I work with a lot of fraud teams at a FinTech company, and we have the same exact problem. If you give out too much information around what caused the enforcement action, people are able to figure out the exact formula used to trigger a risk check, and will float right under it.

It’s a really hard problem.