Managing Fraud Reviews

⚡ What Is Fraud Reviews?

Fraud Reviews is a section in your account that helps you monitor potential signs of fraud, such as the same bank account being used across multiple employee profiles at your company. Your account automatically reviews employee banking details in the background, detecting and flagging this pattern as it occurs, so you can look into it and decide whether it's fraud or can be cleared.

Once you've made a decision on a flagged case, PUSH's Compliance team reviews the same case separately on their end. Once you've both weighed in, the case is marked Cleared or Confirmed Fraud.

🔎 Why Use Fraud Reviews?

Here are some common reasons teams check Fraud Reviews:

• Surface risk you might otherwise miss: Automatically detect a shared bank account across employee profiles that can be difficult to catch manually or in a report.

• Add another layer of review: Get an extra review of account activity on top of your own internal checks.

• Build a clearer audit trail: Document your decisions and notes for every case, providing fraud investigators with a centralized record rather than scattered notes or memory.

• Cut down on repeat flags: Set up approvals for known, legitimate situations, like domestic partners sharing a bank account, so the same pattern isn't flagged again while PUSH still tracks every occurrence.

🔐 Access Required

Fraud Reviews is available on all subscription plans.

📌 | Note: Information displayed in Fraud Reviews depends on how you use PUSH. Shared Bank Account detection depends on employees' banking details being recorded in their profile for Direct Deposit. If this does not apply (e.g., all employees are paid via company cheque), you may not see anything on the Fraud Reviews page.

Who can access Fraud Reviews?

• Super Administrators: Full access to view flagged cases, review case details, add notes, be notified, and make decisions in the Fraud Reviews page.

Who does not have access to Fraud Reviews?

• Team Administrators: Do not have access to the Fraud Reviews page or to receive notifications. If a case needs review and you don't have access, reach out to a Super Administrator on your account.

📋 Topics covered in this article:

• Understanding Shared Bank Account Detection

• Accessing Fraud Reviews

• Filtering Fraud Reviews

• Marking a Case as Fraud or Not Fraud

• Setting Up Fraud Review Notifications

• Frequently Asked Questions About Fraud Reviews

📚 Related articles:

• Getting Help & Contacting Support

• How To Update An Employee's Payment Method

• How To Stop Payment On Direct Deposit

• How To Update an Employee's Payment Method After Payroll Is Approved

• How To Update Employee Profile Editing Settings

• Understanding Payroll Processing Deadlines

Understanding Shared Bank Account Detection 

Fraud Reviews flags employees who share the same bank account on file for direct deposit. This is recorded in an employee profile under the Payroll Payment Method section. 

This can happen innocently, for example, someone mistypes a digit while entering an account number, and it happens to match another employee's account already on file, or two partners who share a household account want both of their paychecks deposited into the same place. 

But it can also be a sign of something more serious, like someone redirecting a coworker's pay, or a "ghost employee's" pay, into their own account. For example, an employee's bank account details are updated to someone else's right before payroll is processed, then changed back afterward. Unless something prompts you to go looking, like an employee reporting they weren't paid, this kind of change can be hard to catch in the moment. 

Fraud Reviews creates a case as soon as it detects two employee profiles with the same bank account on file, even if only briefly, making it easier to catch.

📌 | Note: If a case for that exact match is still marked 'Needs My Action', updating the account again won't create a duplicate — it stays as one case until it's resolved.

To better understand who can make changes to direct deposit information in an employee profile, see below:

• Super Administrators: Full access to view and update banking details on any employee profile.
• Team Administrators: Can view or update banking details if the View/Update Employee Banking Info permission under Employee Setup is enabled, and they have the relevant Employee Groups permissions: Update Employee Information, View Employee Information, and View Employee List.
• Employees: Can update their own banking details if Employee Profile Editing: Banking Info is enabled under Employee Settings.

Accessing Fraud Reviews

To review flagged cases, Administrators can navigate to the Fraud Reviews page, and they'll see a history of all cases. We recommend checking this page periodically on your own, especially before payroll is processed or fully approved, to ensure nothing has been flagged that could affect an employee's proper payment.

1. In the top right corner of the page, click the Company Name.
2. In the drop-down menu, click Company Setup.
3. From the left-hand navigation bar, select Fraud Reviews.
   💡 | Tip: The Fraud Reviews tab displays a live badge with the number of cases pending your review.
4. When the page opens, you'll see a summary of totals for cases that are Pending Your Review, Cleared, and Confirmed Fraud, followed by a list of all flagged cases matching your current filters.

5. Each case in the list includes the following:

   Column	What It Shows
   Detection	Marking the case type as Shared Bank Account.
   Severity	How urgent the case is: High, Medium, or Low.
   Detected	How long ago the case was flagged (e.g., 5 minutes ago, 3 hours ago or 1 day ago).
   Your Decision	Whether a decision been marked on the case so far decision on the case: Needs My Action, Cleared, or Confirmed Fraud.

6. To adjust the list of cases (e.g., focus on cases that require your action), see the Filtering Fraud Reviews section below for more information. 

7. To action on a case, click Review next to the specific case, and a panel will open. See the Marking a Case as Fraud or Not Fraud section below for next steps.

📌 | Note: If nothing appears in the list, this could mean there's no information to show based on the features you use, no active cases based on your current filters, or no cases currently flagged on your account.

Filtering Fraud Reviews

To help you adjust what cases to focus on, there are a variety of filter options to help you understand and organize what's still awaiting action and what's already been flagged. 

1. Once you are in the Fraud Reviews page, under each of the following filters, select the relevant option to customize the cases that appear if applicable:
   1. Under Detection Type, click the drop-down menu and select either: All Types, Shared Bank Account, or Large Net Pay.
   2. Under Severity, click the drop-down menu and select either Any, High, Medium, or Low. 
   3. Under Status, click the drop-down menu and select either Needs My Action, Cleared, Confirmed Fraud, or All. 
   4. Under Date Range, click the drop-down menu and select either Last 7 Days, Last 30 Days, Last 90 Days, or All Time.
   5. Once selected, the list of cases on the page will automatically update!
   6. To clear your filters, click Reset on the right side of the filter bar.
      📌 | Note: Filters aren't saved; they reset to default once you leave the Fraud Reviews page.

Marking a Case as Fraud or Not Fraud

Opening a case shows you specific details about the flagged employees, such as their names and the last 4 digits of the shared bank account, along with a link to their profiles so you can look into them further. 

You don't have to make a decision the moment you open a case; you can review the details, do some investigating (like checking with the employees involved), and come back to it later when you're ready to mark it.

1. Once you are in the Fraud Reviews page, locate the specific case and click Reviews to open it.
2. A panel on the right side will appear with the case's details:
3. The panel lists each impacted employee by name, along with the last four digits of the shared bank account (for example, TD Bank ****1234). Click View Profile next to an employee's name to open their profile in a new tab and make any applicable changes.
4. Under Notes, input any comments or reasons you wish to document for your decision to mark this case as fraud or not. This is viewable by other Super Administrators and our PUSH Compliance Team. We recommend being detailed to eliminate follow-up questions. 
5. (Optional) Set up Auto-Approve to avoid this exact group of employees being flagged again in the future: click Enable Auto-Approve.
   💡 | Tip: Auto-Approve can be enabled or disabled at any time from within the case. You don't need to set it up when you mark a case.
6. Once done, select one of the following to mark the case as either:
   1. Looks Good - Not Fraud: if you've confirmed the case is legitimate.
   2. Confirm As Fraud: if you believe this is fraudulent, and you want this case marked as such.
7. Once done, the page will refresh, and the case's status will update based on the selection. 

Setting Up Fraud Review Notifications

There are two ways to stay aware of new cases in Fraud Reviews. You can set up an alarm to notify specific Super Administrators by email whenever a case is created or resolved, based on severity. Or you can monitor the Fraud Reviews tab, which displays a badge with a live count of cases pending review.

💡 | Tip: We still recommend checking the Fraud Reviews page every now and then, especially if you've only set up alerts for specific severity (e.g. high) cases.

See below for the steps to set up a Fraud Reviews Alarm:

1. In the top right corner of the page, click the Company Name.
2. In the drop-down menu, click Company Setup.
3. From the left-hand navigation bar, select Alarms.
4. The Alarms page will load and list your existing alarms. 
5. Under Create a New Alarm, next to Alarm Type, click the drop-down menu and select Fraud Review.
6. Under Detection Types, click the drop-down menu and select Shared Bank Account. 
7. Under Severity, click the drop-down menu and select which case severities should trigger a notification: High, Medium, or Low.
   📌 | Note: You can only select one severity per alarm. If you want to be notified for all severities, you'll need to set up a separate alarm for each one.
   💡 | Tip: Consider splitting notifications across different team members by severity, so each person knows which cases to focus on and which to escalate.
8. Under Recipients, click the drop-down menu and select which Super Administrators should receive the notification.
   📌 | Note: Team Administrators can't be selected as recipients, since they don't have access to Fraud Reviews.
9. Once done, click Submit.
10. The page will refresh, and the newly created alarm will be listed at the bottom of the page! 

Once the Fraud Reviews Alarm has been set up, the relevant recipients will begin receiving email notifications whenever a new case matching the selected severity is created, and again when that case is resolved — either as Cleared or Confirmed Fraud.

The email includes:

In addition to email notifications, the Fraud Reviews tab under Company Setup displays a badge with the number of cases pending your review, similar to the badges on the Clock Approvals and Shift Approvals pages.

📌 | Note: Cases that are automatically approved through Auto-Approve don't trigger any notifications. Meaning no creation email, no resolution email, and no badge count, as they are marked for approval.  

Frequently Asked Questions About Fraud Reviews

Have questions about reviewing flagged cases? Whether you're wondering what happens after you confirm fraud, why a case still needs your action, or why you can't see anything on the page at all, this section provides quick answers to help you use Fraud Reviews with confidence.

Q: Does marking a case as fraud stop payroll or change anything in my account? 
A: No. Marking a case as fraud gives you visibility into a potential duplicate bank account, but it doesn't change any information in your account or stop a payment from being sent to an employee. 

If action is needed, such as updating an employee's bank account details or requesting that a payroll be unapproved for correction, you'll still follow your standard procedures. Fraud Reviews just makes it easier to catch this pattern and decide what to do next.

Q: Will I be notified when a case is created or resolved? 
A: Yes. You can set up an alarm to notify specific Super Administrators by email whenever a case is created and resolved (Cleared or Confirmed Fraud), based on the severity level you choose.  See the Setting Up Fraud Review Notifications section above for instructions.

📌 | Note: Cases that are automatically approved through Auto-Approve don't trigger any notifications. Meaning no creation email, no resolution email, and no badge count, as they are marked for approval.

Q: How can I pinpoint who made a change that led to a duplicate bank account? 
A: Every employee profile has a History of Changes section at the bottom of the page that lists changes made to that profile, along with the date, timestamp, and the name of the admin (or the employee, if they have permission) who made the change. 

Checking the History section on each impacted employee's profile can help you identify who made the update and, if applicable, follow up with that team member.

Q: Can I change my decision after submitting it? 
A: Yes, as long as the case is still marked Needs My Action. Once both sides have submitted a decision, the case is resolved and cannot be changed.

Q: Why don't I see anything on my Fraud Reviews page? 
A: This depends on whether you record direct deposit details for your employees. If your employees are paid by company cheque, you don't have direct deposit details on file, or none of your employees currently share the same bank account, there may be nothing to show.

Q: Can I view Fraud Reviews across all locations in my organization? 
A: No. Fraud Reviews only shows cases for the location or account you're currently in; it doesn't show cases across multiple locations or accounts at this time. 

Q: Can employees at different accounts or locations be flagged as part of the same case? 
A: No. Detection is based on the account or location you're currently in, so a case will only flag matches within that same account or location.

Q: What does the platform review to create a case? 
A: The platform compares the bank account details on file across all employee profiles at your company to check for matches.

Q: Will I see duplicate cases if the same accounts keep matching? 
A: If a case for that exact match is still marked with the status Needs My Action, the platform won't create a new one; it stays as a single case until it's resolved. If the case is not fraud, we recommend setting up Auto-Approve in the case so future alerts for the exact group of employees won't create a new case. That said, a new case can still be created after the fact — for example, if a different employee is added to the account, since that's a new match to review.

Q: Is every occurrence still recorded even when Auto-Approve clears a case automatically? 
A: Yes. Every occurrence is recorded, even when Auto-Approve clears it automatically; it'll just be marked as cleared instead of requiring a Super Administrator to mark it. So you'll always have a complete history to refer back to.

Q: Can Team Administrators access Fraud Reviews? 
A: No. Access to Fraud Reviews is currently limited to Super Administrators. If you need a case reviewed and don't have access, reach out to a Super Administrator on your account.

Additional Information

Need further help? Refer to our Getting Help & Contacting Support article for the latest support options and ways to connect with our team.