DeskProcess OS
Overlay · not the system of recordHolds sit above scoreAsk Desk is deterministic — no modelLocal

Fraud / financial crimes analyst

Same device, four new accounts

Device D-8831 · 4 CIFs

Lane · Standard

PriorityP1
Severityhigh
PacketReady
Suggested—

Why this is here

One iOS fingerprint opened four consumer accounts in 31 hours. Two already requested ACH out.

  • DeviceD-8831 shared across 4 CIFs
  • KYCSynthetic-leaning SSNs, thin files
  • ChannelACH out requested on 2 of 4
Recommended. Escalate. Freeze the four CIFs. This is a ring, not a family.
Low on identity of the operator. High on the pattern. Do not wait for a perfect name.

Current: Open

Overlay only. Will POST a label to the write-back URL, never a funds release. Actimize / Falcon / TM alert_label=NEED_MORE on frd-device-ring. Desk is not the system of record.