Risk & Compliance
The Risk & Compliance module provides tools for fraud detection, risk monitoring, multi-account detection, and the dual-approval system for sensitive operations. Staying on top of risk alerts protects both your business and your players.
Overview
Access risk features through Risk and Approvals in the sidebar. The Risk section covers fraud detection and player risk scoring. The Approvals section manages the 4-eyes approval queue.
Risk Dashboard
The Risk Dashboard provides an at-a-glance overview of your platform's risk posture:
| Column / Field | Description |
|---|---|
| Active Alerts | Number of unresolved fraud alerts |
| High-Risk Users | Players flagged with elevated risk scores |
| Detected Multi-Accounts | Suspected multi-account clusters found |
| Suspicious Patterns | Automated pattern detection hits |
Below the stat cards, two tables show Recent Fraud Alerts and Recent High-Risk Users for quick triage.
Fraud Alerts
The Fraud Alerts page (Risk > Alerts) shows all system-generated and manually-created alerts:
| Column / Field | Description |
|---|---|
| Alert ID | Unique alert identifier |
| User | Player associated with the alert |
| Alert Type | Category of the alert (see below) |
| Severity | low, medium, high, critical — color-coded badges |
| Status | open, investigating, resolved, dismissed, false_positive |
| Created | When the alert was generated |
| Assigned To | Admin analyst handling the alert |
Alert Investigation Workflow
- 1
Review new alerts
Start with 'open' status alerts, prioritizing 'critical' and 'high' severity first.
- 2
Assign to analyst
Assign the alert to yourself or a team member. This changes status to 'investigating'.
- 3
Investigate the player
Click through to the player's 360° profile. Review their betting patterns, transaction history, device fingerprints, and IP logs.
- 4
Take action
Based on your investigation, resolve the alert with an action: suspend account, require KYC verification, block account, or dismiss as false positive.
- 5
Document your findings
Add a resolution note explaining your decision. This is stored in the audit trail for compliance.
Common Alert Types
- Velocity Alert — Unusually rapid deposits or withdrawals
- Large Transaction — Single transaction exceeding the configured threshold
- Pattern Match — Betting patterns consistent with arbitrage, bonus abuse, or match fixing
- Device Anomaly — Multiple accounts from the same device
- Geo Anomaly — Login from an unusual location or VPN detected
- KYC Mismatch— Submitted documents don't match registration data
Multi-Account Detection
The system automatically detects potential multi-account abuse by analyzing:
- Shared device fingerprints across different accounts
- Common IP addresses
- Similar registration data (name, address, phone patterns)
- Shared payment methods
Detected clusters are displayed in the Risk Dashboard. Click a cluster to see all linked accounts and the evidence linking them.
Warning
Approval Queue
The Approval Queue (Approvals in the sidebar) handles operations that require dual authorization:
| Column / Field | Description |
|---|---|
| Requested Date | When the approval request was created |
| Action Type | What operation needs approval (e.g., wallet_adjustment, large_withdrawal) |
| Resource | What entity is affected (user, bet, transaction) |
| Amount | Monetary value involved (if applicable) |
| Expires In | Countdown timer — requests auto-expire if not acted on |
Approval Workflow
- 1
Review the request
Click a pending approval to see full details: who requested it, why, and the impact.
- 2
Approve or reject
Click 'Approve' (with a confirmation reason) or 'Reject' (with a rejection reason).
- 3
Auto-expiry
Requests that are not acted on within the configured time window automatically expire and must be re-submitted.
Info
Player Risk Scoring
Each player receives an automated risk score based on multiple factors:
- Betting patterns (frequency, stake amounts, timing)
- Deposit/withdrawal behavior
- Device and IP history
- KYC verification status
- Alert history
Risk scores are visible in the player's 360° profile and can be used as a filter in the player list. Categories range from low risk (recreational players) to critical risk (suspected fraud).