Could a payment have been made by a family member or associate?¶

Yes. Partners, relatives, carers, employees or associates may have formal, informal or unauthorised access to another person's account, instrument or endpoint.

Shared access does not define permission¶

Credentials, cards and authentication routes may be accessible within homes or businesses. Authority for routine bills or delegated business activity does not automatically cover a disputed transfer. Shared access also does not prove the registered holder lacked knowledge.

Identify user, scope and benefit¶

Examine joint and authorised-user records, additional cards, endpoints, sessions, communications and household or business context. Compare event time with possession, work patterns, CCTV, messages and authentication access.

Establish who created the beneficiary, approved the payment, received alerts and benefited. Report ownership, permitted access, actual use and knowledge separately.