Horror Escape Room

Can you save the funds

fRAUD Escape room

START

Introduction

"You are trapped in this house, doomed to wander it until it regains all its memories.To help it find them, you must first overcome all the challenges and collect the missing objects in your inventory.Explore the house and try not to get trapped yourself…. GOOD LUCK!

Explore the house

Inventory

You found a secret message

♪♬ø

Remember these notes and play them on the piano in the correct order

01

#Hint ONE

This is a PWM client - Faith making the payment for a Europe tour package.

02

...Keep playing

#Hint TWO

This is a a third-party payment to Hayes' Travels initiated via PUSH.

03

...One more

#Hint THREE

Another client, Eunice, just paid to Hays Travel last week.

Start over...

You found a new item for your inventory

Continue exploring the house

Inventory

♪♬ø

01

Based on Actimize UI, payment is conducted through CHAPS and this is the first time client is paying to Hayes' Travels. CVC is indicated in field 72. Is this sufficient?

Yes

No

Check client's usual activity

02

What other checks should you conduct?

Check beneficiary's online presence

Reach out to PWM reps

03

From client's past activity, it seems like Faith has been going on Europe trips over the past two years. But has never engage with Hayes' Travels before.

Seems align, good to release

Let's check more

Reach out to PWM

03

You could only find information on Hays Travel on open source search: We are the UK’s largest independent travel agent and the nation’s favourite. We provide excellent value, service, and choice in holidays across land and sea. With more than 40 years’ experience and 470 high street branches, we are proud to be the UK’s largest independent travel agent.

Check client's usual activity

Seems legit Good to Release

04

You could only find information on Hays Travel on open source search: We are the UK’s largest independent travel agent and the nation’s favourite. We provide excellent value, service, and choice in holidays across land and sea. With more than 40 years’ experience and 470 high street branches, we are proud to be the UK’s largest independent travel agent.

Seems legit Good to Release

Suspicious Gotta reach out

04

From client's past activity, it seems like Faith has been going on Europe trips over the past two years. But has never engage with Hayes' Travels before.

Seems align, good to release

Reach out to PWM

This is not correct...

Find the key to continue

Continue exploring the house

Inventory

♪♬ø

Use the magnifying glass to search for the code and then insert it into the typewriter

224

Enter the secret code

Code

01

To proceed with releasing this payment, the Reps must:

Call the Client using their CAIS approved phone number on file to clarify doubts.

Get their MD for risk-acceptance.

Call the beneficiary to confirm details.

What warrants additional due dilligence when reviewing this payment?

This is a PWM Chaps payment

No callback was done

That's right!

The United Kingdom has seen a huge increase in APP fraud, hence the implementation of the APP Fraud Reimbursement Claim. Since PSPs are not obligated to provide reimbursement if the victim did exhibit gross negligence regarding the intervention offered, extra due deligience should be carried out to protect the firm from liability.

Not Quite...

Payment was instructed via PUSH hence call back is not necessary. Instead, additional review should be conducted given that this is a PWM CHAPS payment. The United Kingdom has seen a huge increase in APP fraud, hence the implementation of the APP Fraud Reimbursement Claim. Since PSPs are not obligated to provide reimbursement if the victim did exhibit gross negligence regarding the intervention offered, extra due deligience should be carried out to protect the firm from liability.

What are some of the risk presented?

Lack of beneficiary's online presence

CVC was in field 72 instead of field 70

That's right!

The beneficiary in Faith's payment is "Hayes' Travels". Based on previous client, Eunice's, transaction, the beneficiary was Hays Travels and this is the only entity found on open source search. It should raise red flags if we are unable to find beneficiary's online presence that matches the payment purpose. Minor discrepancies/spelling errors in name could also be potential fradulent concerns.

Not Quite...

CVC syntax is acceptable if it is present in field 72. However, mismatched of beneficiary's name against online presence (i.e. official website) are considered signs of potential fraud. The beneficiary in Faith's payment is "Hayes' Travels".Based on previous client, Eunice's, transaction, the beneficiary was Hays Travels and this is the only entity found on open source search.

A briefcase has appeared...

It's locked...look in the inventory for something to open it

Congratulations

You have recovered all the memories of the ghost! Now it can finally rest and you can escape from the house!

Are you sure you want to exit?

You will lose all progress made so far...

Exit

Back

Oh, no. You failed...

Inventory

♪♬ø

Inventory

Inventory

Inventory

♪♬ø

Inventory

♪♬ø

Inventory

♪♬ø

Inventory

Inventory

Inventory

♪♬ø

Inventory

Inventory

Inventory

Inventory

Inventory

Inventory

♪♬ø

Inventory

♪♬ø

Inventory

♪♬ø

Inventory

♪♬ø

Inventory