Enter investigation 01 / Payment risk
The card drawer
640 payment attempts in twelve minutes. A checkout release went live this morning. What would you investigate first?
Open the filePRACTICE / THE INVESTIGATION ARCHIVE
The case room.
Fictional investigations at the desk.
Take a closer look before you decide.
Enter investigation 
Enter investigation 02 / Promotion integrity
An invitation, repeated
Thirty-two new accounts claim a welcome credit. Some share a network. Some share something more.
Open the file
Enter investigation 03 / Dispute operations
A letter from last month
Today’s dispute queue concerns yesterday’s transactions. The dates change the story.
Open the file
Enter investigation 04 / Account security
The borrowed key
A familiar account. A new device, a changed email and a withdrawal, three minutes apart.
Open the file
Enter investigation 05 / Decision quality
The guest kept waiting
One hundred alerts. Eighty-five legitimate events. Consider who pays the price of a cautious rule.
Open the file
Enter investigation 06 / Payment risk
One BIN. Two thousand cards.
You are on call for Pondside Gifts, a fictional digital gift-card merchant. Between 01:10 and 03:40, authorisation attempts rise from a usual 60 overnight to 2,400. Most come from one card range and most are declined. Some are approved, and gift-card codes have already been emailed. Decide what to do before the morning shift arrives. All people, figures and internal procedures in this exercise are synthetic.
Open the file
Enter investigation 07 / Refund abuse
The returns that never shipped.
You review refunds for Hollow Oak Supplements, a fictional subscription nutraceuticals merchant. Refund approvals this month are approximately four times the usual level. Most sit on one product, one support agent and a small set of customer accounts, and the return labels issued with them have never been scanned. Decide what to do before tomorrow’s refund batch runs. All people, figures and internal procedures in this exercise are synthetic.
Open the file
Enter investigation 08 / Cash-out risk
Deposit, barely play, withdraw.
You are the senior risk hire at Lagoon Casino, a fictional iGaming operator. Over ten days, eighteen accounts deposited by card, wagered a small fraction of the balance and asked to withdraw to e-wallets that were not the deposit source. The payments team wants to clear the queue. Decide what to do with the eighteen requests today. All people, figures and internal procedures in this exercise are synthetic.
Open the file
Enter investigation 09 / Affiliate risk
Paid for players who never traded.
You review partner traffic at Meridian FX, a fictional forex and CFD broker. One affiliate delivered 312 first-time depositors last month and was paid €200 for each. Almost none of them traded. The next payment run, with 140 more depositors from the same partner, is in five days. Decide what to do before it runs. All people, figures and internal procedures in this exercise are synthetic.
Open the file
Enter investigation 10 / Dispute programmes
One merchant. Two views of risk.
You work at Northbank Pay, a fictional PSP supporting an EU acquirer. Brightwater Tickets has a rising fraud-and-dispute monitoring ratio. The acquirer requests a written response. All figures and internal escalation levels below are synthetic; the exercise is not a live scheme eligibility determination.
Open the file
Enter investigation 11 / Rule monitoring
The rule that went quiet.
You work in the risk team at Northbank Pay, a fictional PSP. Tomas notices that R-114, a rule for high-value card-absent payments where the issuer country differs from the merchant’s, has produced no alerts for three weeks. The dashboard is green. Nobody raised it because the queue was quieter. Decide what to do this afternoon. All people, figures and internal procedures in this exercise are synthetic.
Open the file