A registered representative (RR) receives an email from a client requesting a significant sum be transferred from their investment account to an unfamiliar overseas bank account. The email contains grammatical errors and a sense of urgency uncharacteristic of the client's usual communications. What is the RR's most appropriate immediate action?
- AProcess the transfer request immediately to avoid delaying the client's urgent need.
- BNotify the firm's compliance department and freeze the client's account pending investigation.
- CCall the client using a previously verified phone number to confirm the legitimacy of the request.
- DReply to the email requesting additional identity verification documents from the client.
Show answer & explanationAnswer & explanation
Correct answer: C. Call the client using a previously verified phone number to confirm the legitimacy of the request.
This scenario strongly suggests a potential phishing or impersonation attempt. The most appropriate immediate action is to verify the request directly with the client using a known, reliable contact method (like a verified phone number), rather than communicating through the potentially compromised channel.
Why the other options are wrong
- A. Processing without verification would be a severe breach of security and potentially lead to client loss.
- B. While notifying compliance is necessary, freezing the account is typically a later step after attempting direct verification and if suspicion persists. The immediate priority is verification.
- D. Replying to the suspicious email or requesting documents via email could further compromise the client's security if the email account is indeed compromised.
Suspicious Activity (Client Requests)
Registered representatives must be vigilant for suspicious client requests, particularly those involving unusual transfers or changes in communication patterns. Verification through a known, independent contact method is crucial to prevent fraud and financial exploitation.
- Be alert for unusual requests or communications.
- Verify suspicious requests via a known, independent contact method.
- Do not use the potentially compromised communication channel.
- Report suspicious activity to compliance.
Memory trick: See a Phish, Don't Click, Just Call and Quickly Check.