Stop fraud before money moves.
Real-time fraud decisioning for PSPs, wallets, fintechs and banks - with explainable verdicts, velocity rules, device intelligence, sanctions evidence and audit-grade decision records.
Shield decision
Low-latency decisioning target
{
"verdict": "delay",
"risk_score": 87,
"recommended_action": "hold_and_notify",
"rules_triggered": [
"ATO_SEQUENCE",
"NEW_RECIPIENT",
"DEVICE_MISMATCH"
],
"capsule_id": "frd_cap_0391"
}The problem
Fraud policies do not stop fraud. Live decisions do.
Most payment companies already know what suspicious behavior looks like. The problem is execution: rules live in documents, analysts see alerts too late, and auditors still need proof of why a transaction was allowed, delayed or blocked.
Rules stuck in documents
Risk policy lives in spreadsheets and PDFs while payment flows keep moving.
Manual review after damage
Analysts see alerts after funds moved, chargebacks arrived, or payouts cleared.
No evidence trail
Teams need to prove why a transaction was allowed, delayed, held, or blocked.
Fraud and compliance split
Behavioral fraud, sanctions evidence, and merchant risk often sit in separate tools.
What Shield is
A decisioning API for risky financial actions.
Your backend sends a transaction, session or payout event. Shield evaluates behavior, device, velocity, counterparty and compliance signals, then returns a verdict and recommended action.
01
Client App
02
Backend
03
Shield API
04
Verdict + Evidence
05
Backend acts
Where Shield sits
A clean fraud decisioning layer between events and action.
Event Ingestion
Normalize logins, card adds, payments, deposits, withdrawals, payouts, and disputes.
Enrichment
Attach device, counterparty, merchant, payment, and optional compliance context.
Rules Engine
Evaluate explainable policy rules with active, shadow, and disabled modes.
Velocity Store
Track bursts, repeated failures, shared devices, and fast cash-out windows.
Risk Scoring
Produce a deterministic score and level from rules, velocity, profiles, and signals.
Action Engine
Return a backend-ready action instead of leaving engineers to interpret a score.
Evidence Capsule
Store the decision, checked signals, fired rules, timestamps, and hashable record.
Case Management
Route review-worthy decisions to analysts with the evidence needed to act.
Reporting & Webhooks
Send outcomes, route notifications, and preserve feedback for tuning.
Admin Dashboard
Review decisions, timelines, rules, cases, and pilot performance in one place.
Decisions
Return actions, not just scores.
A risk score alone still leaves your engineers to decide what to do. Shield returns a recommended action your backend can execute.
Clear / Allow
Proceed without additional friction.
Monitor
Let the action pass while tagging the customer or merchant for follow-up.
Step-up
Ask for email, phone OTP, 3DS, or KYC refresh before continuing.
Review
Send the event to a human queue with evidence attached.
Delay
Slow down the action while more checks or notifications run.
Hold funds
Keep money from leaving until the risk team clears the case.
Block
Stop a high-confidence risky action before value moves.
Pause payout
Stop merchant payout while payout risk is reviewed.
Use cases
Built for PSP fraud patterns.
Card testing bursts
Signal
Many failed attempts from one device/IP
Decision
block
Evidence
rules + velocity snapshot stored in Evidence Capsule
Account takeover
Signal
New device, new recipient, high-value action
Decision
delay or step-up
Evidence
device and sequence signals preserved
New device withdrawals
Signal
Withdrawal from an unseen device
Decision
phone OTP or hold funds
Evidence
device profile and action history recorded
Rapid deposit-to-withdrawal
Signal
Funds requested shortly after deposit
Decision
hold funds
Evidence
time-window calculation attached
Merchant payout spikes
Signal
Payout or volume surge above baseline
Decision
review or pause payout
Evidence
merchant velocity and trend snapshot stored
Mule recipient patterns
Signal
Repeated recipients across new accounts
Decision
review
Evidence
counterparty linkage snapshot retained
Sanctioned counterparties
Signal
Risky counterparty or compliance signal present
Decision
review or block per policy
Evidence
screening evidence can be attached
Device/IP abuse
Signal
Many users, cards, or failures from shared infrastructure
Decision
monitor, step-up, or block
Evidence
tenant-scoped velocity counters retained
Evidence Capsule
Every decision needs proof.
Shield stores an audit-grade record of what was checked, which rules fired, which signal snapshot was used, what score was produced, and what action was recommended.
Designed for audit review.
Hashable · Immutable · Auditable
Fraud risk and sanctions evidence in one platform.
Because Shield runs on Verifex infrastructure, clients can combine behavior-risk checks with Verifex Core screening modules such as sanctions, PEP, KYB or counterparty screening when needed.
API
Built for backend integration.
POST /v1/shield/decide
{
"event_type": "transfer.created",
"customer_id": "cus_123",
"amount": 100000,
"currency": "AZN",
"recipient_id": "rcp_456",
"device_id": "dev_789",
"ip_hash": "ip_abc",
"timestamp": "2026-06-20T10:30:00Z"
}{
"status": "completed",
"outcome": "delay",
"risk_score": 87,
"recommended_action": "hold_and_notify",
"rules_triggered": [
{
"id": "ATO_SEQUENCE",
"reason": "New device + new recipient + high-value transfer"
}
],
"capsule_id": "frd_cap_0391"
}Shadow mode
Launch safely in shadow mode.
Shield can run silently before enforcement. It calculates what would have happened, without blocking real customers. Risk teams compare recommendations with real chargebacks, disputes and manual review outcomes before enabling hard actions.
Observe
Run Shield beside production flows and collect recommended decisions.
Tune
Compare recommendations with outcomes and calibrate rules before enforcement.
Enforce
Enable low-friction actions first, then hard actions after review.
Hosted, private cloud or local deployment.
Start with hosted Verifex infrastructure, or deploy a dedicated regional/private instance for data-residency requirements.
Deployment model depends on client legal and compliance requirements.
From first event to pilot in weeks.
Build a fraud layer your risk team can explain.
Verifex Shield turns policy into live decisions, live decisions into evidence, and evidence into a pilot your risk and engineering teams can trust.