Use case 09
Cross-rail fraud movement
Following value as it changes rail.
Partial
TrustGraph · forward trace · 3 hops · 30 min to cash-outsynthetic
- syn_victim_c_0_0Victim pays a first-time recipient. Identity checks pass; the sender is genuine.victim
- syn_mule_1New account, ten unrelated senders in twenty minutes, almost nothing retained, device shared with two others.recipient 69mule 85
- syn_wallet_collectorCollector receives from two mules within minutes and forwards on.collector
- syn_agent_7Cash-out agent unlike its cohort: fast inflow to cash-out, high-risk wallet concentration.agent 85investigation priority
- MULE_PASS_THROUGH
- MULE_UNRELATED_SENDERS
- MULE_DORMANT_TO_EXPLOSIVE
- MULE_SHARED_DEVICE
The problem
Proceeds move from an instant payment to a wallet to an agent to cash, or across a remittance corridor, faster than any single rail's controls can follow.
How Cenvoriq approaches it
Within one institution's mirrored stream, the graph and trace are rail-agnostic. Following value across institutions is what ResponseNet is designed for, and it does not run yet.
Status in the current release
Partial: rail-agnostic within a single institution; cross-institution movement is designed (ResponseNet) but not operating.
Signals the engine uses
- Rail and channel on every event
- Forward trace across entities regardless of rail
- Rapid dispersal and cash-out timing
Relevant components
Deployment
Measured in SHADOW before it touches a payment
A design partner replays its own tokenised history first, then mirrors a live stream. The engine scores this pattern and records the recommendation; the applied action is always allow and the institution’s own systems keep every control.
SHADOW MODE observing
Payment authorityNONE
Transaction impactNONE
IntelligenceACTIVE
Evidence recordRECORDING
Recommended · appliedMANUAL_REVIEW · ALLOW