*Sec 1-Page 129 2

A mortgage company originates residential mortgage loans and maintains borrower accounts after closing. During a compliance audit, management argues that the company’s Identity Theft Prevention Program is unnecessary because identity theft rarely occurs. Which statement is most accurate?

A loan officer receives a mortgage application containing identification documents that appear altered and inconsistent with information contained in the credit report. How should this situation be viewed under the Red Flags Rule?

A mortgage lender creates an Identity Theft Prevention Program but fails to establish procedures for identifying suspicious activity during the loan application process. Which program requirement is missing?

A mortgage processor notices that a Social Security number submitted on an application belongs to a deceased individual. What should the lender’s Identity Theft Prevention Program require?

A regional mortgage company copies the identity theft program of a national bank without considering its own operations, staffing, or loan volume. Why could this create a compliance issue?

A mortgage company identifies several new fraud schemes involving synthetic identities but never updates its Identity Theft Prevention Program. What requirement is being violated?

A mortgage lender adopts an Identity Theft Prevention Program, but senior management never reviews or approves it. Which requirement has likely been overlooked?

A mortgage company assigns responsibility for the Red Flags Program entirely to a temporary employee with no management oversight. Why could this be problematic?

A lender has a written Identity Theft Prevention Program but never trains loan officers, processors, or underwriters. During an examination, what concern is most likely to be raised?

A mortgage lender outsources portions of the application process to a third-party service provider. What responsibility does the lender retain under the Red Flags Rule?