VIRTICUSDiscuss your situation

What we deliver

Fraud and AML rules: what you get

You find out which rules are earning their place, which are thin, and where fraud can get through untouched — so the fixing effort goes where it pays. A full rule-set review arrives as three documents: a rule scorecard, a coverage map, and a regulator-ready documentation pack, with each control mapped to the regulation it implements. These are the outputs of a rule review. We start with fraud and AML rules, where mandatory reimbursement of authorised push payment (APP) scams has made every rule’s rationale a board-level question.

Our approach

We diagnose, then build the fix with you — and the firm keeps it.

We start with the rules and controls already in place, score each one on six dimensions, from a written rationale to change control, and show where coverage is missing. Closing the gaps is a build we also do. A rule we built is then reviewed by your second line or a third party, not by us.

The output is evidence to hand a regulator, the Financial Ombudsman, or a court: what each control does, why it is justified, and which obligation it implements. We build it the same way every time — reproducible and open to inspection.

The three deliverables

Rule scorecard

Diagnose

A rating for each rule or control: how well it would hold up if challenged

Coverage map

Map

Where controls are strong, thin, or missing across all your rules

Documentation pack

Document

Evidence for a regulator, each control mapped to the regulation it implements

Consistent by design

Every pack is produced the same way — repeatable, traceable, and explainable step by step.

Assessment

Score each rule, map the coverage, map it to the regulation

Step 1

Score each rule

Every dimension evidencedEvidenced
Some evidence missingPartly evidenced
No record to showCannot attest

Step 2

Map the coverage

Risks coveredCovered
Risks partly coveredFlagged
Risks not coveredGap

Step 3

Map to regulation

Each control

The obligation it implements

Each gap

The exposure it creates

Each pack

Regulator-ready record

We adjust the depth to the number of rules and the regulations that apply.

Where it applies

One method, four ways to use it

We start with fraud and AML rules. The same scorecard, coverage map, and documentation pack also stand behind the decisions handed to automated and AI systems.

Credit models, legal and forensic analysis, marketing analytics, and automation have their own deliverables, on their own pages: Credit Risk, Legal & Forensic, Marketing Analytics, and AI & Automation.

01

Fraud and AML rule review

Scope

  • Review the live fraud and AML rule set
  • Score each rule on its logic, rationale and evidence
  • Map coverage against APP-fraud and AML risk

Output

  • Rule scorecard
  • Coverage map
  • Documentation pack
  • Regulation mapping

02

PSR APP-fraud readiness

Scope

  • Test rules against reimbursement scenarios
  • Identify thin or unjustified thresholds
  • Show the proportionality of each control

Output

  • Reimbursement-scenario review
  • Gap and exposure summary
  • Defensible rationale per rule
  • A record for the Ombudsman

03

Governance

Scope

  • Map decisions made by automated or AI systems
  • Score how well each decision can be explained
  • Define and document the controls around it

Output

  • Decision register
  • Decision scorecard
  • Documented controls
  • Regulation mapping

04

Independent assurance

Scope

  • Support internal risk and compliance teams
  • Review rules and controls we did not build
  • Provide independent, repeatable analysis

Output

  • Assurance report
  • Control review
  • Expert review

What is different about this

Every decision can be traced back to why it was made

Controls that keep working when they are questioned, across all four financial-crime domains, for UK FCA-regulated firms that must be able to show why for every decision.

Reasoned, every time

Every rule is scored the same way, so every score and every line of the pack can be traced and explained: evidence prepared for regulatory, audit or litigation scrutiny.

Mapped to regulation

Each control is tied to the obligation it implements, so the documentation pack reads as evidence rather than as a generic policy.

The firm keeps the fix

We diagnose the gaps, build the fix with you, and document the controls; the rules, rationale and record stay in-house to run and defend.

Get started

See where the fraud rules stand

Answer a short set of questions about the fraud and AML rules. The result is an early read on how well they would hold up under review; leave your details and we name the areas behind it.