{
  "model": "grayson-1",
  "state": {
    "platform": {
      "who_we_are": "A consumer fintech app: a spending account held at our partner bank, a Visa debit card, instant transfers to and from linked debit cards and bank accounts, and a rewards program.",
      "review_queue": "Rewards risk review. A reward goes to this queue instead of being paid when a rewards rule fires on it; analysts pay, keep holding, deny, or deny and close.",
      "customer_base": "About 1.9 million funded accounts; 41,000 rewards paid in September 2026."
    },
    "promotion_terms": {
      "name": "Give $50, Get $50 (referral program, terms revised 2026-03-01)",
      "reward": "$50 to the new customer (referee) and $50 to the customer who referred them (referrer)",
      "how_to_qualify": "The referee opens an account through the referrer's link or code, verifies their identity, and receives qualifying direct deposits totaling at least $200 within 45 days of opening.",
      "qualifying_direct_deposit": "An ACH credit from an employer, payroll provider or government benefits payer. Transfers from your own accounts at other institutions, P2P payments, merchant payouts and cash loads don't qualify.",
      "limits": "One account and one sign-up or referral reward per person, for new customers only. A referrer can earn up to 10 referral rewards ($500) per calendar year. You can't refer yourself or open accounts for other people.",
      "timing": "Rewards are credited within 5 business days after the qualifying deposit posts, unless held for review.",
      "our_rights": "We may withhold or reverse a reward, and close accounts under the account agreement, if we find self-referral, multiple accounts, fraudulent or staged qualifying activity, or other abuse of these terms."
    },
    "program_baselines": {
      "referee_rewards_paid": 118400,
      "median_days_open_to_first_qualifying_deposit": 12,
      "referees_with_debit_card_purchases_in_first_30_days_pct": 81,
      "referees_moving_over_90pct_of_first_deposit_out_within_24h_pct": 9,
      "referees_sharing_home_address_with_referrer_pct": 7,
      "of_those_sharing_an_address_paid_after_review_pct": 91,
      "referrers_with_5_or_more_referrals_in_30_days_pct": 0.4,
      "held_referral_rewards_confirmed_as_abuse_pct": 23
    },
    "legend": {
      "ach": "SEC code PPD = consumer credit or debit originated by a company (payroll and benefits use it); company_name and entry_description are the originator's fields (16 and 10 characters); individual_name is the receiver's name as the originator sent it",
      "device_check": "From our device intelligence vendor at each session: device_id is a hardware-level fingerprint that survives app reinstalls; emulator, app_cloner, rooted and mock_location are detections with confidence; accounts_on_device counts our accounts seen on the same device_id",
      "ip_check": "From our IP intelligence vendor: connection type, ISP, geolocation and proxy score (0 to 100, higher means more likely a proxy, VPN or hosting network)",
      "rewards_risk_score": "Our rewards risk model, 0 to 100; rewards at 60 or above are held automatically"
    },
    "account": {
      "account": "x7718",
      "name": "Marcus Whitaker",
      "opened": "2026-09-07T00:41:13Z",
      "status": "Open; reward held",
      "acquisition": "Referral link from account x3092 (Megan Whitaker)",
      "stated_occupation": "HVAC service technician",
      "stated_employer": "Not asked at sign-up",
      "date_of_birth": "1989-11-02",
      "address": "Single-family home, Hilliard OH 43026 (same address as the referrer)",
      "identity_verification": {
        "method": "Database verification (no document or selfie required for accounts under our limits)",
        "result": "Pass: name, date of birth and SSN found together in credit-header records",
        "detail": "SSN first seen with this name in 2006; credit file since 2008 with a mortgage on the Hilliard address since 2019 (joint with Megan Whitaker) and two auto loans; address matches"
      },
      "email": {
        "address": "marcus.whitaker89@example.net",
        "check": "Free webmail; first seen 2011; linked to many commerce accounts; name matches"
      },
      "phone": {
        "number": "(614) 555-0137",
        "check": "Mobile, postpaid; in his name since 2015; ported to a new carrier on 2026-08-12"
      },
      "signup_device": {
        "device_id": "dfp_31d0b7a2c4",
        "reported_as": "iOS 19, iPhone 14",
        "emulator": "Not detected",
        "app_cloner": "Not detected",
        "rooted": "No",
        "mock_location": "Off",
        "device_time_zone": "America/New_York",
        "accounts_on_device": 1
      },
      "signup_ip": {
        "ip": "198.51.100.42",
        "check": "Residential cable ISP, Hilliard OH, proxy score 3; also used by the referrer's account since 2022"
      }
    },
    "devices": [
      {
        "device_id": "dfp_31d0b7a2c4",
        "first_seen": "2026-09-07T00:32:13Z",
        "last_seen": "2026-10-04T23:41:20Z",
        "detections": "None; hardware first reported 2024-10 by the device vendor's network",
        "accounts_on_device": "This account only"
      }
    ],
    "sessions_and_events": {
      "columns": [
        "ts",
        "event",
        "device_id",
        "ip",
        "detail"
      ],
      "rows": [
        [
          "2026-09-07T00:32:13Z",
          "Referral link opened",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "Link from Megan Whitaker, opened from a text message on his phone; app installed from the app store"
        ],
        [
          "2026-09-07T00:41:13Z",
          "Account opened",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "Sign-up form completed in 6 minutes 12 seconds; fields typed; address chosen from autocomplete; identity verification passed"
        ],
        [
          "2026-09-07T00:49:50Z",
          "Instant transfer in",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "$100.00 from his debit card x9034 (name match)"
        ],
        [
          "2026-09-08T16:14:09Z",
          "Direct deposit form downloaded",
          "dfp_31d0b7a2c4",
          "192.0.2.211",
          "Mobile carrier network, Columbus OH"
        ],
        [
          "2026-09-12T19:02:33Z",
          "Card activated",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "Physical card activated; added to Apple Pay"
        ],
        [
          "2026-09-15T10:13:25Z",
          "Login",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "Home connection"
        ],
        [
          "2026-09-18T16:24:58Z",
          "Login",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "Home connection"
        ],
        [
          "2026-09-21T13:03:12Z",
          "P2P received",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "$150.00 from Megan Whitaker"
        ],
        [
          "2026-09-21T23:00:51Z",
          "Login",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "Home connection"
        ],
        [
          "2026-09-24T16:35:47Z",
          "Login",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "Home connection"
        ],
        [
          "2026-09-26T16:51:04Z",
          "Login",
          "dfp_31d0b7a2c4",
          "192.0.2.211",
          "Mobile carrier network, Columbus OH"
        ],
        [
          "2026-09-29T01:24:22Z",
          "Login",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "Home connection"
        ],
        [
          "2026-09-29T23:36:49Z",
          "Login",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "Home connection"
        ],
        [
          "2026-10-01T11:16:44Z",
          "Login",
          "dfp_31d0b7a2c4",
          "192.0.2.211",
          "Mobile carrier network, Columbus OH"
        ],
        [
          "2026-10-02T11:26:43Z",
          "Login",
          "dfp_31d0b7a2c4",
          "192.0.2.211",
          "Mobile carrier network, Columbus OH"
        ],
        [
          "2026-10-04T23:15:29Z",
          "Login",
          "dfp_31d0b7a2c4",
          "198.51.100.42",
          "Home connection"
        ]
      ]
    },
    "funding_and_payout_methods": [
      {
        "method": "Debit card x9034 (instant transfers in)",
        "added": "2026-09-06",
        "issuer": "Large national bank; name check: MARCUS WHITAKER, match",
        "used_on_our_platform": "This account only"
      },
      {
        "method": "No external bank account linked",
        "added": null,
        "issuer": null,
        "used_on_our_platform": null
      }
    ],
    "transactions_since_open": {
      "note": "Every posted item since the account opened on 2026-09-06; amounts signed (debits negative)",
      "columns": [
        "ts",
        "type",
        "amount_usd",
        "balance_usd",
        "description",
        "detail"
      ],
      "rows": [
        [
          "2026-09-07T00:49:50Z",
          "instant_transfer_in",
          250,
          250,
          "Instant transfer from card x9034",
          "debit card at a large national bank, name match MARCUS WHITAKER"
        ],
        [
          "2026-09-07T12:02:24Z",
          "card_purchase",
          -7.75,
          242.25,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-09-09T12:32:05Z",
          "card_purchase",
          -10.05,
          232.2,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-09-11T23:58:43Z",
          "card_purchase",
          -24.36,
          207.84,
          "AMAZON MKTPL*BV7Q21XK0 Amzn.com/bill WA",
          "mcc 5942, card on file"
        ],
        [
          "2026-09-13T22:54:30Z",
          "card_purchase",
          -41.23,
          166.61,
          "SPEEDWAY 09412 COLUMBUS OH",
          "mcc 5542, Apple Pay"
        ],
        [
          "2026-09-14T12:00:00Z",
          "card_purchase",
          -15.99,
          150.62,
          "NETFLIX.COM LOS GATOS CA",
          "mcc 4899, card on file, recurring"
        ],
        [
          "2026-09-15T09:40:41Z",
          "card_purchase",
          -6,
          144.62,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-09-16T09:10:17Z",
          "card_purchase",
          -8.14,
          136.48,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-09-17T12:41:26Z",
          "card_purchase",
          -6.97,
          129.51,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-09-17T18:27:49Z",
          "card_purchase",
          -47.83,
          81.68,
          "KROGER #0547 COLUMBUS OH",
          "mcc 5411, Apple Pay"
        ],
        [
          "2026-09-18T10:02:11Z",
          "ach_credit",
          400,
          481.68,
          "TRI-COUNTY HVAC PAYROLL",
          "SEC PPD; company_name TRI-COUNTY HVAC; entry_description PAYROLL; company_id 31xxxxx407; individual_name MARCUS WHITAKER"
        ],
        [
          "2026-09-18T13:10:08Z",
          "card_purchase",
          -115.6,
          366.08,
          "THE HOME DEPOT #3806 COLUMBUS OH",
          "mcc 5200, chip"
        ],
        [
          "2026-09-20T12:29:25Z",
          "card_purchase",
          -71.37,
          294.71,
          "THE HOME DEPOT #3806 COLUMBUS OH",
          "mcc 5200, chip"
        ],
        [
          "2026-09-21T13:03:12Z",
          "p2p_in",
          150,
          444.71,
          "From Megan Whitaker (our app)",
          "memo 'groceries + gas this week'"
        ],
        [
          "2026-09-21T19:28:15Z",
          "card_purchase",
          -47.5,
          397.21,
          "SPEEDWAY 09412 COLUMBUS OH",
          "mcc 5542, Apple Pay"
        ],
        [
          "2026-09-24T23:30:46Z",
          "card_purchase",
          -84.76,
          312.45,
          "KROGER #0547 COLUMBUS OH",
          "mcc 5411, Apple Pay"
        ],
        [
          "2026-09-25T09:35:23Z",
          "card_purchase",
          -5.45,
          307,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-09-25T10:02:11Z",
          "ach_credit",
          400,
          707,
          "TRI-COUNTY HVAC PAYROLL",
          "SEC PPD; company_name TRI-COUNTY HVAC; entry_description PAYROLL; company_id 31xxxxx407; individual_name MARCUS WHITAKER"
        ],
        [
          "2026-09-26T10:26:27Z",
          "card_purchase",
          -6.01,
          700.99,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-09-26T14:22:04Z",
          "card_purchase",
          -312.48,
          388.51,
          "TRACTOR SUPPLY #1532 GROVE CITY OH",
          "mcc 5261, chip"
        ],
        [
          "2026-09-26T15:27:34Z",
          "card_purchase",
          -38.85,
          349.66,
          "KROGER #0547 COLUMBUS OH",
          "mcc 5411, Apple Pay"
        ],
        [
          "2026-09-27T10:50:10Z",
          "card_purchase",
          -8.08,
          341.58,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-09-28T23:12:40Z",
          "p2p_out",
          -86.5,
          255.08,
          "To Megan Whitaker (our app)",
          "memo 'my half of the electric'"
        ],
        [
          "2026-09-30T13:26:02Z",
          "card_purchase",
          -40.71,
          214.37,
          "KROGER #0547 COLUMBUS OH",
          "mcc 5411, Apple Pay"
        ],
        [
          "2026-09-30T15:09:08Z",
          "card_purchase",
          -19.5,
          194.87,
          "CHIPOTLE 2291 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-10-02T10:02:11Z",
          "ach_credit",
          400,
          594.87,
          "TRI-COUNTY HVAC PAYROLL",
          "SEC PPD; company_name TRI-COUNTY HVAC; entry_description PAYROLL; company_id 31xxxxx407; individual_name MARCUS WHITAKER"
        ],
        [
          "2026-10-02T12:22:42Z",
          "card_purchase",
          -9.41,
          585.46,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-10-03T12:55:07Z",
          "card_purchase",
          -7.9,
          577.56,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-10-03T16:32:08Z",
          "card_purchase",
          -24.7,
          552.86,
          "CHIPOTLE 2291 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-10-03T18:06:51Z",
          "card_purchase",
          -44,
          508.86,
          "OHIO STATE ATHLETICS COLUMBUS OH",
          "mcc 7941, chip"
        ],
        [
          "2026-10-04T11:32:31Z",
          "card_purchase",
          -6,
          502.86,
          "TIM HORTONS #8817 COLUMBUS OH",
          "mcc 5814, Apple Pay"
        ],
        [
          "2026-10-04T16:25:20Z",
          "card_purchase",
          -46.86,
          456,
          "KROGER #0547 COLUMBUS OH",
          "mcc 5411, Apple Pay"
        ],
        [
          "2026-10-04T19:55:43Z",
          "card_purchase",
          -46.03,
          409.97,
          "SPEEDWAY 09412 COLUMBUS OH",
          "mcc 5542, Apple Pay"
        ]
      ]
    },
    "qualifying_deposit_originator": {
      "company_name": "TRI-COUNTY HVAC",
      "company_id": "31xxxxx407",
      "originating_bank": "A regional bank in Ohio",
      "first_seen_on_our_platform": "2023-04-07",
      "accounts_credited": 5,
      "accounts_credited_that_opened_since_2026_09_01": 1,
      "credits": "Weekly on Fridays to 5 accounts; amounts vary by person and week, except this account's fixed $400.00, which looks like a split deposit",
      "moved_out_within_30_minutes": "0 of 5",
      "comparison": "A long-standing payroll originator with steady weekly credits."
    },
    "referral_graph": {
      "referrer": {
        "id": "R1",
        "account": "x3092",
        "name": "Megan Whitaker",
        "opened": "2022-03-14",
        "joined_through": "Organic sign-up from the app store",
        "own_qualifying_deposits": "Biweekly RIVERBEND MED CTR PAYROLL credits since 2022-04",
        "devices": "An iPhone 15 (dfp_88a4e1c09f) since 2024-11 and an iPad; no device shared with this account",
        "referrals": "3 in four years: her sister (2023, Dayton OH), a coworker (2024, Columbus OH), and this account; the first two were paid and both accounts are still active",
        "phone": "(614) 555-0112, mobile, postpaid; also ported to a new carrier on 2026-08-12",
        "monthly_totals_12_months": {
          "columns": [
            "month",
            "payroll_in_usd",
            "transfers_from_marcus_bank_usd",
            "card_spend_usd",
            "mortgage_and_bills_usd",
            "p2p_net_usd",
            "ending_balance_usd"
          ],
          "rows": [
            [
              "2025-10",
              3684.31,
              900,
              1112.18,
              1825.11,
              0,
              3787.57
            ],
            [
              "2025-11",
              2433.95,
              900,
              1268.94,
              1845.57,
              0,
              4007.01
            ],
            [
              "2025-12",
              2487.32,
              900,
              1176.41,
              1822.58,
              0,
              4395.34
            ],
            [
              "2026-01",
              2487.67,
              900,
              1240.34,
              1809.48,
              0,
              4733.19
            ],
            [
              "2026-02",
              2502.96,
              900,
              721.72,
              1856.93,
              0,
              5557.5
            ],
            [
              "2026-03",
              2502.99,
              900,
              1391.72,
              1868.83,
              0,
              5699.94
            ],
            [
              "2026-04",
              2472.76,
              900,
              1525.97,
              1842.67,
              0,
              5704.06
            ],
            [
              "2026-05",
              3761.82,
              900,
              1948.96,
              1802.39,
              0,
              6614.53
            ],
            [
              "2026-06",
              2492.67,
              900,
              1140.38,
              1868.37,
              0,
              6998.45
            ],
            [
              "2026-07",
              2488.21,
              900,
              762.07,
              1824.62,
              0,
              7799.97
            ],
            [
              "2026-08",
              2478.97,
              900,
              1278.61,
              1843.46,
              0,
              8056.87
            ],
            [
              "2026-09",
              2564.53,
              900,
              1157.32,
              1830.73,
              -63.5,
              8469.85
            ]
          ]
        },
        "transactions_since_2026_09_01": {
          "note": "Every posted item on the referrer's account since 2026-09-01; amounts signed",
          "columns": [
            "ts",
            "type",
            "amount_usd",
            "balance_usd",
            "description",
            "detail"
          ],
          "rows": [
            [
              "2026-09-01T11:00:00Z",
              "ach_debit",
              -1642.18,
              6414.69,
              "HILLCREST MTG SVC MTG PYMT",
              "SEC PPD; mortgage on the Hilliard home, joint with Marcus Whitaker"
            ],
            [
              "2026-09-02T11:13:20Z",
              "card_purchase",
              -43.94,
              6370.75,
              "SPEEDWAY 09388 HILLIARD OH",
              "mcc 5542, Apple Pay"
            ],
            [
              "2026-09-04T02:41:18Z",
              "card_purchase",
              -35.83,
              6334.92,
              "AMAZON MKTPL*K20QX7BR1 Amzn.com/bill WA",
              "mcc 5942, card on file"
            ],
            [
              "2026-09-04T10:01:40Z",
              "ach_credit",
              1276.64,
              7611.56,
              "RIVERBEND MED CTR PAYROLL",
              "SEC PPD; company_name RIVERBEND MED; entry_description PAYROLL; individual_name MEGAN WHITAKER"
            ],
            [
              "2026-09-04T16:38:16Z",
              "card_purchase",
              -15.94,
              7595.62,
              "PANERA BREAD #600987 COLUMBUS OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-05T12:23:09Z",
              "card_purchase",
              -6.85,
              7588.77,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-06T02:40:07Z",
              "card_purchase",
              -33.53,
              7555.24,
              "AMAZON MKTPL*K20QX7BR1 Amzn.com/bill WA",
              "mcc 5942, card on file"
            ],
            [
              "2026-09-06T18:36:44Z",
              "card_purchase",
              -49.19,
              7506.05,
              "SPEEDWAY 09388 HILLIARD OH",
              "mcc 5542, Apple Pay"
            ],
            [
              "2026-09-06T22:47:49Z",
              "card_purchase",
              -122.44,
              7383.61,
              "KROGER #0547 COLUMBUS OH",
              "mcc 5411, Apple Pay"
            ],
            [
              "2026-09-07T12:23:24Z",
              "card_purchase",
              -7.41,
              7376.2,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-07T18:07:55Z",
              "card_purchase",
              -45.33,
              7330.87,
              "KROGER #0547 COLUMBUS OH",
              "mcc 5411, Apple Pay"
            ],
            [
              "2026-09-09T13:00:00Z",
              "card_purchase",
              -11.99,
              7318.88,
              "SPOTIFY USA NEW YORK NY",
              "mcc 5815, card on file, recurring"
            ],
            [
              "2026-09-09T13:50:08Z",
              "card_purchase",
              -7.24,
              7311.64,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-10T12:04:48Z",
              "card_purchase",
              -6.07,
              7305.57,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-11T12:59:59Z",
              "card_purchase",
              -8.45,
              7297.12,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-11T17:51:45Z",
              "card_purchase",
              -160.2,
              7136.92,
              "KROGER #0547 COLUMBUS OH",
              "mcc 5411, Apple Pay"
            ],
            [
              "2026-09-13T03:03:20Z",
              "card_purchase",
              -20.89,
              7116.03,
              "AMAZON MKTPL*K20QX7BR1 Amzn.com/bill WA",
              "mcc 5942, card on file"
            ],
            [
              "2026-09-13T10:04:01Z",
              "card_purchase",
              -6.66,
              7109.37,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-13T15:33:28Z",
              "card_purchase",
              -83.6,
              7025.77,
              "TARGET 00012211 HILLIARD OH",
              "mcc 5310, Apple Pay"
            ],
            [
              "2026-09-13T23:25:33Z",
              "card_purchase",
              -42.19,
              6983.58,
              "SPEEDWAY 09388 HILLIARD OH",
              "mcc 5542, Apple Pay"
            ],
            [
              "2026-09-16T12:17:33Z",
              "card_purchase",
              -7.65,
              6975.93,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-17T11:53:43Z",
              "card_purchase",
              -10.96,
              6964.97,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-17T23:58:15Z",
              "card_purchase",
              -64.78,
              6900.19,
              "TARGET 00012211 HILLIARD OH",
              "mcc 5310, Apple Pay"
            ],
            [
              "2026-09-18T10:01:40Z",
              "ach_credit",
              1287.89,
              8188.08,
              "RIVERBEND MED CTR PAYROLL",
              "SEC PPD; company_name RIVERBEND MED; entry_description PAYROLL; individual_name MEGAN WHITAKER"
            ],
            [
              "2026-09-18T12:38:21Z",
              "card_purchase",
              -7.93,
              8180.15,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-18T21:26:45Z",
              "card_purchase",
              -87.41,
              8092.74,
              "KROGER #0547 COLUMBUS OH",
              "mcc 5411, Apple Pay"
            ],
            [
              "2026-09-19T11:00:00Z",
              "ach_debit",
              -117.15,
              7975.59,
              "AEP OHIO ONLINE PMT",
              "SEC WEB; electric"
            ],
            [
              "2026-09-19T13:09:41Z",
              "card_purchase",
              -7.67,
              7967.92,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-09-21T00:59:41Z",
              "card_purchase",
              -54.79,
              7913.13,
              "TARGET 00012211 HILLIARD OH",
              "mcc 5310, Apple Pay"
            ],
            [
              "2026-09-21T13:03:12Z",
              "p2p_out",
              -150,
              7763.13,
              "To Marcus Whitaker (our app)",
              "memo 'groceries + gas this week'"
            ],
            [
              "2026-09-22T11:00:00Z",
              "ach_debit",
              -71.4,
              7691.73,
              "COLUMBIA GAS OH BILL PAY",
              "SEC WEB; gas"
            ],
            [
              "2026-09-23T21:03:02Z",
              "card_purchase",
              -88.93,
              7602.8,
              "KROGER #0547 COLUMBUS OH",
              "mcc 5411, Apple Pay"
            ],
            [
              "2026-09-24T20:34:03Z",
              "card_purchase",
              -47.43,
              7555.37,
              "TARGET 00012211 HILLIARD OH",
              "mcc 5310, Apple Pay"
            ],
            [
              "2026-09-27T00:28:06Z",
              "card_purchase",
              -62.36,
              7493.01,
              "KROGER #0547 COLUMBUS OH",
              "mcc 5411, Apple Pay"
            ],
            [
              "2026-09-27T10:00:30Z",
              "ach_credit",
              900,
              8393.01,
              "M WHITAKER TRANSFER",
              "SEC PPD; from an account at a large national bank in Marcus Whitaker's name; monthly since 2022"
            ],
            [
              "2026-09-28T23:12:40Z",
              "p2p_in",
              86.5,
              8479.51,
              "From Marcus Whitaker (our app)",
              "memo 'my half of the electric'"
            ],
            [
              "2026-09-30T12:53:54Z",
              "card_purchase",
              -9.66,
              8469.85,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-10-01T11:00:00Z",
              "ach_debit",
              -1642.18,
              6827.67,
              "HILLCREST MTG SVC MTG PYMT",
              "SEC PPD; mortgage on the Hilliard home, joint with Marcus Whitaker"
            ],
            [
              "2026-10-01T12:02:59Z",
              "card_purchase",
              -5.77,
              6821.9,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-10-02T00:16:49Z",
              "card_purchase",
              -29.52,
              6792.38,
              "AMAZON MKTPL*K20QX7BR1 Amzn.com/bill WA",
              "mcc 5942, card on file"
            ],
            [
              "2026-10-02T10:01:40Z",
              "ach_credit",
              1240.68,
              8033.06,
              "RIVERBEND MED CTR PAYROLL",
              "SEC PPD; company_name RIVERBEND MED; entry_description PAYROLL; individual_name MEGAN WHITAKER"
            ],
            [
              "2026-10-03T12:44:39Z",
              "card_purchase",
              -6.98,
              8026.08,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ],
            [
              "2026-10-03T16:00:00Z",
              "card_purchase",
              -44,
              7982.08,
              "OHIO STATE ATHLETICS COLUMBUS OH",
              "mcc 7941, chip"
            ],
            [
              "2026-10-04T00:39:46Z",
              "card_purchase",
              -47.78,
              7934.3,
              "AMAZON MKTPL*K20QX7BR1 Amzn.com/bill WA",
              "mcc 5942, card on file"
            ],
            [
              "2026-10-04T13:01:59Z",
              "card_purchase",
              -9.64,
              7924.66,
              "STARBUCKS STORE 14420 HILLIARD OH",
              "mcc 5814, Apple Pay"
            ]
          ]
        }
      },
      "referees_of_R1": {
        "columns": [
          "account",
          "name",
          "opened",
          "address",
          "device_id",
          "qualifying_deposit",
          "status",
          "referral_reward"
        ],
        "rows": [
          [
            "x1450",
            "Lauren Pryor",
            "2023-05-20",
            "Dayton OH 45429",
            "dfp_02c9e7d1a8",
            "DAYTON PUBLIC SCH payroll, biweekly",
            "Open, active",
            "Paid 2023-06-09"
          ],
          [
            "x6633",
            "Tamara Ellis",
            "2024-08-03",
            "Columbus OH 43229",
            "dfp_6b10f4e2e3",
            "RIVERBEND MED CTR payroll, biweekly",
            "Open, active",
            "Paid 2024-08-23"
          ],
          [
            "x7718",
            "Marcus Whitaker",
            "2026-09-06",
            "Hilliard OH 43026 (same as R1)",
            "dfp_31d0b7a2c4",
            "TRI-COUNTY HVAC payroll, weekly",
            "Under review",
            "Held 2026-09-18 (this review)"
          ]
        ]
      }
    },
    "linked_accounts": {
      "note": "Accounts sharing an attribute with x7718, from our link analysis",
      "columns": [
        "link",
        "accounts"
      ],
      "rows": [
        [
          "Same address (Hilliard OH 43026)",
          "x3092 Megan Whitaker (the referrer), customer since 2022"
        ],
        [
          "Same home IP 198.51.100.42",
          "x3092 Megan Whitaker"
        ],
        [
          "Same surname",
          "x3092 Megan Whitaker"
        ],
        [
          "P2P between the accounts",
          "$150.00 from Megan on 2026-09-21; $86.50 to Megan on 2026-09-28"
        ],
        [
          "Same device_id, payout card, phone, email or SSN",
          "None"
        ]
      ]
    },
    "reward_history": {
      "this_account": "None before this reward",
      "referrer": "Two referrer rewards (2023-06-09, 2024-08-23) and $212.40 in debit card cash back since 2022; no clawbacks",
      "household": "No other account at this address has ever existed on our platform"
    },
    "customer_contact": [
      {
        "ts": "2026-09-29T23:12:45Z",
        "channel": "In-app chat",
        "account": "x3092 (the referrer)",
        "summary": "Megan asked when the referral bonus would arrive: 'My husband signed up with my link and his paycheck has been going in for two weeks.' The agent told her it was being reviewed."
      }
    ],
    "rules_fired": [
      "REF-02 referee and referrer share a home address",
      "REF-03 referee signed up from an IP address the referrer uses",
      "ID-07 referee phone number ported in the last 60 days"
    ],
    "rewards_risk_score": 64,
    "reward_under_review": {
      "reward": "Referral reward: $50 to this account (referee) and $50 to Megan Whitaker (referrer)",
      "promotion": "Give $50, Get $50",
      "triggered_by": "TRI-COUNTY HVAC ACH credit of $400.00 posted 2026-09-18T10:02:11Z, counted as a qualifying direct deposit (SEC PPD)",
      "held_at": "2026-09-18T10:05:00Z",
      "reviewed_at": "2026-10-05T14:25:00Z",
      "balance_now_usd": 409.97
    }
  },
  "questions": {
    "abuse_likelihood": {
      "type": "score",
      "instructions": "From the promotion owner's point of view, how likely is it that this reward is being claimed through abuse: by someone the terms exclude (an extra account of a person who already has one, a self-referral), or through qualifying activity that was faked, staged or paid for with money that will be reversed? A customer who simply meets the terms, even one who joined mainly for the reward, is not abuse.",
      "criteria": [
        "Very unlikely (under 10%)",
        "Unlikely (10-40%)",
        "Uncertain (40-60%)",
        "Likely (60-90%)",
        "Very likely (over 90%)"
      ]
    },
    "abuse_pattern": {
      "type": "choice",
      "instructions": "Which best describes how this reward was earned?",
      "criteria": {
        "legitimate": "No abuse: an eligible customer earned the reward through genuine qualifying activity",
        "multi_accounting": "Multi-accounting: a person who already has or had an account with us opened another, under their own or someone else's identity, to claim a one-per-person reward again",
        "referral_ring": "Referral ring: referral rewards collected through referred accounts that the referrer controls or recruited only to collect the reward, however their qualifying activity was produced",
        "fake_offer_completion": "Faked qualifying activity outside a referral scheme: sign-up, offer or cash-back rewards earned with completions from bots, emulators or install farms, or with deposits or purchases staged only to trigger the reward and then reversed or moved straight back",
        "bonus_bust_out": "Bust-out: rewards collected and the balance cashed out with money that is later returned or charged back, leaving us with a loss",
        "other_abuse": "Another kind of abuse of the promotion terms"
      }
    },
    "linked_to_other_accounts": {
      "type": "noul",
      "instructions": "Is the account under review controlled by the same person as one or more other accounts on our platform? Judge from shared devices, payment and payout methods, addresses, phone numbers, emails and identity details. A shared public or mobile-carrier network, or a family member with their own identity, phone and payment methods, does not make it the same person."
    },
    "action": {
      "type": "choice",
      "instructions": "What should we do with the reward under review?",
      "criteria": {
        "pay": "Pay the reward now",
        "hold_for_review": "Keep holding the reward and send the account to an analyst, who may ask the customer for more information or verification, before paying or denying",
        "deny": "Deny this reward under the promotion terms and keep the account open",
        "deny_and_close": "Deny the reward, claw back other rewards earned the same way, and close the account and the accounts it controls under the account agreement"
      }
    }
  }
}