Findings
Evidence-backed anomalies surfaced by the risk engine, ranked for triage.
Chargeback filed after bonus activity
A chargeback of 500 USD was filed after the account claimed promotional bonuses — combined deposit fraud and promo abuse.
Negative wallet balance after TX-001320
Wallet balance fell to -105.94 USD after a purchase. Balances should never go negative.
Negative wallet balance after TX-001066
Wallet balance fell to -99.64 USD after a purchase. Balances should never go negative.
Negative wallet balance after TX-001068
Wallet balance fell to -117.12 USD after a withdrawal. Balances should never go negative.
Negative wallet balance after TX-001156
Wallet balance fell to -115.00 USD after a purchase. Balances should never go negative.
Negative wallet balance after TX-001158
Wallet balance fell to -180.71 USD after a purchase. Balances should never go negative.
Negative wallet balance after TX-001160
Wallet balance fell to -194.37 USD after a withdrawal. Balances should never go negative.
Negative wallet balance after TX-001260
Wallet balance fell to -27.25 USD after a withdrawal. Balances should never go negative.
Negative wallet balance after TX-001326
Wallet balance fell to -8.44 USD after a withdrawal. Balances should never go negative.
Negative wallet balance after TX-001286
Wallet balance fell to -27.92 USD after a withdrawal. Balances should never go negative.
Negative wallet balance after TX-001070
Wallet balance fell to -141.71 USD after a withdrawal. Balances should never go negative.
Negative wallet balance after TX-001288
Wallet balance fell to -38.23 USD after a withdrawal. Balances should never go negative.
Negative wallet balance after TX-001444
Wallet balance fell to -380.00 USD after a withdrawal. Balances should never go negative.
Balance mismatch on TX-001406
Expected post-balance 1836.80 USD but ledger recorded 2096.80 (drift 260.00).
4200 USD deposit withdrawn in 8 min
A high-value deposit of 4200 USD was withdrawn within 8 minutes with little intervening activity — a layering pattern.
Withdrawal 4 min after bonus claim
Account withdrew 420 USD just 4 minutes after claiming a bonus of 150 USD.
Duplicate transaction ID TX-DUP-77310 seen 2×
Transaction ID TX-DUP-77310 was ingested 2 times across 1 account(s). Duplicate IDs indicate replayed or double-counted transactions.
4 failed withdrawal attempts
Account recorded 4 failed withdrawal attempts, which can indicate limit probing or compromised credentials.
3 accounts share device dev_SHARED_4…
Device fingerprint dev_SHARED_4f9c2 is associated with 3 distinct accounts, indicating multi-accounting or collusion.