Use cases

Spot a customer being coached by a scammer mid-conversation

UK rules. Reads a fraud chat or call every few turns for signs someone else is steering the customer. Signals for a trained person, not a payment decision.

Try it on this example

Example · A held payment to a trading platform, with the account manager on the other line

Channel (chat or call transcript): call transcript

The conversation so far, with speaker labels

Agent: Thank you for calling Harbour Bank fraud prevention, you're speaking with Leah. Calls are recorded. Can I take your name, please? Customer: Hi, it's Pat Gorman. I had a text saying a payment's been held and I need to ring you to release it. Agent: Thanks, Pat. I'll take you through security first. Can you confirm your date of birth and the first line of your address? Customer: Fourteenth of May, 1961, and it's 22 Sorrel Grove. Agent: Thank you. I've sent a code to your phone. Can you read it to me? Customer: Hang on. Four, seven, one, nine, two, six. Agent: That's you through, thank you. I can see a payment of fourteen thousand five hundred pounds to a new payee, set up this morning in the app. It's been held for a check. Can you tell me a bit about it? Customer: It's just a payment to my own account. I need it to go through today, please. Agent: Of course. When you say your own account, is that an account in your name at another bank? Customer: It's with a trading platform. Veltora Markets. It's in my name. Agent: Okay. And what's the money for? Customer: It's, er, for some home improvements. A new kitchen. Agent: For a kitchen, through a trading platform? Customer: Sorry, no. It's an investment. I'm buying into a crypto fund. I didn't think it mattered. Agent: That's fine, it helps me understand. How did you hear about Veltora? Customer: I saw an advert on social media, with a presenter off the telly recommending it. I filled in a form and an account manager rang me back. Daniel. He's been really helpful. Agent: Have you invested with them before? Customer: Yes, I put in two hundred and fifty pounds in August, and it's grown to nearly four thousand. I even took a hundred and eighty out last month, so I know it's real. Agent: And is Daniel helping you with this payment today? Customer: He's on the other line, actually, on my mobile. He's just listening in case you ask something technical. Agent: Okay. Did Daniel tell you what to say if we called? Customer: He said you might ask. He said to say it was for home improvements, because banks don't like crypto and they'll try to stop you making money. He says the banks are in on it with the big funds. Agent: I see. Has anyone asked you to download an app, or to let them see your screen? Customer: No, nothing like that. He just talks me through it on the phone. Agent: And why does it need to go today? Customer: There's a price window on the fund that closes at four o'clock. If it misses that I lose the bonus allocation, which is about six thousand pounds. Daniel says it only comes round once a year. Agent: Thanks for explaining. I do need to let you know that we see a lot of scams at the moment, so please be careful with any payment you make. Customer: I am being careful, that's why I've done my research. Can you just put it through? Agent: Before I do anything, can I ask where the money has come from? Customer: It's most of my savings. The rest is from my ISA, which I cashed in last week. Daniel said the ISA was losing money compared with the fund. Agent: Okay. Customer: My son did say it sounded too good to be true when I told him. I don't know. Daniel says that's what everyone says before they see the returns. Can you tell if it's a proper company? Agent: Let me put you on hold for a moment while I check a couple of things. Customer: Please be quick, he's saying it's nearly three.
  1. Is the customer asking the bank to make, release or allow a payment, a transfer or a higher limit in this conversation?Yes99%
  2. Does someone else appear to be telling the customer what to do or say in this conversation?Yes99%
  3. Do the customer's answers about the payment look scripted, changed or refused?Yes98%
  4. Has the customer been told to keep the payment secret or not to trust the bank?Yes98%
  5. Does the customer mention installing an app or software for someone, or someone seeing or using their screen?No86%
  6. Does the customer say the payment must happen now because of a deadline, a threat or a loss if they wait?Yes99%
  7. Which scam story, if any, does the conversation most resemble?Investment100%
  8. Does the customer express any doubt or worry about whether the payment or the person behind it is genuine?Yes97%
  9. What scam warning has the agent given so far in the conversation?General warning only100%
  10. How strongly does the conversation show the signs of a scam in progress?Strong100%
  11. What should the agent do next in this conversation?Bring in a fraud specialist now97%

These are real answers stored from one run on this example.

The prism behind it

Spot a customer being coached by a scammer mid-conversation11 questions

Fields

  • Channel (chat or call transcript)
  • The conversation so far, with speaker labels

Context

These are live chats and calls between a UK bank's fraud and payments agents and a customer, usually about a payment the bank has held, a new payee, or a request to raise a limit. The text is the conversation so far, read again every few turns while the customer is still there. Victims of impersonation, investment and romance scams often speak to the bank while the scammer coaches them on another line or has told them what to say beforehand. Under the UK rules on authorised push payment (APP) scams, the sending and the receiving firm share the cost of reimbursing most victims, so the moment the customer speaks to the bank is the best chance to break the spell. The scam stories the fraud team works with: bank or police impersonation, other impersonation, investment, romance, purchase from a stranger, invoice or bank detail change, advance fee, job or task scams, and a relative on a new number. The signs of coaching: someone else telling the customer what to do or say, a cover story, being told to keep it secret or not to trust the bank, someone on the customer's screen, and a deadline or threat. The customer is treated as a possible victim, never as a suspect. Judge only what is said. Never treat an accent, a language, a name, an age or a place as a sign, and do not count short, nervous or unclear answers on their own. Some victims show no signs at all, so these answers add to transaction monitoring and never replace it. Amounts, payee history and device data are checked elsewhere. The answers prompt the agent and alert a team leader. Whether a payment is released, held or returned is decided by a trained person, never by these answers.

Questions

  1. Is the customer asking the bank to make, release or allow a payment, a transfer or a higher limit in this conversation? Yes / No

    Count a request to release a held payment, to send a new payment, to add or confirm a payee, to raise a daily or single payment limit, or to unblock a card or account so a payment can go through. Yes: The customer is asking for money to move, or for a limit or block to change so it can. No: The conversation is about something else, such as a balance, a lost card or a question, and no payment or limit is asked for.

  2. Does someone else appear to be telling the customer what to do or say in this conversation? Yes / No

    Count "they said", "he told me to say", someone listening or talking on another line, the customer checking with someone before answering, or a named adviser, account manager or official who is guiding the payment. A relative helping at the customer's request, with no one else directing them, does not count. Yes: Someone other than the customer is directing the payment, the answers or the story. No: The customer speaks and decides for themselves, with no sign that anyone is steering them.

  3. Do the customer's answers about the payment look scripted, changed or refused? Yes / No

    Count a reason for the payment that changes during the conversation, a reason the customer says they were told to give, answers that sound read out, and refusing to say what the payment is for ("why do you need to know, it's my money"). Do not count short, hesitant or unclear answers, a language the customer is less at home in, or a customer who is simply annoyed by the check. Yes: At least one answer about the payment or the payee looks scripted, changes, or is refused. No: The customer explains the payment in their own words and the explanation holds together.

  4. Has the customer been told to keep the payment secret or not to trust the bank? Yes / No

    Count being told not to tell the bank, family or friends; being told the bank will try to stop the payment, is in on a fraud, or has staff involved in one; and being told to give the bank a false reason. Yes: The customer mentions at least one such instruction or belief. No: Nothing of this kind is said.

  5. Does the customer mention installing an app or software for someone, or someone seeing or using their screen? Yes / No

    Count screen-sharing or remote access apps, an app installed at someone's request, someone logging in for the customer, or someone watching their screen or phone while they make the payment. Yes: The customer mentions something of this kind. No: Nothing of this kind is mentioned, or the customer says no one has access to their device.

  6. Does the customer say the payment must happen now because of a deadline, a threat or a loss if they wait? Yes / No

    Count a stated deadline, a price window, a bonus or opportunity that will be lost, or a threat such as arrest, a fine or losing their money. An ordinary due date, such as rent due on the first of the month, does not count. Yes: The customer puts the payment under pressure of time or threat. No: No pressure of time or threat is stated.

  7. Which scam story, if any, does the conversation most resemble? Choice

    Pick the one scam story named in the context that the conversation most resembles. Choose No scam story when the customer describes an ordinary payment. Judge the story, not the payee name.

    • No scam story An ordinary payment such as rent, a bill, a purchase from a known seller or money to family, with nothing that fits a scam story.
    • Bank or police impersonation Someone claiming to be from the bank, the police or another authority says the customer's money is at risk and must be moved to keep it safe.
    • Other impersonation Someone claiming to be from a tax office, a utility, a delivery firm or a phone company asks for payment of a bill, a fine or a fee.
    • Investment Crypto, a trading platform or a fund promising high or guaranteed returns, usually found online or through an adviser who made contact first.
    • Romance or friendship Money for someone the customer knows only online or has never met in person, often for travel, a medical bill or an emergency.
    • Purchase from a stranger Goods, a pet, tickets, a vehicle or a rental deposit paid by bank transfer to a seller found online, usually before seeing the item.
    • Invoice or bank detail change A supplier, builder, solicitor or landlord has sent new bank details for a payment the customer expected to make.
    • Advance fee A fee paid to release a loan, a prize, an inheritance, a parcel or a refund.
    • Job or task scam Paying to unlock earnings, commission or a job that comes from online tasks, reviews or orders.
    • Relative on a new number A message claiming to be from a child or another relative with a new phone number asks for money urgently.
  8. Does the customer express any doubt or worry about whether the payment or the person behind it is genuine? Yes / No

    Count the customer wondering aloud, repeating a relative's or friend's warning, asking the agent whether the company or person is real, or saying something feels wrong. This is the moment the agent can use, so count it even when the customer goes on to insist on the payment. Yes: The customer voices at least one doubt, worry or question of this kind. No: The customer voices no doubt about the payment or the person behind it.

  9. What scam warning has the agent given so far in the conversation? Choice

    Judge only what the agent has said so far. A tailored warning names the scam the conversation resembles and the signs of it in this customer's own story. Pick one option.

    • Tailored warning The agent names the kind of scam this looks like and explains the signs of it in the customer's own story, such as an adviser telling them what to say.
    • General warning only The agent gives only a general caution, such as "we see a lot of scams", without linking it to what the customer has described.
    • No warning The conversation shows signs of a scam and the agent has given no scam warning of any kind.
    • No warning needed The conversation shows no sign of a scam, and the agent has given no warning because none is called for.
  10. How strongly does the conversation show the signs of a scam in progress? Scale

    Rate how clearly the conversation, taken as a whole, shows one of the scam stories or the signs of coaching named in the context. Rate what is said, not the person and not the amount.

    • None An ordinary conversation. Nothing fits a scam story or a sign of coaching.
    • Faint One weak sign, such as a vague reason or a passing mention of an online adviser, with no story behind it.
    • Clear A recognisable scam story, or several signs that point the same way.
    • Strong A clear scam story together with coaching, secrecy, a cover story, remote access or a deadline.
  11. What should the agent do next in this conversation? Choice

    Suggest the next step for the agent, a trained person who decides. None of these steps releases, holds or returns a payment; the fraud specialist decides that with the customer. Pick one option.

    • Continue normally Nothing in the conversation calls for more than the usual checks.
    • Ask open questions Something does not add up. The agent uses the scam conversation script and asks open questions about the payment and who suggested it, in the customer's own words.
    • Bring in a fraud specialist now The conversation shows a scam story or coaching. The agent brings in a fraud specialist while the customer is still on the line.

Lens columns

payment_at_stake, payment_at_stake_probability, someone_directing, someone_directing_probability, cover_story, cover_story_probability, secrecy_or_distrust, secrecy_or_distrust_probability, remote_access, remote_access_probability, urgency, urgency_probability, scam_story, scam_story_probability, customer_doubt, customer_doubt_probability, warning_given, warning_given_probability, signal_strength, signal_strength_average, suggested_step, suggested_step_probability

Run it on your own text

Add this prism in the app, change any question, and test it on a file of your own.

Ask for an invite