The entity must take reasonable steps to prevent another person committing a scam relating to, connected with or using its regulated service. Reasonable steps depend on the entity's size, the services, the consumer base, the scam risks, and, as the primary consideration, compliance with the sector code. Acting only on tips from others is not enough. A code may require identifying consumers at higher risk and giving them scam information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.