Correspondent bank payment investigation workflow testing checks that a bank can receive, assess, route, update and close enquiries about cross-border payments accurately and with an auditable record. It verifies how an investigation is matched to a payment, how information moves between internal systems and correspondent banks, and how the case behaves when replies are delayed, incomplete or inconsistent.
Map the investigation lifecycle
Start by documenting the workflow states and the events that move a case between them. A typical flow may include enquiry received, payment matched, investigation assigned, external response pending, information requested, response received and case closed. The institution's own procedures determine the actual states, ownership rules and closure criteria.
Identify the channels and systems involved. An enquiry may arrive through an operations interface, an application programming interface (API), a message channel or a service desk. Case management may then call a payment hub, a tracking service, a screening system or a correspondent bank. Record which system owns each field and which event is expected to update it.
Define matching rules using the fields available in the business process. These can include a payment reference, amount, currency, value date, ordering customer, beneficiary or a Unique End-to-end Transaction Reference (UETR), where the payment supports one. Specify how the workflow handles missing fields, duplicate references and multiple candidate payments. A weak match can attach a case to the wrong transfer and lead to incorrect information being sent externally.
Prepare test conditions and assertions
Use controlled test data for each payment route and case type. Include a straightforward match, a payment with a missing reference, a duplicate enquiry and a case where two payments share similar details. Keep counterparties and response behaviour configurable in the test environment. Confirm that test data represents the formats and constraints accepted by connected systems.
For each scenario, define observable outcomes at the user interface and service boundary. Check the case status, assigned queue, linked payment identifier, outbound request, received response and audit events. Verify that data such as amount, currency and beneficiary details remains consistent across the case system and payment records. Where messages are asynchronous, assert eventual state changes against an agreed timeout and inspect retry or error handling when no response arrives.
Include access and control checks. A user without the required role should not be able to view restricted payment details, send an external enquiry or close a case. Check that changes to case ownership, status and investigation notes identify the actor and time, and that failed actions leave the case in a valid state.
Exercise failure paths and boundaries
Test replies that arrive late, arrive more than once, contain only some requested fields or refer to a different payment. The workflow should handle these according to defined rules, retain the original enquiry and avoid silently overwriting confirmed payment data. Simulate a timeout followed by a late response to check that retries do not create duplicate cases or conflicting outbound requests.
Also test operational exceptions: an external service is unavailable, a response cannot be parsed, the payment is not found, or the case is assigned to a queue with no eligible handler. Verify that the case remains visible for investigation, that errors are recorded, and that recovery does not lose previous actions. For statuses, assert the meaning and permitted transitions rather than relying on a label alone. A payment enquiry is separate from a payment repair or recall; test the hand-off when investigation results require one of those processes.
Worked example: delayed correspondent response
Create a cross-border payment with a known reference and UETR, if supported, then submit an enquiry asking for its current status. Assert that the case links to the intended payment and enters the configured waiting state. Have the correspondent simulator return no response initially, then deliver a valid response after the first timeout.
Check that the case records the timeout and any permitted retry, accepts the late response once, updates the investigation outcome and preserves the original payment details. Submit the same response again and verify that it does not create a second case update or duplicate outbound action. Finally, check the case history and any downstream notification against the expected result.
Verify across systems
Use integration tests to validate message mapping, identifiers, authentication, error responses and event handling between the case system and connected services. Use end-to-end tests for a smaller set of business-critical paths, including case intake, matching, external response and closure. Run regression tests when routing rules, payment data mappings, queue configuration or correspondent connectivity changes. Compare results across systems using stable correlation identifiers, and retain test evidence for both successful and failed transitions.
Investigation workflows depend on external systems and operational configuration, so a passing interface test alone cannot establish that the full process works. Verify environment configuration, test user permissions, reference data and simulated counterparties before execution. When a test fails, distinguish a workflow defect from a stale environment, invalid test data or an unavailable dependency before raising a product defect.
Frequently asked questions
How should an investigation workflow represent a payment that cannot be found?
It should record that the payment was not matched and keep the case available for review or additional information, according to the bank's defined process. Tests should confirm that the workflow does not attach the enquiry to a similar payment without satisfying its matching rules.
Can correspondent bank investigation tests run without a live external bank?
Yes. A simulator or service virtualisation can return controlled acknowledgements, delays, errors and investigation responses. Validate the integration contract and mapping with the simulator, then use an approved connectivity test where live counterparties and environments are available.
How should test teams protect payment data used in investigation scenarios?
Use synthetic or appropriately masked data in non-production environments, restrict access to test records and avoid copying sensitive production details into logs or evidence. Check that investigation notes, message payloads and diagnostic output follow the organisation's data-handling controls.
What is the difference between payment investigation testing and payment repair testing?
Investigation testing checks how an enquiry is assessed, tracked and answered. Payment repair testing checks how a payment with invalid or incomplete processing data is amended or routed for correction. An investigation may lead to a repair, so test the hand-off and permissions between the workflows.
