Guide · Brand protection
31 Investigate a fraud alert
A Critical alert has appeared: the same watch was scanned in Paris and, two hours later, in Istanbul, with an older tag counter. Here is how to work it.
Este capítulo todavía no está disponible en Español, por lo que está leyendo la versión en inglés.
- Open Analytics → Fraud alerts. Use Add filter → Status = New and Severity = Critical to focus.
- Click the alert. Read the Signals (here Cloned chip and Impossible travel), the Metrics (distance, speed, counters) and the Triggering scans.
- Click Acknowledge so colleagues know you are on it.
- Open Verifications, search for the product's identifier, and open the clock icon for the full Verification history of the tag: where and on which devices it was scanned.
- If the evidence holds, open the product, go to Authentications, and choose Block authentication for the cloned tag. Every later scan of it fails. (Blocking the whole product from its page needs a tap of the genuine tag, unless the asset allows unprotected management.)
- Back on the alert, click Confirm fraud. If it was a false alarm, for example a customer travelling with a VPN, click Dismiss.