← All case studies Fintech · payments · €3.2B / yr

Cobalt Pay knotted a fraud ring in real time.

A static rules engine kept missing coordinated fraud while flagging good customers. Knot detection wove transaction, device and support threads — and caught the ring as it formed.

0%
fraud loss
0%
false positives
0
faster recon
<2 min
to tie a knot
The challenge

Rules that fought yesterday's fraud.

Cobalt Pay's fraud defence was a thicket of static rules. It was simultaneously too tight — declining real customers and generating a flood of false positives — and too slow, because new fraud patterns outran the team's ability to write rules for them. Reconciliation across payment providers took days, so losses were often confirmed long after the money was gone.

"We were tuning a smoke detector by hand while the building changed shape," said Inès Lefèvre, Head of Risk.

The weave

Six threads, watched continuously.

Rather than write more rules, Cobalt mounted their signals as live threads and let the loom watch the whole weave for anomalies — tying a knot the instant a pattern frayed, with the likely cause already worked out.

Transactions · Postgres Device · Kafka Chargebacks · PSP Support · Zendesk KYC · API Ledger · warehouse
The Loom
Live risk tapestry
What surfaced

One knot caught the ring.

Knot tied · <2 min
A bust-out ring, forming live. The loom linked a cluster of fresh accounts sharing device fingerprints and funding cards, ramping micro-transactions in lockstep — a coordinated bust-out the rules engine read as ordinary new signups.
Pattern · 95% confidence
False positives had one source. 42% of declines traced to a single velocity rule firing on one legitimate merchant category. Relaxing it cut false positives without raising true fraud.
Pattern · 90% confidence
Reconciliation broke on FX timing. Recon mismatches traced to settlement-time differences between two providers — a fix that turned days of manual matching into minutes.

It caught a ring we hadn't even named yet — and stopped declining the customers we actually wanted.

The result

Less fraud, fewer false alarms, faster books.

Within a quarter, fraud loss fell 58% while false positives dropped 42% — fewer good customers turned away, less money out the door. Reconciliation that once took days now closes 3.5× faster, and the loom ties most knots in under two minutes, long before a loss is realised.

"The rules didn't disappear," Lefèvre said. "But now the loom finds the pattern, and we write the rule once we understand it — not the other way around."

Read your own cloth.

Weave a free sample and see your first pattern in minutes.