I resolved the issue.
I put FIM into place on the root folder where the file is before it is assessed and moved, and I also put it on the Invalid folder. I used a test file to see which accounts moved and touch the file if it is read invalid. It was the System account and our Transport account. Then I counted how many time they both touched it. I created an alert that said "If this server reads that these 2 accounts touch this file X amount of time, send email to ABC@DEF.GHI"
Tested it and it works great.