Demo workspaceSample data for Kestrel Pay, a fictional bank. Nothing here is a live customer feed.
Signal workspace
Post claims frozen balances, citing an altered screenshot.
Screenshot presented as an in-app notice about frozen balances does not match any message the product sends, and the typography is inconsistent with it.
Observed content
They have started freezing balances without warning. The screenshot below is what a friend woke up to this morning after a routine transfer, and support has not replied in two days. Move your money out now while you still can, because this is only going to get worse.
Why we flagged it
Attached image uses the product interface but contains typography and copy the application does not produce, and the claim is spreading beyond the original thread.
58
severity
- Relevance
- 86%
- First seen
- 19 hr ago
- Check version
- sentinel-threat-v1
Signs of harm
manipulated-media
Evidence
Each capture is hashed on write. The digest is what makes the record checkable later.
- Screenshotcrawl4ai-screenshot249 KB · 11 Mar 2026, 19:25 UTC
sha256
0b5f9c65aee41da94d33b2d50575ef5e0f32fcc0c778f8639ca3240558d568bf - Screenshotcrawl4ai-screenshot184 KB · 11 Mar 2026, 19:25 UTC
sha256
6f1e9b8ee06ceb8452ae0c3a384f58a3ba562c1973cbde5f7f79d626e1c300b0 - Vision analysisvision-analysis4 KB · 11 Mar 2026, 19:28 UTC
sha256
8afc3506e211f722bbb87a883e890fc3fc87ed303db29e2009de1e802e3ac637
Decision trail
Append-only. Every status change records who and why.
- detectedClaim spreading beyond the origin thread with an attached interface image.Collector · System · 19 hr
- detecteddocumentedVision check flags typography the application does not produce.Priya Raghunathan · Analyst · 19 hr