Demo data

Investigations

Every case is generated from correlated synthetic transactions — no real accounts are involved.

Account takeover · ACC-40219

INV-2291 · ACC-40219 · detected 19 Aug 18:10 UTC

critical

Five correlated events on a single account escalate from credential stuffing to an $18.4k crypto off-ramp. Signals corroborate across device, geography, authentication and velocity dimensions.

escalatedRisk 94· Auto-assigned · Tier 2
TX-994120TX-994127TX-994141TX-994158TX-994163

Card testing burst · ZenithPay descriptor

INV-2288 · Multiple (42) · detected 19 Aug 15:30 UTC

high

Micro-authorisation pattern consistent with an automated card-testing ring validating stolen PANs before resale.

openRisk 78· K. Reyes
TX-918430TX-918437TX-918444

Velocity anomaly · ACC-62930

INV-2274 · ACC-62930 · detected 19 Aug 11:40 UTC

medium

Nine transactions in 55 minutes against a 1.2/hour baseline. Velocity ceiling applied; no funds lost.

containedRisk 58· T. Ibrahim
TX-918486TX-918493

Impossible travel · ACC-58472

INV-2260 · ACC-58472 · detected 19 Aug 02:20 UTC

high

Session geography jump resolved as a corporate VPN egress change. Closed as a true-negative after analyst review.

closedRisk 71· K. Reyes
TX-918521

Activity timeline

Engine and analyst actions

  1. Campaign detected

    5 events on ACC-40219 fused into coordinated account-takeover campaign INV-2291.

    19 Aug 18:11 UTC · Correlation Engine

  2. Model deployed

    Risk engine v4.2 active — 8 detectors, deterministic weighting.

    19 Aug 16:40 UTC · QuantumGuard