What Flggd sees that a bank does not

A scam starts as a conversation. By the time a payment reaches the bank, the persuasion is already finished. Flggd sees the messages that come first.

The gap

What the bank sees, against what Flggd seesA scam timeline from the first message on day zero to the payment. Flggd sees the early messages a customer forwards, from the first message through trust and pressure; the coaching before the payment it usually does not see. The bank sees nothing until payment day, and then only the payment. The bank sees the payment, never the conversation.What Flggd seesfrom what the customer forwardsWhat the bank seesfrom its own systemsDay 0The first messageThenA replyHours or weeksTrust, then pressureBefore the paymentCoachingPayment dayThe paymentNothingNothingNothingNothingThe paymentThe gap: everything before the paymentWhat the bank sees, against what Flggd seesA scam timeline from the first message on day zero to the payment. Flggd sees the early messages a customer forwards, from the first message through trust and pressure; the coaching before the payment it usually does not see. The bank sees nothing until payment day, and then only the payment. The bank sees the payment, never the conversation.WhatFlggd seesWhat thebank seesDay 0The firstmessageNothingThenA replyNothingHours or weeksTrust, thenpressureNothingBefore the paymentCoachingNothingPayment dayThe paymentThepaymentThe gap

Choose a moment to see what happened, what Flggd saw and what the bank saw.

Day 0

The first message

What happened
A message arrives that looks ordinary: a delivery notice, a wrong number, a job offer. Its only aim is a reply.
What Flggd saw
The message itself, when the customer forwards it.
What the bank saw
Nothing. It arrived on a channel the bank cannot see.

Then

A reply

What happened
The customer answers. The people who reply have selected themselves for the scam.
What Flggd saw
The conversation, as the customer forwards it.
What the bank saw
Nothing. No account event exists.

Hours or weeks

Trust, then pressure

What happened
Rapport, a small proof that it is real, then urgency and secrecy.
What Flggd saw
The tactics, in the messages the customer forwards.
What the bank saw
Nothing in the data. At most a new payee or a raised limit, each unremarkable on its own.

Before the payment

Coaching

What happened
The customer is told what to say to the bank, and to expect the bank to try to stop it.
What Flggd saw
Usually nothing. Coaching happens on calls and in chats that people rarely forward.
What the bank saw
A confident customer with an answer to every question.

Payment day

The payment

What happened
The customer authorises the payment themselves, so it clears.
What Flggd saw
Only what the customer forwarded earlier, if they did.
What the bank saw
The payment, and nothing that caused it.

The bank sees the payment, never the conversation.

The same gap, in the paper's Figure 1.

White paper · October 2026

The permission without the evidence

What FinCEN's June 2026 section 314(b) guidance changes for fraud, and what it still leaves unsolved.

Written for fraud, financial crimes and compliance leaders. About fifteen minutes to read.

Read the 314(b) paper

The five stages of a scam, and who sees each oneFive stages: 0 Targeting, 1 Approach, 2 Deception, 3 Transaction, 4 Post-fraud. Flggd acts at every stage. A bank sees only the last two, the payment and what happens to the money afterwards. Exposure Shield sits at stage 0.0TargetingStolen or sold data1ApproachFirst contact2DeceptionThe pressure3TransactionThe payment4Post-fraudThe money movesExposure ShieldFlggd acts at every stageHidden from the bankWhat a bank seesThe five stages of a scam, and who sees each oneFive stages: 0 Targeting, 1 Approach, 2 Deception, 3 Transaction, 4 Post-fraud. Flggd acts at every stage. A bank sees only the last two, the payment and what happens to the money afterwards. Exposure Shield sits at stage 0.FlggdactsBanksees0TargetingStolen or sold dataExposure Shield1ApproachFirst contact2DeceptionThe pressure3TransactionThe payment4Post-fraudThe money moves

Choose a stage to see what happens, what a bank sees and where Flggd acts. Arrow keys move between stages.

Stage 0 · hidden from the bank

Targeting

What happens
Names, numbers, emails and account details are stolen, scraped or bought, then combined into profiles of likely targets.
What a bank sees
Nothing. Its customers' data is traded outside anything the bank monitors.
Where Flggd acts
Exposure Shield shows what is exposed about a person before anyone makes contact.

Products at this stage: Exposure Shield

Stage 1 · hidden from the bank

Approach

What happens
Automated messages, direct messages and social platforms, often using personal data to profile the target.
What a bank sees
Nothing. The contact happens on channels the bank does not see.
Where Flggd acts
The customer forwards the message and gets a verdict in seconds, with the reasons named.

Products at this stage: Flggd app, SafeLine

Stage 2 · hidden from the bank

Deception

What happens
Impersonation, urgency, fear, authority or affection, built into a story the target believes.
What a bank sees
Usually nothing. Sometimes the customer mentions it, after the money has gone.
Where Flggd acts
Colloquy stays in the conversation with the scammer, so Flggd sees the pressure as it is applied: the story and the tactics.

Products at this stage: Colloquy

Stage 3 · a bank sees this stage

Transaction

What happens
The customer authorises the payment. To the bank it looks like a genuine instruction from a genuine customer.
What a bank sees
The payment: payee, amount, device and behaviour. Not the conversation that caused it.
Where Flggd acts
A protective hold, decided by an authorised person. Flggd never releases a payment on its own.

Products at this stage: SafeHold

Stage 4 · a bank sees this stage

Post-fraud

What happens
The money moves through mule accounts and virtual assets, and quickly becomes hard to trace.
What a bank sees
The outbound flows, the receiving accounts and the fraud report.
Where Flggd acts
The forwarded conversation, for the investigation and the report.

Products at this stage: Recovery guidance

Transaction monitoring sees a customer's own money leaving the customer's own account, authorised by the customer. In a scam where the customer is persuaded to pay, every one of those signals looks normal. The evidence is in the texts, calls and chats that came before, and they never reach the bank. People send those messages to Flggd to check them. Each one shows who is targeting customers, how, and with what words, often before any payment is attempted. That is what Flggd gives an institution: the scam, while it is still a conversation.

Or talk to someone for thirty minutes. Book a call

Worried about someone in your own family?

Check a message free.

Every example on this page is a real scam, recreated by Flggd
How we decide what is a scam