Quick access
Account Opening And Kyc Fraud
Identity And Access Abuse
Payments And On Chain Payout Fraud
Platform Smart Contract And Api Integrity
Trading And Market Abuse
Account Opening And Kyc Fraud
Document Pdf Hash Reuse Across Applicants
The same hash appears under multiple unrelated applicants. The table lists clusters that indicate kit-based forgery.
account-opening solution: Blocks onboarding when recycled identity documents appear. See https://www.crossclassify.com/solutions/account-opening/
Spike In Young Or Disposable Email Domains
Very young or disposable domains cluster in recent sign-ups. The dashboard shows a tall bar in the youngest bin.
Bot-attack solution: Filters scripted sign ups using throwaway email domains. See https://www.crossclassify.com/solutions/bot-attack/
Many Signups From Same Device Cluster
Devices distribute evenly across new accounts. The bar chart lacks dominant clusters.
Zero Depth Sessions That Jump Straight To Promo Endpoints
Session depth distribution looks healthy; no zero-depth surge. Bars are balanced across bins.
Deposits From Addresses One Hop From Sanctioned Entities
Inbound addresses have safe proximity metrics. The network shows long paths to any risky nodes.
Reused Withdrawal Address Across Kyc Tiers
Addresses are unique per verified tier. The table shows no cross-tier reuse.
Identity And Access Abuse
New Device And Unfamiliar Region Minutes Before Crypto Withdrawal
Withdrawals follow logins from an unfamiliar region on a new device. The heatmap lights up time-boxed cells right before the withdrawal.
Account-takeover solution: Detects risky logins before withdrawals and triggers protection. See https://www.crossclassify.com/solutions/account-takeover/
Burst Of Failed Logins Followed By Success Then Limit Change
A failure spike converts to success immediately before a limit change. The timeline shows a sharp fail→success flip aligned to the action.
Bot-attack solution: Blocks credential stuffing that leads to takeover and limit abuse. See https://www.crossclassify.com/solutions/bot-attack/
Contact Change Followed By Reset Within 10 Minutes
Profile edits and resets are decoupled in time. The columns show healthy separation with no synchronized peaks.
Behavioral Biometrics Score Drops During Same Session
Typing and navigation rhythm match the enrolled template. Scores remain within normal variance through the session.
Orders From New Asn Using Existing Api Key
Keys execute only from registered ASNs and networks. The table lists approved ranges with no anomalies.
| api_key | asn | unknown_asn |
|---|---|---|
| key_01 | AS13335 | false |
| key_02 | AS16509 | false |
| key_03 | AS15169 | false |
| key_04 | AS14618 | false |
Orders Per Second Bursts Above Bot Policy
Cadence stays below throttle limits. The series moves smoothly within the policy band.
Payments And On Chain Payout Fraud
First Time Withdrawal To Address With Mixer Or Ofac Adjacency
First-time destinations carry low risk with no proximity to sanctions or mixers. The network remains diffuse with no risky neighbors.
Beneficiary Reuse Across Multiple Accounts Or Devices
Each account withdraws to unique beneficiaries. The network shows one-to-one edges without hubs.
Rapid Swaps Across Two Or More Chains Within 30 Minutes
Compressed multi-chain swaps occur within a short window. The timeline stacks rapid hops that suggest obfuscation.
Bot-attack solution: Applies adaptive throttles on automated chain hopping patterns. See https://www.crossclassify.com/solutions/bot-attack/
Bridge Used Immediately After A Risky Session
A bridge transfer fires right after a high-risk login or edit. The table highlights tight coupling between risk and bridge usage.
MFA (multi factor authentication) solution: Challenges risky bridge transfers with step up checks. See https://www.crossclassify.com/solutions/account-takeover/
Avs Or Cvv Mismatch Spike By Bin
A single BIN shows a sharp mismatch surge. The bar towers above baseline indicating testing.
Bot-attack solution: Stops automated card testing on the on ramp. See https://www.crossclassify.com/solutions/bot-attack/
Repeating Micro Auth Waves With Rapid Retries
Authorizations do not cluster or repeat. The line remains steady without saw-tooth bursts.
Platform Smart Contract And Api Integrity
Unusual Permit Or Permit2 Approvals To Unknown Spenders
Long-tail spenders receive fresh approvals unexpectedly. The dashboard surfaces unknown spender IDs.
MFA (multi factor authentication) solution: Requires extra verification before risky approval flows. See https://www.crossclassify.com/solutions/account-takeover/
Rapid Reentrancy Or Oracle Dependent Loops
Bursts of repeated calls appear in short intervals. The graph shows looping around sensitive functions.
Bot-attack solution: Detects rapid automated call bursts to sensitive methods. See https://www.crossclassify.com/solutions/bot-attack/
Withdrawals Routed To High Risk Bridges
Transactions favor low-risk bridges. The table lists green scores across withdrawals.
Mismatched Chain Ids Or Malformed Calldata
Invalid parameter counts are rare and stable. Bars remain short across periods.
Headless Or Script User Agents Dominate Price Or Route Endpoints
Mainstream browsers dominate traffic. Bars for headless agents are minimal.
Quoted Vs Charged Fee Or Price Deltas Show Positive Outliers
Deltas hover near zero within tolerance. The table shows symmetric, minor differences.
Trading And Market Abuse
Repeated Trades Among Same Wallet Triads
Counterparties are diverse with limited repetition. The network lacks dense triangles.
Prices Far Above Floor With Self Funded Flows
Prices cluster near collection floor with external funding. The scatter lacks extreme outliers.
Buy Sell Pairs Bracketing Victim Tx Within Same Block
A buy then sell wraps the victim transaction in one block. The timeline shows clear pre- and post-legs.
Bot-attack solution: Detects toxic automated flow and throttles abusive quote traffic. See https://www.crossclassify.com/solutions/bot-attack/
Abnormally High Slippage Vs Peers
A fat high-slippage tail emerges for targeted accounts. The dashboard highlights sustained outliers.
Behavioral-biometrics solution: Flags coordinated interaction that drives abnormal slippage. See https://www.crossclassify.com/solutions/behavioral-biometrics/
Cancel Trade Ratio Spikes Per Account
Ratios remain inside policy bands. The line stays steady across sessions.
Quote Trade Ratio Outliers
Bars are uniform across accounts and symbols. Distribution sits near target.