Fraud Shield — layered detection, running now
stopped before it left your accounts — this week alone.
Defense in depth
Five layers between fraud and your money
Check Integrity
2 heldPositive Pay match engine — payee, amount, check number, and duplicate presentment screening on every item, teller window included.
49 screened · 2 signals · 24h
ACH Debit Rules
3 heldAllow-lists and debit blocks evaluated before any ACH touches an account. Unknown originators never post.
161 screened · 3 signals · 24h
Behavioral Analytics
ArmedVelocity, amount deviation, and counterparty novelty scoring against 90 days of per-entity baseline.
519 screened · 1 signals · 24h
Credential Defense
ArmedSession fingerprinting, impossible-travel detection, and step-up MFA on sensitive actions.
74 screened · 0 signals · 24h
Network Intelligence
ArmedCross-institution fraud consortium data — known-bad payees, mule accounts, and kited-check patterns.
65 screened · 0 signals · 24h
Wired to FNB Fraud Command
Every escalated signal opens a case on the bank's fraud desk in Fort Wright — a human analyst, on your side, within minutes. 3 cases active now.
868 items screened in the last 24 hours
Detection feed — as it happens
Altered check held at teller window
2h 4m agoCheck #10241 issued to Tri-State Produce Co. for $1,847.20 presented as "Tri-State Produce LLC" for $8,147.20 at Williamson Main, window 2. HOLD placed in real time; exception raised to your queue.
Duplicate presentment stopped in-clearing
5h 2m agoCheck #10198 (Cintas Corporation, $2,214.80) presented a second time. Original cleared on the 28th. Item held automatically — no funds moved.
HELDDUPLICATE_PRESENTMENTrisk 91.0TSRG OperatingUnauthorized ACH debit blocked — payroll account
3h 31m agoWeb-initiated debit of $3,975.00 from an unknown originator ("MERCH SVCS 8802") against TSRG Payroll. Account carries a full debit block; item never posted. Third attempt this week — origin bank contacted.
Login challenge issued — geo anomaly
6h 27m agoSign-in attempt for a Hetzel Holdings user from an unrecognized device 1,400 miles from the last session, 41 minutes later. Step-up MFA required; attempt abandoned.
HELDIMPOSSIBLE_TRAVELrisk 62.5
Screening live activity…
