B2C Transaction monitoring

The Orca engine combines battle-tested rules with advanced machine learning to catch suspicious patterns the moment they emerge. Orca analyzes every transaction across your payment channels – from credit cards to crypto – giving you a complete view of user risk.

Key features:

• Instant screening of fiat and crypto payments
• Smart detection of velocity attacks and suspicious patterns
• Device fingerprinting and behavioral analytics
• Automated blocking of high-risk transactions
• Clear risk decisioning and investigation tools

Integration Workflows

Orca offers two different integration approaches depending on your transaction processing needs. Real-time Transaction Screening is recommended for transaction processing with a ~300ms tolerance, and Time-Sensitive Transaction Screening for processing with less than 100ms tolerance.

Note that the integration configuration is enabled through Client settings, and requires no specific field to be sent.

1. Real-Time Transaction Screening

This workflow provides immediate risk assessment before a transaction is initiated. The transaction should only be processed by the client if the risk assessment indicates it’s safe to proceed.

Key Characteristics:

• Transaction is fully evaluated before processing
• Client awaits risk decision before initiating transaction
• Provides definitive risk assessment upfront

2. Time-Sensitive Transaction Screening

This workflow allows for initial transaction processing with a preliminary real-time risk assessment, followed by a more comprehensive evaluation of more complex rules via webhook. This approach is ideal for time-sensitive transactions where immediate processing is required.

Key Characteristics:

• Initial quick screening allows time-sensitive transaction processing, this includes assessment of whether the user is blocked, transaction above a threshold etc.
• Final thorough risk assessment and recommended action delivered via webhook
• Client can take remedial action based on final assessment
• Ideal for real-time payment systems that require immediate response
• Post-transaction actions may include: removal from settlement file, transaction reversal, or account restriction

End-to-end Flow Example - Real-time Processing

Account Creation

1. Client sends POST request to /v1/user with account details in request body
2. API validates request format and required fields (email, password, user details)
3. On success, returns newly created user object with 201 status code

Wallet Funding

4. Client initiates deposit via POST /v1/transaction with {amountUsd: 50, type: "deposit"}
5. API validates user has sufficient external funds and account is in good standing
6. System returns a low risk level which means we can proceed with the transaction
7. Upon successful funding, wallet balance is updated and transaction record is created

Crypto Withdrawal

8. Client requests withdrawal: POST /v1/transaction with {amount: 20, type: "crypto_withdrawal"}
9. System automatically flags withdrawal for security verification due to fraud engine rules
10. API returns {riskLevel: "high", recommendedAction: "STEP_UP_AUTH"}
11. User must submit facial scan via Passkey authentication
12. On successful verification, withdrawal is processed and funds are sent to specified crypto address