Non-linear scenario — your choices change the path and the ending.
Branching scenario · interactive HTML5
It's 02:14. You're on call.
A card-testing attack just lit up the payments dashboard. You're the on-call risk analyst — the only one awake. What you do in the next twenty minutes decides how much money walks, how many real customers get hurt, and what your lead thinks of you in the morning.
ReadDiagnose the attack before you swing — the right control matches the pattern.
BalanceOver-blocking kills real revenue. Under-reacting bleeds fraud. Both cost you.
CommunicateContain first, then escalate with data. Silence and noise both burn trust.
The attacker adapts to your moves. Six possible endings. Keys 1/2/3.
Incident closed
Resolved
AIncident grade—
€0
Fraud lost
Low
Customer impact
Neutral
Leadership trust
How a strong responder runs this
Diagnose, then act. The signature (micro-auths, one BIN range, datacenter ASNs, velocity) tells you the control: rate-limit + block that BIN + those ASNs. Panic-blocking everything trades a fraud loss for a bigger revenue loss.
Don't chase IPs. A bot rotates IPs in seconds. Target the durable signals — BIN range and velocity — or you fall behind the attack.
Contain, then communicate. A crisp incident note — what happened, what you did, what you recommend — earns trust. Going silent blindsides leadership; mass-paging everyone is crying wolf.