Case Detail Investigation View

CASE-2026-10482

Biometric score near threshold with cross-border network mismatch

In ReviewRisk 62

Applicant Identifier

M***** T*****

Country

Canada

Session ID

SID-7BF2-19AA

Assigned Reviewer

Analyst 482

Created Timestamp

Mar 16, 2026, 10:21 AM

Verification Type

Passport

Document Type

Passport

IP Region

Bucharest, Romania

Signal Analysis

Verification signals and thresholds

Analyst-friendly confidence bars expose pass/fail status and highlight which checks caused the review.

Document Authenticity

Threshold min 80%

83%

Pass

Face Match

Threshold min 75%

72%

Fail

Liveness

Threshold min 85%

94%

Pass

Deepfake Probability

Threshold max 30%

18%

Pass

OCR Confidence

Threshold min 80%

88%

Pass

Network Location Match

Threshold min 65%

34%

Fail

Device Fingerprint Risk

Threshold max 60%

76%

Fail

Watchlist Match

Threshold max 25%

7%

Pass

Identity Evidence

Submitted document, selfie, OCR extraction, and metadata

Evidence is grouped for fast visual comparison without forcing analysts into low-level logs.

Uploaded ID Document

Uploaded ID Document

Selfie Capture

Selfie Capture

OCR Fields

full Name
Michael Turner
document Number
CA7742198
date Of Birth
1992-08-14
issuing Country
Canada
expiration Date
2031-05-22

Document Metadata

type
Passport
issuing Authority
Government of Canada
capture Source
Mobile camera upload
resolution
2400 x 1600

Reviewer Decision Workflow

Decision Console

Capture the analyst outcome with structured notes and action-specific policy requirements.

Notes are enforced for rejection and recapture requests to support auditability.

Verification Timeline

Chronological event history

A structured timeline shows how the verification progressed from document capture to manual review.

10:21:03

Document Uploaded

Canadian passport front image captured via mobile SDK.

10:21:07

OCR Extraction Completed

OCR confidence 88% with full field extraction.

10:21:10

Face Capture Initiated

Passive selfie capture started.

10:21:12

Liveness Challenge Completed

Liveness confidence returned at 94%.

10:21:13

Face Comparison Result

Face comparison score returned: 72%.

10:21:14

Risk Score Generated

Overall fraud risk scored at 62.

10:21:14

Case Flagged for Review

Network location did not align with issuing country.

10:22:11

Reviewer Assigned

Assigned to Analyst 482.

Related Risk Indicators

Cross-signal fraud context

Device, network, and reuse indicators help reviewers detect broader fraud patterns around the case.

High

Device fingerprint reused

Fingerprint dv_4c19ae7 appeared in four verifications over the last 48 hours.

Elevated

IP cluster linkage

IP range has prior association with account opening fraud in Eastern Europe.

High

Cross-border session behavior

Applicant country is Canada while session originated from Bucharest, Romania.

Investigation Notes

Reviewer observations

Notes capture decision rationale and preserve contextual commentary for later audit.

Analyst 482

Mar 16, 2026, 10:25 AM

Document metadata appears clean. Need manual comparison against selfie posture and hairline.

Analyst 482

Mar 16, 2026, 10:24 AM

Face match is borderline but liveness is strong. Network origin remains the main anomaly.

Audit Log

Investigation action history

All reviewer assignments, notes, escalations, and decisions are preserved in a structured audit feed.

Note Added

Analyst 482

Mar 16, 2026, 10:24 AM

Initial manual review note logged.

Status Updated

Analyst 482

Mar 16, 2026, 10:23 AM

Case moved from Queued to In Review.

Reviewer Assigned

System

Mar 16, 2026, 10:22 AM

Analyst 482 assigned after rules engine escalation.