliance since 1976
Bankers' Threads User #8