You don't have the information that triggers an investigation yet. She does have to identify the transactions she is challenging or questioning. You do, however, have enough to go ahead and shut down her debit card to prevent any further unauthorized transactions.
_________________________
John S. Burnett
BankersOnline.com
Fighting for Compliance since 1976
Bankers' Threads User #8