‹ All decisionslive
d_1b726887
INTERVENE2026-08-10 08:00:17 UTC · partner demo · threshold profile balanced · source live
Reasoning
The core real-time coaching triad is present — repeated long idle gaps, tab switching, and a pasted destination address — meaning someone is very likely walking the user through the checkout live. It is paired with a textbook small-win bait escalation (200 to 1000 to 4800) into a brand-new one-off wallet that empties within minutes, which matches an investment scam shape.
idle_gaps_over_60s + tab_switches + pasted addressdeposit_escalation [200, 1000, 4800]fresh_eoa destination first seen 2 days agominutes_to_outbound 6 on a 3-day-old account
Signal vector, as received
| Signal | Value | Contributed |
|---|---|---|
| account_age_days | 3 | — |
| is_first_purchase | true | — |
| amount_eur | 4800 | — |
| amount_vs_median | null | — |
| funding_method | card | — |
| minutes_to_outbound | 6 | yes |
| destination_first_seen_days | 2 | — |
| destination_type | fresh_eoa | — |
| declined_attempts | 0 | — |
| address_entry_method | pasted | — |
| idle_gaps_over_60s | 4 | yes |
| tab_switches | 3 | yes |
| deposit_escalation | [200, 1000, 4800] | yes |
| kyc_retries | 0 | — |
| merchant_verified | null | — |
Amount
€4,800
User outcome
Not recorded
Model
claude-opus-5
Prompt fingerprint
pattern:b3378cbeb7e8 probe:8f9e2db8c06c verdict:2aaed03b60a9