Investigation Workbench
Fraud Analyst
Admin
639262724773
MSISDN • Prepaid
Risk Score
94.3
Financial Exposure
₱11,340
OODA Stage
Orient
QUICK ACTIONS
Evidence Chain
8 items-
MULTI-VECTOR: 2 fraud layers triggered (impossible_travel, sim_box)Primary detection signal
-
Network graph anomaly: out-degree 133, in-degree 6Degree ratio: 22.2:1 — SIM box indicator
-
3 impossible travel events detectedNCR → Region VII in 59 min
-
Cross-ref: 1 complaint (device issue)Complaint ID: CMP-2025-8847
-
Low transcript sentiment (0.29)Possible social engineering victim
Detection Signals
| Isolation Forest Score | 93.2 |
| Z-Score Max | 17.98 |
| IQR Flags | 4 |
| Velocity Violations | 0 |
| Network Anomaly | YES |
| Cross-Layer Count | 2 |
FRAUD VECTORS TRIGGERED
impossible_travel
sim_box
Recommended Actions
Block SIM
Immediately suspend SIM to prevent further fraudulent activity
24hr Cooling
Apply cooling period on all high-value transactions
Contact Subscriber
Verify account ownership via registered email
CDR Summary
1,847
Total Records
133
Outgoing
6
Incoming
Call Pattern
Recent CDR Records
| DateTime | Type | B-Party | Duration | Site | Location |
|---|---|---|---|---|---|
| 2025-12-25 15:57:41 | Voice Out | 639064092125 | 45s | BGC-001 | NCR |
| 2025-12-25 15:55:22 | Voice Out | 639657204411 | 32s | BGC-001 | NCR |
| 2025-12-25 15:51:08 | Voice Out | 639768757420 | 18s | CEB-042 | Region VII |
Network Graph Visualization
Network graph visualization showing call relationships
Out-degree: 133 • In-degree: 6 • Ratio: 22.2:1
Geographic Movement Analysis
Cell tower locations and movement patterns
NCR → Region VII (59 min)
Region VII → NCR (9 min)
Case Timeline
-
Case Created — Automated detection triggered2025-12-25 08:42:15
-
OBSERVE — Initial evidence collected2025-12-25 08:42:18
-
ORIENT — AI analysis completed, cross-referenced with 4 data sources2025-12-25 08:43:02
AI Deep Analysis
Summary:
This entity exhibits strong indicators of a SIM box operation combined with impossible travel patterns. The network graph shows a highly asymmetric calling pattern (133 outgoing vs 6 incoming) typical of interconnect bypass fraud.
Key Risk Factors:
- Multi-vector fraud detection triggered
- Impossible travel events indicate device/SIM sharing or cloning
- Call pattern matches SIM box behavioral signature
- Associated complaint suggests potential victim of social engineering
Recommended Next Steps:
- Immediately block the MSISDN to prevent further fraudulent traffic
- Investigate linked IMEIs for additional compromised SIMs
- Review B-party numbers for potential accomplice network
- Escalate to law enforcement if financial impact exceeds ₱50K
Investigation Workbench
Enter an MSISDN, Subscriber ID, IMEI, or Case ID to begin investigation
Or select a recent case: