Marketplaces and e-commerce
The same people open new accounts to reuse promotions, and seller or courier payouts go to accounts you can't trust. Card fraud cost $33.41 billion worldwide in 2024 (The Nilson Report, Issue 1298, December 2025; card fraud overall). WoWyrd runs in your own environment and scores each sign-up, payment and payout before money moves.
What WoWyrd flags, from sign-up to payout
Each stage below names the rules that fire there, and every flag shows its reason.
Sign-up
One device or IP address behind many accounts, and throwaway email domains (multi-accounting). Scripted sign-ups and request bursts per IP, device or session (bots). WoWyrd has no rule for promotion codes as such; it links the accounts behind them.
Login
One session from several countries or networks, and an email or phone change on a seller or courier account (account takeover).
Payment
Bursts of declined cards before a large purchase, repeated declines with the same code, and a quiet merchant that suddenly receives many payments (card testing).
Payout
A payout right after an email or phone change, or to a recipient added just before (account takeover). One payout destination shared across several accounts (money mules).
What data you need
Only the IP address is required; in the pilot, we map your seller, courier and payout fields to these.
| Field | Where it comes from | Mandatory |
|---|---|---|
ip | Your edge or load balancer (the real client IP) | Yes |
customer_id, account_created_at | Your user, seller or courier accounts | No. Needed for new-account and payout rules |
device_fp, email | Your app or web sign-up | No. Needed for multi-accounting rules |
card_bin, decline_code, merchant_id | Your payment gateway | No. Needed for card-testing rules |
preceding_event (e.g. email_change, beneficiary_added) | Your account service | No. Needed for account-takeover rules |
beneficiary_id, amount | Your seller or courier payout service | No. Needed for payout rules |
How a pilot starts here
We start with your own history: WoWyrd scores past sign-ups and payouts next to the abuse you already confirmed. Then it observes one live stream, such as courier or seller payouts for 30 days in shadow mode, and decides nothing.
Talk to us about one stream, one owner, one question.
In the UK? See how WoWyrd maps to the FCA's draft guidance CP26/38.