Nothing harmful
gets past.
Forward the message. Agents verify the claims, walk the threat graph, and only a real decision reaches a human, with evidence.
An investigation desk, not a chatbot.
Triage on Bedrock Nova scores urgency across Hinglish scam scripts, authority impersonation, UPI collect abuse, and the quiet ones that must never wake a guardian.
Issuer registries and a curated trusted-service tier adjudicate every brand claim. kotak.bank.in fails. bluedart.com passes. Evidence, not vibes.
Phone, VPA, and UTR references cross into the graph as keyed HMAC hashes. A mule account seen by one household raises taint for every other household.
The graduated silence law: most messages are handled with zero sound. Gray bands get a calm hold-off, never an accusation. Only hard evidence escalates with a court-grade bundle.
Two messages. One difference you cannot see. The gate can.
“Sent Rs.349 from Kotak Bank AC X3047 to navircbpmobilerec.cf@axisbank. Not you, kotak.com/KBANKT/Fraud”
Link on the bank's genuine surface. No hard fail. Conservative gate, guardian sees evidence, member holds. Correct.
“Sent Rs.7.00 from Kotak Bank A/c X3047. Not done by you? Tap kotak.bank.in/KBANKT/Fraud”
Spoof domain outside the registry. Hard fail. SCAM verdict, guardian notified, member warned. Caught.