Use case 09

Cross-rail fraud movement

Following value as it changes rail.

Partial
TrustGraph · forward trace · 3 hops · 30 min to cash-outsynthetic
  1. syn_victim_c_0_0
    Victim pays a first-time recipient. Identity checks pass; the sender is genuine.
    victim
  2. syn_mule_1
    New account, ten unrelated senders in twenty minutes, almost nothing retained, device shared with two others.
    recipient 69mule 85
  3. syn_wallet_collector
    Collector receives from two mules within minutes and forwards on.
    collector
  4. syn_agent_7
    Cash-out agent unlike its cohort: fast inflow to cash-out, high-risk wallet concentration.
    agent 85investigation priority
  • MULE_PASS_THROUGH
  • MULE_UNRELATED_SENDERS
  • MULE_DORMANT_TO_EXPLOSIVE
  • MULE_SHARED_DEVICE

The problem

Proceeds move from an instant payment to a wallet to an agent to cash, or across a remittance corridor, faster than any single rail's controls can follow.

How Cenvoriq approaches it

Within one institution's mirrored stream, the graph and trace are rail-agnostic. Following value across institutions is what ResponseNet is designed for, and it does not run yet.

Status in the current release

Partial: rail-agnostic within a single institution; cross-institution movement is designed (ResponseNet) but not operating.

Signals the engine uses
  • Rail and channel on every event
  • Forward trace across entities regardless of rail
  • Rapid dispersal and cash-out timing
Relevant components

Deployment

Measured in SHADOW before it touches a payment

A design partner replays its own tokenised history first, then mirrors a live stream. The engine scores this pattern and records the recommendation; the applied action is always allow and the institution’s own systems keep every control.

SHADOW MODE observing
Payment authorityNONE
Transaction impactNONE
IntelligenceACTIVE
Evidence recordRECORDING
Recommended · appliedMANUAL_REVIEW · ALLOW