Stop the SIM swap, the takeover and the subscription fraud before the money moves, and let the fraud system make the call.
Bounded rules and models score SIM, subscription, account-takeover, payment, traffic and roaming fraud, and pass the signal to the authorised fraud or transaction-control system with its reasons.
For Fraud, risk, security and digital identity teams protecting customers and revenue.
A password reset, a SIM change and a wallet transfer arrive on one account within an hour.
This sequence as a takeover or not, the value of the signal, and the system that acts on it.
Pass a high-risk signal with its reasons to the transaction-control systemConsidered
Refer the account for human follow-upConsidered
Suppress the signal, where the customer verified through a held channelConsidered
No action, where the sequence has a known causeConsidered
The safeguards, the action and the channels
Before anything reaches the customer: Signal quality, consent, customer verification and the control system's own policy checks pass.
What would reach them: The control system steps up, pauses or rejects; the customer is told through a channel the attacker does not hold. On SMS, App, Call.
Read the journey; a working session shows it running.
This sequence as a takeover or not, the value of the signal, and the system that acts on it.
A password reset, a SIM change and a wallet transfer arrive on one account within an hour. Each is ordinary on its own.
Pass a high-risk signal with its reasons to the transaction-control system
Refer the account for human follow-up
Suppress the signal, where the customer verified through a held channel
No action, where the sequence has a known cause
The decision, step by step
01Eligibility rules
02propensity/uplift or value score
03treatment constraints
04ranked action including no-action
05decision log
Fraud, charging and consent systems remain authoritative; HeuriTel scores and refers within approved policy.
What it does
Three things it helps you decide or do.
Detect and prioritise the risk with the reasons attached
SIM, subscription, account takeover, payment, recharge, traffic, roaming, API, SIM box and international revenue share fraud are scored from customer, device and transaction signals, with identity theft detection and KYC verification beside them.
In the record’s words
customer_id
account_type
tenure_days
active_products
recharge_30d
usage_30d
revenue_30d
last_contact
consent_status
outcome_label
Pass the signal to the system that acts
The authorised fraud or transaction-control system steps up, pauses or rejects; the decision here is to suppress, refer for human follow-up or do nothing; the money moves only in the system that owns it.
In the record’s words
Offer
service message
reward
channel change
human follow-up
suppress
do nothing
Audit every decision and approval
The decision log, the eligibility snapshot and the approval record are kept for every signal, so a customer who was blocked and a fraud that was missed can both be examined.
In the record’s words
Decision log
eligibility snapshot
price/order response
delivery receipt
control assignment
revenue/outcome ledger
The journey
Stop an account takeover before the transfer, and let the fraud system decide
Read the journey; a working session shows it running.
Step by step, from both sides
Fraud, risk, security and digital identity teams
Step
What the customer experiences
What the operator does
The momentThe moment that started it.
A password reset, a SIM change and a wallet transfer arrive on one account within an hour.
Reads the event sequence and its timing, device, sim and identity verification signals, consent and customer verification history, the control system's own policy.
The decisionThe decision to be made.
The customer's screen is unchanged.
Scores the sequence as a takeover risk with its reasons, and passes the signal to the fraud or transaction-control system.
The safeguardsThe conditions that stop it.
Still unchanged: the action waits until every check has passed.
Signal quality, consent, customer verification and the control system's own policy checks pass.
The actionThe action that reaches the customer.
The control system steps up, pauses or rejects; the customer is told through a channel the attacker does not hold. Reaches them on SMS, App, Call.
Recommends. The system that holds the right confirms, charges or provisions.
When it goes wrongThe failure, and the recovery.
A customer who replaced a lost phone and moved money the same day is held, and cannot be reached because the notification goes to the new SIM.
The notification goes to a channel the customer held before the change, the hold is lifted on verification, and the case is kept so the score learns the pattern.
The resultThe change it made.
What changed for them is what is counted; nothing else is claimed.
Takeovers stopped before a loss, against legitimate customers wrongly held.
The proofThe proof anyone can check.
Can be answered for, later, from the record.
Event sequence, score and reasons, signal passed, control system's decision, customer notification and outcome.
Detect and prioritise fraud management risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
/d/HT-0252
HeuriTel SIM FraudDecision definitionHT-0253
Detect and prioritise sim fraud risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
/d/HT-0253
HeuriTel SIM Swap FraudDecision definitionHT-0254
Return or subscribe to the last SIM-change signal for an authorised number so an enterprise risk policy can step up, pause or reject a sensitive action.
Detect and prioritise subscription fraud risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
Detect and prioritise account takeover prevention risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
/d/HT-0256
HeuriTel Payment FraudDecision definitionHT-0257
Detect and prioritise payment fraud risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
/d/HT-0257
HeuriTel Recharge FraudDecision definitionHT-0258
Use customer affordability, usage, renewal and margin data to improve recharge fraud while controlling cannibalisation and measuring incremental value.
/d/HT-0258
HeuriTel Traffic FraudDecision definitionHT-0259
Detect and prioritise traffic fraud risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
/d/HT-0259
HeuriTel Roaming FraudDecision definitionHT-0260
Detect and prioritise roaming fraud risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
/d/HT-0260
HeuriTel API FraudDecision definitionHT-0261
Detect and prioritise api fraud risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
Identify eligible records for customer verification, choose from approved actions including no action, execute through the system of record, and measure the agreed business outcome.
Identify eligible records for device verification, choose from approved actions including no action, execute through the system of record, and measure the agreed business outcome.
Identify eligible records for kyc verification, choose from approved actions including no action, execute through the system of record, and measure the agreed business outcome.
Identify eligible records for consent management, choose from approved actions including no action, execute through the system of record, and measure the agreed business outcome.
/d/HT-0265
HeuriTel AI ComplianceDecision definitionHT-0266
Identify eligible records for ai compliance, choose from approved actions including no action, execute through the system of record, and measure the agreed business outcome.
/d/HT-0266
HeuriTel Decision AuditDecision definitionHT-0267
Identify eligible records for decision audit, choose from approved actions including no action, execute through the system of record, and measure the agreed business outcome.
Identify eligible records for approval management, choose from approved actions including no action, execute through the system of record, and measure the agreed business outcome.
/d/HT-0268
HeuriTel SIM Box FraudDecision definitionHT-0269
Detect and prioritise sim box fraud risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
/d/HT-0269
HeuriTel International Revenue Share FraudDecision definitionHT-0270
Detect and prioritise international revenue share fraud risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
Detect and prioritise identity theft detection risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
Detect and prioritise mule account detection risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
Detect and prioritise promo abuse detection risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
/d/HT-0273
HeuriTel Dealer FraudDecision definitionHT-0274
Detect and prioritise dealer fraud risk using bounded rules and models, then pass the signal to the authorised fraud or transaction-control system.
/d/HT-0274
HeuriTel Social Engineering RiskDecision definitionHT-0275
Identify eligible records for social engineering risk, choose from approved actions including no action, execute through the system of record, and measure the agreed business outcome.
What can the network itself do for a bank, an agency or a planner?
CAMARA & GSMA Open Gateway APIsLet a bank or an app verify a number, a SIM change or a location from the network itself, with the customer's consent recorded.
Network Investment & IntelligencePut the next site, upgrade or fibre route where the customers and the revenue are, and show afterwards what the money did.
