
The fraud-intelligence layer that operates between the operator's transaction and the analyst's decision — in seconds, with a playbook, with an audit trail, fluent in Brazilian regulation.
Good at e-commerce. Has no idea what rollover, RTP, live-betting burst, sharp money are. Rewriting the rules takes months — and the fraudster has already moved on.
Runs at night, alerts in the morning, decides the day after. Doesn't know COAF, SISCOAF, Law 14,790/23. Hostile latency for iGaming.
Two analysts + SQL + chat. Works until the operation doubles. No audit trail, no network, no playbook. Whoever knows the rule leaves, and the rule goes with them.
Anomalies decides between the operator's transaction event and the analyst's action, in seconds — with a playbook per rule, a signed audit trail and Brazilian regulatory grounding in every alert.
Each agent carries its own rules, weights and temporal decay. The score is aggregated by weighted ensemble. No black box.
Deposit/withdrawal ratios, velocity, round amounts, proportional wagering, cross-country PIX.
Z-score vs historical profile, marathon session, post-dormancy burst, anomalous night pattern.
Win ratio vs theoretical RTP, post-bonus game hopping, provider patterns, abnormal conversion.
Sharp money in obscure markets, late insider, live-betting burst, cross-book arbitrage.
Incomplete KYC, PEP match, COAF threshold, self-exclusion and responsible gaming.
Clustering by IP, device fingerprint, email pattern and payment BIN. Farms and syndicates.
Laundering via mismatched deposit/withdrawal, smurfing below the COAF threshold, cross-country PIX.
Compromised credentials, post-dormancy burst, device-fingerprint switch, geolocation shift.
Stolen cards, fraudulent chargeback, multi-payment in 24h, blacklisted BIN.
Multi-account farm, conversion spike, withdrawal right after wagering, post-bonus game hopping.
Sharp money + late insider in obscure markets, correlated cross-house arbitrage.
Win ratio consistently above theoretical RTP, timing pattern (precise ms), statistical anomaly.
We consume events straight from your operation over an encrypted connection. No intermediary, no caching of sensitive data.
Each event goes to the right agent. Per-event, per-window and batch evaluation.
Signals per rule → agent score (weighted average × decay) → final score vs cutoffs.
Persisted alert and signed webhook fired to your channels in real time.

Automatic clustering by shared attributes — IP, device fingerprint, email pattern, payment BIN. When you block one player, Anomalies already shows you the other 8 in the farm.
Every rule, every playbook and every audit log was written assuming COAF, LGPD and Brazilian iGaming regulation as the default context — not as an add-on.
Smurfing detection calibrated to the COAF R$ 10k threshold. The AML playbook respects article 11: the report cannot tip off the suspect.
Synthetic identities (player hash) by default. Revealing identity requires recorded authorization. Metrics and network views are already masked in production.
Network detection references SPA/MF Ordinances 1,143/24 (Art. 25) and 1,231/24 (Art. 33) directly. Regulatory grounding in every cluster.
Federal crime. The playbook includes a sports-integrity channel + criminal documentation protocol. Paying a confirmed bet = co-liability.
Anomalies is in production and the numbers on this page are real. The next step is to show yours — in shadow mode, over your real streaming, no noise.
Let's detectFill out the form and our team gets back to you within 24h. Or talk now on WhatsApp.
WhatsApp