| The destination address is the grievance mailbox or the managing director’s office | Opens at L3 at creation, skipping the ladder. Compliance and the principal officer are copied from the first message. | A complaint addressed to the grievance officer is already an escalation. Making it climb from L1 spends the days that matter. |
| The sender’s domain belongs to a partner bank | The bank’s relationship manager is copied on every reply sent on the case. | The partner reads the same answer at the same time as the customer, so nobody has to be briefed about it afterwards. |
| The customer segment is UHNI | Routed to the privilege pod, and the pod lead is notified at half the resolution target rather than at the breach. | On a committed response time, being told at the breach is being told too late to do anything with it. |
| The case came in from the customer portal or the mobile app | Standard ladder — desk on category and segment, then agent on skill, load and shift. | Arriving through self-service is not by itself a reason to treat a case as more urgent, or less, than one that arrived by mail. |
| The same complaint category, from the same customer, three times in thirty days | Opens at L2 rather than L1. | The third time is evidence that the first level did not fix it. Sending it back there wastes a cycle everybody can see coming. |
| The same customer writes again within six hours on the same subject | Merged into the case already open. No new case ID, no second set of clocks, and the agent holding it is notified. | A chasing message is not a new problem. Counting it as one flatters the volume figures and splits the trail in half. |
| One customer writes from two addresses registered to them | Both are recognised as the same customer, and the case inherits the stronger of the two SLA targets. | Which of their own mailboxes somebody happened to use should not decide what they are owed. |
| A bot’s confidence is under the threshold set for that intent | Handed to an agent with the whole transcript attached, and QA is notified that the intent fell through. | A bot that is not sure should not be guessing — and an intent that keeps failing is a training item, not an incident. |
| An outage parent case is open on the affected service | New cases attach to it as children. The incident commander owns the parent, and the children carry its updates. | One fix, one communication, and a count at the end of who was actually affected — rather than forty separate investigations. |