Second Victim Tripwire
When two customers report the same scam, freeze the source and warn the rest.
The job
Stop phishing through a compromised partner account before a third customer pays, using the first two victims' words as the tripwire, and hand compliance a regulator-ready record.
The moment
Fifty minutes apart, two guests of the same hotel, writing in different languages, report re-verify your card messages. The card goes red, the similarity view draws a line to two other hotels hit by the same wording last week, the trust and safety lead approves, and 143 upcoming guests get a warning in six languages before a third one pays. The board then counts 14 quiet days at that property.
What it does
- Approve freeze of property messaging
- Warn upcoming guests
- Notify partner manager
- Log case / merge variant
- Send monthly fraud report
What you see
Grey-until-second-report tripwire board with a freeze-and-warn pipeline, a script similarity network, and a monthly regulator-ready report
What it moves
Victims per compromised property after the second report (target zero), time from second report to freeze (minutes), and estimated losses avoided (dollar range)
Built for
- Risk & fraud
- CX leaders & VoC
- QA, training & knowledge
- Compliance, complaints & legal
