Fictional scenario. Synthetic data. Your notes stay on this browser; do not enter real customer information.
What the team did, and what it cost.
Dual approval, 14 days, owner Ines. Every Hollow Oak standalone credit above EUR 50 now waits for a second look at Northbank before it settles. Petra was told why, and asked, without instruction, to look at AG-14 and the key herself.
The cost arrived within a week. Hollow Oak's credit queue backed up to four days at its worst. Two recall customers waited that long for a genuine EUR 60 goodwill payment, and one said so, in public, with Hollow Oak's name spelled correctly. Petra's patience with Northbank is now a resource the desk is spending.
What the control bought: credits to cards on the list went to zero from the first day. Not proof, as Ines points out, but a data point with a date on it. Petra's own look at AG-14 produced one fact: the agent was on annual leave for two of the Fridays on which that login issued credits. The desk files it under the login is not the person and leaves the rest to Hollow Oak.
Then the portfolio alert fired. Tomas had set it in week two, almost as an afterthought: any of the 96 cards, anywhere at Northbank. It fired at Lagoon Casino.
Lagoon.
Lagoon Casino is an iGaming operator and Northbank's largest client by volume. It takes card deposits through Northbank and pays winnings by bank transfer. The analyst pulls three weeks of Lagoon activity for the list.
- Between 20 November and 2 December, 38 of the 61 cards made deposits at Lagoon.
- 38 Lagoon accounts, one card each. 35 were registered in the past six weeks. Three are older: fourteen, nine and seven months.
- Deposits: one or two per account, EUR 150 to EUR 480, total EUR 11,920.
- Wagering before a withdrawal was requested: median three per cent of the deposit. A typical Lagoon account, in this illustration, wagers many times its deposit over its lifetime.
- 33 of the 35 new accounts claimed no welcome bonus at all.
- Withdrawal requests: 36 of 38, all by bank transfer, none back to the depositing card. Total requested EUR 10,400.
- Bank account references on the withdrawals: six distinct, which the desk labels BK-01 to BK-06. BK-02 alone is on 14 requests.
- Device references at registration: dev-7f3a on 29 accounts, dev-c21e on 6. The three older accounts use their own devices.
- 203.0.113.44 appears on 22 logins across the new accounts.
The shape of it.
The analyst draws it on the whiteboard because it no longer fits on a page. Money leaves Hollow Oak as credits on to cards. The cards are checked at Pondside. The cards deposit at Lagoon. Lagoon is asked to pay the balance out to six bank accounts. Three merchants, one list, and at every stage the money is a step further from where it started.
The inference, written as one: this is a cash-out. The casino is where card money becomes bank money, and the small wager is the cost of looking like a player.
The alternatives, in order. Bonus hunting is weak here: 33 of 35 accounts declined the welcome bonus, and a bonus ring does not leave the bonus on the table. Next: a group of friends who deposited, disliked the games and withdrew, which is lawful and happens. It does not explain two device references across 35 registrations or six bank accounts shared between 36 withdrawals. Last, and worth keeping: the three older accounts. They are real players with real histories, and their cards are on the list. Either they have been recruited, or their card details were never theirs, or the list is not one thing. The desk does not know, and says so.
Lagoon's compliance lead, Benedikt, rings within an hour of Tomas's e-mail. He is calm. Withdrawing to a method other than the one used to deposit is already something Lagoon reviews, the 36 requests are in a queue, and a casino that holds a player's money without reason has a regulator to answer to. "Tell me what you know," he says, "and tell me which of it you know."
The cost of each move.
Hold the withdrawals and 38 people are told their money is delayed, three of whom may be exactly who they say they are. Close the accounts and return the deposits, and the money goes back to the cards it came from, which is where the problem started. Let the withdrawals proceed and report the bank accounts, and the money is gone before anyone reads the report.
Ines asks the only question she ever asks. Tomas has started asking it first.
Before next week.
Read The money has to leave somewhere. and try the case Deposit and withdraw at Lagoon. Look up cash-out.
Fictional scenario. Synthetic data. No real customer records.