Signal workspace
Account copies the official profile and bio, then moves anyone who engages onto a private number that asks for the full card number and the code on the back.
Observed content
Cashback activation is now open for verified members only. Message the rewards desk on WhatsApp with your card number and the three digits on the back, and the team will release your balance within the hour. Activation closes at midnight and unclaimed balances are forfeited.
Classifier assessment
Profile reproduces the official avatar and bio, claims to act for the brand, and solicits full card credentials through an unofficial channel.
severity
Harm signals
Each capture is hashed on write. The digest is what makes the record checkable later.
sha25641b980708fe336d6668a26af89ff0e64f9bf068b75c88894864f75de0af48a21
sha2564697d065adc339f237c25a4b195cc913aa8c7a5fc9920b2ca1e26fa4784e8bb3
sha256b034edf54b722af713f5b41b1453b13aa39c1b65e76fbc1da951ec8dbe0e7c98
sentinel-dossier-v1
Executive summary
A TikTok account operating as @kestrelpay.rewards reproduces the official avatar and bio and directs viewers to a private messaging number where it requests full card numbers and CVV codes. The account reached about 184,000 views in eleven minutes and is still live.
Evidence cited
Reporting route
TikTok impersonation report, submitted through the brand portal by an officer. A human should verify the account is still live at the point of submission.
Recommended action
Report the account, and publish a short advisory on the verified profile stating that Kestrel Pay never requests card details over messaging.
Sentinely provides evidence and recommendations only. The recipient decides and executes any report, enforcement, or legal action.
Append-only. Every status change records who and why.