Case detail
Prosecutor, defender, and judge perspectives from Supabase.
May 16, 2026 at 17:25:25 · luxury watch · IP 203.115.88.11
Agent
Claude Shopper v2
Operator
Anthropic
TAP
Present
This transaction is conclusively fraudulent. The transaction amount of $48,500 for a luxury watch is exceptionally suspicious, exceeding the peer median for a premium tier customer by a large margin (the customer's average spend is $17,786 in 16 purchases over 90 days). The merchant match score is only 0.35, indicating poor alignment with expected merchant behavior for such purchases, reinforcing that this transaction deviates from normal patterns. The IP address used (203.115.88.11 from Singapore) has a suspicious reputation, being a new IP for this premium customer from Sri Lanka (LK), well outside their usual geographic footprint, signaling possible IP spoofing or unauthorized use. The agent, Claude Shopper v2, although registered with a moderate reputation score of 0.78, has one blocked transaction in 14 events in the last 30 days, raising concerns about reliability. The behavioral signals show a basket entropy of only 0.267, indicating low variability that may suggest scripted or automated fraudulent behavior. Moreover, the tap signature is still pending, raising authenticity doubts. Prior similar cases involving this agent include blocking and step-up verifications, confirming a pattern of risk associated with such transactions. Collectively, the unusual amount, suspicious IP origin, poor merchant match, agent's questionable transaction history, and behavioral anomalies unequivocally demonstrate this transaction is fraudulent and should be blocked immediately.
- tool
Transaction amount ($48,500) significantly exceeds customer's 90-day average spend ($17,786) and merchant match score is low (0.35), indicating unusual spending behavior.
- tool
IP reputation is suspicious; new Singapore IP for a premium customer based in Sri Lanka, indicating likely IP spoofing or unauthorized access.
- tool
Agent 'Claude Shopper v2' has a reputation score of 0.78 with one blocked transaction out of 14 in 30 days, showing reliability concerns.
- tool
Behavioral signals show low basket entropy (0.267) and zero velocity score, consistent with scripted or non-human fraudulent activity.
- tool
Pending tap signature and prior similar cases with verdicts including 'block' and 'step-up' reinforce the fraud risk.
This transaction is legitimate based on multiple strong, positive indicators. The customer, Anjali Perera, is a verified premium tier user with a consistent purchase history, including 16 purchases in the last 90 days with an average amount of 17,786, and 8 prior luxury watch purchases, showing a clear affinity for high-value items like the one in this purchase. The agent, Claude Shopper v2, is registered with a reputable operator (Anthropic) and holds a solid reputation score of 0.78, indicating reliability and trustworthiness. The TAP signals have been verified, confirming the authenticity of the transaction flow: the agent is registered, a public key was found, and the transaction was authorized. Although the IP is flagged as suspicious due to it being a new Singapore IP for this premium customer, this is a reasonable explanation consistent with a premium customer's possible travel or VPN use. Additionally, the customer's KYC status is verified, further supporting legitimacy. Transaction history shows 14 events in the last 30 days totaling 284,350 with only 1 blocked event, indicating a strong overall positive transaction record. Lastly, the similar cases evidence includes a prior 'allow' verdict for comparable situations, supporting the benign nature of this kind of transaction. Taken together, these factors strongly support the legitimacy of the $48,500 purchase of a luxury watch by this verified premium customer.
- tool
Customer Anjali Perera is verified and premium tier with 16 purchases in 90 days, avg amount 17,786, and 8 prior watch purchases indicating consistent pattern for luxury watch buying.
- tool
Agent Claude Shopper v2 is registered, operated by Anthropic, with a solid reputation score of 0.78, supporting trustworthiness.
- tool
TAP verification is confirmed: agent registered, public key present, verified transaction flow.
- tool
Transaction history shows 14 events in 30 days with total value 284,350 and only 1 blocked event, indicating strong transaction legitimacy overall.
- tool
Similar cases include an 'allow' verdict in comparable scenarios, reinforcing positive legitimacy precedent.
- tool
Customer KYC status is verified, providing regulatory compliance and identity validation.
The customer is a verified premium tier user with a consistent history of luxury watch purchases and a verified TAP, supporting transaction legitimacy. However, the transaction amount is significantly above the customer's average and peer median, and the IP is suspicious as it is a new Singapore IP for a premium Sri Lankan customer, indicating possible risk. The agent, despite a moderate reputation and a blocked transaction in history, is registered and trustworthy overall. Considering premium tier, verified TAP, amount above $40k, suspicious IP, and luxury basket, the preferred action is a step-up to require strong authentication rather than block or allow outright, balancing risk and user experience.
Step-up