Skip to main view
Search workspace
⌘ K
System live
PR
Demo workspace
Sample data for Kestrel Pay, a fictional bank. Nothing here is a live customer feed.
Exit demo
Start your workspace
Signal workspace
Cases
Ranked by severity. Confirmation is a human step, and escalation needs an officer.
5 awaiting review
Impersonation
2
Phishing site
2
Scam and fraud
2
Fake app
2
Asset misuse
2
Misinformation
2
Severity
Case
Threat
Status
Surface
Assignee
Age
94
Lookalike account runs a "cashback activation" flow off-platform.
KP-4821
·
Profile reproduces the official avatar and bio, claims to act for the brand, and solicits full card credentials through an unofficial channel.
Impersonation
escalated
TikTok
—
11 min
91
Unofficial wallet app requests SMS and contact permissions.
KP-4816
·
Publisher is not Kestrel Financial Ltd, store imagery is copied from the official listing, and the requested permissions would expose one-time passcodes.
Fake app
confirmed
App stores
—
38 min
88
Lookalike domain reproduces the sign-in page.
KP-4809
·
Page is a byte-level copy of the official sign-in template, the domain was registered four days ago, and the form action targets an unrelated host.
Phishing site
documented
Open web
—
2 hr
85
Promoted post routes to a credential and identity form.
KP-4752
·
Promoted post impersonates the brand and links to a form requesting government identification and full card details on a confusable domain.
Phishing site
confirmed
X (Twitter)
—
2 days
82
Reply-guy support account intercepts complaint threads.
KP-4803
·
Handle differs from the official account by one underscore, replies exclusively to brand complaints, and requests card credentials in direct messages.
Impersonation
escalated
X (Twitter)
—
4 hr
79
Giveaway page charges a release fee to claim a prize.
KP-4798
·
Page uses the brand wordmark and card artwork, has no ownership link to the verified page, and conditions a promised payout on an upfront transfer.
Scam and fraud
documented
Facebook
—
6 hr
76
Video promotes a fabricated balance "glitch" method.
KP-4790
·
Video names the brand, describes a payout mechanism that does not exist, and routes viewers to a credential-collecting third-party page.
Scam and fraud
detected
YouTube
—
9 hr
72
Copycat wallet listing withdrawn by its publisher.
KP-4758
·
Title incorporated the registered brand name under an unrelated publisher; the listing is no longer retrievable from the store.
Fake app
closed
App stores
—
2 days
63
Reseller runs paid ads on the brand wordmark and card art.
KP-4784
·
Paid placement reproduces the registered wordmark and card artwork and describes a partner relationship with no supporting agreement.
Asset misuse
detected
Instagram
—
14 hr
58
Post claims frozen balances, citing an altered screenshot.
KP-4779
·
Attached image uses the product interface but contains typography and copy the application does not produce, and the claim is spreading beyond the original thread.
Misinformation
documented
Reddit
—
19 hr
51
Aggregator republishes a resolved outage as current.
KP-4771
·
Report describes an incident that closed in January, but the page carries no date and appears in current search results.
Misinformation
dismissed
Open web
—
1 day
47
Creator uses brand audio and logo in an unrelated tips video.
KP-4765
·
Licensed campaign audio and the brand logo appear outside an approved placement, but the creator makes no claim of affiliation.
Asset misuse
resolved
TikTok
—
1 day