Within 48 hours, you receive — for every case — the decision our engine would have made, the exact signals that fired, the matched fraud pattern, and an investigator-ready narrative. Most fraud teams use it to pressure-test whether "explainable" vendors actually explain anything.
Up to 10 historical events in a simple CSV or JSON — ideally a mix of confirmed fraud, confirmed clean, and the disputed cases your team argued about. Blank fields are fine.
Replace real identifiers with tokens (ACC-A, DEV-1). No names, numbers, PAN/Aadhaar, VPAs, or IPs — the exercise stays cleanly outside DPDP personal-data scope. Email it to hello@zarelva.com.
Per case: decision · risk score · fired signals with evidence · matched named pattern · investigator narrative. Plus a summary of where we agreed with your known outcomes — and where we diverged, and why.
Nothing decorative — each column below corresponds to a signal the engine actually evaluates. Event types: login · session_start · password_reset · payout_change · beneficiary_add · withdrawal
| Field | What it answers |
|---|---|
| is_new_device | Device never seen on this account before (≈7 days)? |
| emulator_detected / hooking_detected | Emulator, VM, or Frida/Xposed-style instrumentation present? |
| remote_control_app | AnyDesk / TeamViewer-class app on the device? |
| datacenter_asn / proxy_vpn / impossible_travel | Hosting IP, VPN/proxy, or physically impossible location jump? |
| recent_password_reset / mfa_or_recovery_changed | Credentials or recovery paths changed shortly before the event? |
| recent_payout_change | Payout method or beneficiary changed just before a withdrawal? |
| seconds_since_login / rushed_sensitive_action | How fast did they race from login to the sensitive action? |
| velocity_spike / time_to_cashout_seconds | Withdrawal bursts, or funds in-and-out within minutes? |
| shared_payout_cluster / device_account_count | Shared payout destinations, or one device across many accounts? |
| known_outcome | Your ground truth — fraud, clean, or disputed — so we can score ourselves against it. |
Founding pilot partners: the full pilot fee is credited against a first-year deployment if you proceed. The deliverables are yours either way.