SYNTHETIC TEST DOCUMENT — FICTIONAL COMPANY — NO CUSTOMER DATA Lantern Auto Finance LLC Identity Theft Prevention / Red Flags Program — DRAFT Document ID: LAF-ID-004 | Version 0.3 | Drafted: 2026-09-12 Owner: Finance and Insurance Manager | Approval status: Not yet approved 1. Business and covered accounts Lantern is a fictional automobile dealer that offers vehicle financing through retail installment contracts. The company treats consumer financing accounts with multiple payments as covered accounts. The Finance and Insurance Manager is supposed to review new account types each year, but no completed covered-account risk assessment is attached to this draft. 2. Red flags to watch for Employees opening a covered account should look for inconsistent names or addresses, altered identification documents, a credit bureau fraud alert, an address discrepancy, a customer statement that an account is unfamiliar, or a sudden request to redirect account notices. The employee records the flag in the case log without copying a full identity document into the log. 3. Detection procedure At application intake, the finance employee compares the applicant's identification and application details and reviews any alert returned by the identity verification service. During account servicing, staff review returned mail and customer complaints. The draft does not specify how to verify a caller asking to change an address, and the current checklist has no field for recording which alert was resolved. 4. Response procedure When a red flag appears, the employee pauses account opening or the requested change and escalates the case to the Finance and Insurance Manager. The manager may contact the customer through a previously verified channel, request additional evidence, decline the transaction, or contact law enforcement when appropriate. The manager records the decision and reason. The draft contains no deadline for escalation or case closure. 5. Service providers and training The credit application platform is a service provider involved in covered accounts. The current contract has not been reviewed for red flag detection or reporting duties. New finance staff receive verbal training; there is no training attendance log or refresher schedule. 6. Program administration The Finance and Insurance Manager plans to report identity theft trends to senior management annually. The board or an appropriate senior employee has not approved this draft. No annual report, program effectiveness review, or update record exists yet. TEST INTENT: A partially written Red Flags program. It names relevant warning signs and responses while explicitly leaving approval, documented risk assessment, service-provider oversight, training evidence, and review timing open.