Skip to workspace
Search workspace
⌘ K
System live
Demo workspace
Sample data for Kestrel Pay, a fictional bank. Nothing here is a live customer feed.
Exit demo
Start your workspace
Signal workspace
Cases
Ranked by severity. Confirmation is a human step, and escalation needs an officer.
5 awaiting review
Impersonation
2
Phishing site
2
Scam and fraud
2
Fake app
2
Asset misuse
2
Misinformation
2
Severity
Case
Threat
Status
Surface
Age
94
Lookalike account runs a "cashback activation" flow off-platform.
KP-4821
·
Profile reproduces the official avatar and bio, claims to act for the brand, and solicits full card credentials through an unofficial channel.
Impersonation
escalated
TikTok
11 min
91
Unofficial wallet app requests SMS and contact permissions.
KP-4816
·
Publisher is not Kestrel Financial Ltd, store imagery is copied from the official listing, and the requested permissions would expose one-time passcodes.
Fake app
confirmed
App stores
38 min
88
Lookalike domain reproduces the sign-in page.
KP-4809
·
Page is a byte-level copy of the official sign-in template, the domain was registered four days ago, and the form action targets an unrelated host.
Phishing site
documented
🌍
Open web
2 hr
85
Promoted post routes to a credential and identity form.
KP-4752
·
Promoted post impersonates the brand and links to a form requesting government identification and full card details on a confusable domain.
Phishing site
confirmed
X (Twitter)
2 days
82
Reply-guy support account intercepts complaint threads.
KP-4803
·
Handle differs from the official account by one underscore, replies exclusively to brand complaints, and requests card credentials in direct messages.
Impersonation
escalated
X (Twitter)
4 hr
79
Giveaway page charges a release fee to claim a prize.
KP-4798
·
Page uses the brand wordmark and card artwork, has no ownership link to the verified page, and conditions a promised payout on an upfront transfer.
Scam and fraud
documented
Facebook
6 hr
76
Video promotes a fabricated balance "glitch" method.
KP-4790
·
Video names the brand, describes a payout mechanism that does not exist, and routes viewers to a credential-collecting third-party page.
Scam and fraud
detected
YouTube
9 hr
72
Copycat wallet listing withdrawn by its publisher.
KP-4758
·
Title incorporated the registered brand name under an unrelated publisher; the listing is no longer retrievable from the store.
Fake app
closed
App stores
2 days
63
Reseller runs paid ads on the brand wordmark and card art.
KP-4784
·
Paid placement reproduces the registered wordmark and card artwork and describes a partner relationship with no supporting agreement.
Asset misuse
detected
Instagram
14 hr
58
Post claims frozen balances, citing an altered screenshot.
KP-4779
·
Attached image uses the product interface but contains typography and copy the application does not produce, and the claim is spreading beyond the original thread.
Misinformation
documented
Reddit
19 hr
51
Aggregator republishes a resolved outage as current.
KP-4771
·
Report describes an incident that closed in January, but the page carries no date and appears in current search results.
Misinformation
dismissed
🌍
Open web
1 day
47
Creator uses brand audio and logo in an unrelated tips video.
KP-4765
·
Licensed campaign audio and the brand logo appear outside an approved placement, but the creator makes no claim of affiliation.
Asset misuse
resolved
TikTok
1 day