A registered agent receives an email from a client requesting a withdrawal of $15,000 from their investment account. The email address appears to be correct, but the tone and specific phrasing in the email seem slightly off compared to the client's usual communication style. The agent attempts to call the client at their registered phone number but receives no answer. What is the most appropriate next action for the agent to take to prevent potential fraud?
- ASend a reply email asking for confirmation of the request.
- BAttempt to contact the client through an alternative, pre-verified method (e.g., mail to registered address, second registered phone number) or wait for client to return call.
- CInform the client that email requests for withdrawals are not accepted and require a written letter.
- DProcess the withdrawal immediately to avoid delaying the client's request.
Show answer & explanationAnswer & explanation
Correct answer: B. Attempt to contact the client through an alternative, pre-verified method (e.g., mail to registered address, second registered phone number) or wait for client to return call.
Given the suspicious nature of the email and the inability to reach the client via the primary contact, the agent must use an alternative, pre-verified communication method to confirm the client's identity and the legitimacy of the request. Processing it or asking for email confirmation would be risky.
Why the other options are wrong
- A. Replying to the same potentially compromised email address for confirmation is ineffective and unsafe.
- C. While some firms might require written requests, rejecting an email request without attempting verification first is not the most appropriate immediate action when fraud is suspected.
- D. This is highly risky and could lead to unauthorized withdrawal and fraud.
Client Identity Verification
The process of confirming a client's identity and the authenticity of their requests, especially for sensitive transactions like withdrawals, to prevent fraud, identity theft, and unauthorized access to accounts.
- Crucial for preventing fraud.
- Use multiple, pre-verified contact methods.
- Be suspicious of unusual requests or communication styles.
Memory trick: When in doubt, shout out and check their ID!