d_ac44a73f
INTERVENE2026-09-07 13:23:01 UTC · partner demo · threshold profile balanced · source live
Reasoning
The strongest coordination pattern in the system is fully present: repeated long idle gaps, tab switching, and a pasted address, which together indicate someone is walking the user through the checkout in real time. It is compounded by a textbook small-win bait escalation (200 to 1000 to 4800) on a three-day-old account and funds leaving within minutes to a brand-new wallet.
Signal vector, as received
| Signal | Value | Contributed |
|---|---|---|
| account_age_days | 3 | — |
| is_first_purchase | true | — |
| amount_eur | 4800 | — |
| amount_vs_median | null | — |
| funding_method | card | — |
| minutes_to_outbound | 6 | yes |
| destination_first_seen_days | 2 | yes |
| destination_type | fresh_eoa | — |
| declined_attempts | 0 | — |
| address_entry_method | pasted | — |
| idle_gaps_over_60s | 4 | yes |
| tab_switches | 3 | yes |
| deposit_escalation | [200, 1000, 4800] | yes |
| kyc_retries | 0 | — |
| merchant_verified | null | — |
Probe transcript
Can you tell me what's going on with this transfer?
“i ve been to make a payment”
Got it - and the wallet address you're paying to, where did that come from? Did someone send it over to you, or did you find it somewhere yourself?
“it was by someone on telegram”
Since that person on Telegram sent you the address, has anything happened that's made this feel more pressing - like a smaller payment that went through fine, or a time limit you've been given?
“yes”
One last thing - has that person on Telegram asked you to keep this between the two of you, or told you what to say if your bank or someone in your family asked what the payment was for?
“yes”
Pattern shown to the user
Taken one at a time, none of these is unusual. Together they form a shape we see often: the payment details arrive from someone you only know through a messaging app, a first smaller amount clears smoothly so the next one feels safe, there is a reason it has to happen now, and you have been given an answer to use if your bank or your family asks. That last part is the piece worth sitting with. Someone who simply wants to be paid does not usually need to coach you on what to tell the people closest to you.