Skip to main content
Use the user card to connect an account’s risk category with concrete identification and event evidence.

​
1. Find the account

In Analytics > Users, search the pseudonymous User HID, or filter by a High-Risk Event. Select the correct domain and activity period, then open the account.

​
2. Read the current risk and activity

Check the category’s evaluation time, event confidence and coverage messages. The risk band split describes the selected activity; the current category can use a wider identification history. Read High-Risk Events separately.

​
3. Open a cluster

In High-Risk Event clusters, choose a cluster. Read the event type, confidence and domain, then follow its accounts, evidence anchor or compared observations. Select a node to open the available card or Identification ID. For Multi-accounting, inspect which accounts share the evidence. For sharing, travel or takeover, inspect the device observations and timing. Keep partial or missing-evidence notices with your assessment.

​
4. Inspect the identifications

Open relevant Identification IDs and read the actual score, flags, network and source. Use Details to follow linked devices or IPs. A shared IP alone needs further context.

​
5. Record the action

Connect the User HID to your application account. Record the evidence, time and reason for a verification step, account review, reward hold or recovery action in your own case system. For an automated workflow, receive scored and group-change webhooks, preserve their separate payloads and apply idempotent processing. Next: User cards and graphs, High-Risk Events, Acting on results.