Guide · Brand protection
31 Investigate a fraud alert
A Critical alert has appeared: the same watch was scanned in Paris and, two hours later, in Istanbul, with an older tag counter. Here is how to work it.
Ten rozdział nie jest jeszcze dostępny w wersji językowej (Polski), więc czytają Państwo wersję angielską.
- Open Analytics → Fraud alerts. Use Add filter → Status = New and Severity = Critical to focus.
- Click the alert. Read the Signals (here Cloned chip and Impossible travel), the Metrics (distance, speed, counters) and the Triggering scans.
- Click Acknowledge so colleagues know you are on it.
- Open Verifications, search for the product's identifier, and open the clock icon for the full Verification history of the tag: where and on which devices it was scanned.
- If the evidence holds, open the product, go to Authentications, and choose Block authentication for the cloned tag. Every later scan of it fails. (Blocking the whole product from its page needs a tap of the genuine tag, unless the asset allows unprotected management.)
- Back on the alert, click Confirm fraud. If it was a false alarm, for example a customer travelling with a VPN, click Dismiss.