ITHAX / RISK INTELLIGENCE

Fraud looks different
when you can see
the whole graph.

Ithax connects accounts, devices, networks and blockchain activity into one live risk picture.

12 identities.
One operator.

CLUSTER_FORMED · C-1842 · CONFIDENCE 0.94
IDENTITIES12
DEVICES4
NETWORKS8
WITHDRAWAL WALLETS3
COMMON FUNDING SOURCE1
94RISK
/ 100
SCROLL
OBSERVE

Every identity
leaves a trail.

One signal means little. Together, they become evidence.

ACCOUNT_CREATED
DEVICE_SEEN  dev_28A1
IP_RESOLVED  85.19.114.6
DEPOSIT_RECEIVED  $1,450 · TRON
SOURCE_RESOLVED  TJx8…9QZ
41
CLUSTER CONFIDENCE
HIGH-RISK CLUSTER
IDENTITY

Fresh account.
Same machine.

New username. New email. New IP. Everything looks different — until Ithax reads what can't be faked.

DEVICE_REUSED · dev_28A1
COMMON_DEPOSIT_SOURCE · TJx8…9QZ
SHARED_WITHDRAWAL_WALLET · TQm4…2Lk
3 users1 cluster
ACCOUNT 012026-07-02
USERNAMEnordic_lars
EMAILlars.h.88@… NEW
IP91.204.… NEW
ACCOUNT 022026-07-06
USERNAMElucky_mia
EMAILmia.k.92@… NEW
IP176.10.… NEW
ACCOUNT 032026-07-11
USERNAMEjkpr_2000
EMAILjk.prb@… NEW
IP45.132.… NEW
CASINO/CLUSTER 1842/PLAYER 8192/WALLET TJX8…
CHAIN INTELLIGENCE

Follow the money.
Not the username.

A deposit is more than a number. It has a history. Ithax traces it upstream — hop by hop — until unrelated accounts resolve to one source.

SOURCEFunding wallet
CHAINTRON
RELATIONSHIP DEPTH3 hops
RELATED ACCOUNTS8
TRON DEPOSIT-SOURCE TRACING RUNS IN PRODUCTION TODAY. MULTI-CHAIN CRAWLING AND SANCTIONS / MIXER SCREENING ARE ROADMAP — NEVER IMPLIED AS LIVE.
EXPLAINABILITY

Don't give me a score.
Show me why.

RISK DECOMPOSITION · C-1842
01Shared funding wallet+36
02Shared device+25
03Shared withdrawal destination+20
04Shared network+8
05Email relationship+3
RISK / 10092
EVERY DECISION HAS AN EVIDENCE TRAIL
REAL TIME

Fraud doesn't wait for tomorrow's report.

LIVE SESSION · usr_8192
01:41:52LOGIN
01:42:03DEPOSIT$8,000 · TRON
01:42:41BET$120
01:43:15BET$300
01:44:02WITHDRAWAL_REQUEST$7,300
01:44:03NEW_RELATIONSHIPdevice match · dev_28A1
01:44:03RELATED_ACCOUNTS+11 discovered
01:44:04COMMON_FUNDING_SOURCETJx8…9QZ
01:44:04THRESHOLD_CROSSEDrisk 42 → 94
42RISK
SCORE
THRESHOLD CROSSED
HIGH RISKREVIEW REQUIRED
Withdrawal request requires review
  • Risk 94
  • 12 linked accounts
  • 1 shared funding source
94

All this intelligence. One decision.

INVESTIGATE

From signal to evidence
in seconds.

Select any entity — the universe re-centers around it. Click through the graph below.

ITHAXCASINO-A / CLUSTER C-1842 / INVESTIGATION● INVESTIGATION MODE
EVIDENCE
Shared funding source+36
Shared device+25
Shared payout wallet+20
Network relationship+8
ENTITYusr_8192
RISK SCORE92
STATUSReview
LINKED ACCOUNTS12
EXPOSURE$82,400
TIMELINE
TIME

See how the
network formed.

Scroll replays the investigation. Accounts appear, relationships form, the funding wallet surfaces — and risk climbs.

◂ REPLAY NETWORK — DRIVEN BY SCROLL
DAY 1
2 ACCOUNTS
RISK 12
DAY 1 · FIRST ACCOUNTDAY 14 · 12 ACCOUNTS
SCALE

See the structure
underneath your casino.

Ithax watches everything and surfaces only what matters. Most of the network stays quiet. Risk becomes visible when it earns attention.

48,241
EVENTS
2,914
ENTITIES
183
RELATIONSHIPS
12
CLUSTERS
3
HIGH-RISK CASES
1
NEEDS ATTENTION NOW
NOISE BECOMES INTELLIGENCE
ARCHITECTURE

From signal to action
in real time.

01
OBSERVE
Signals enter. Beacon, device, real IP, deposits, sessions.
ACCOUNT usr_8192
DEVICE_SEEN dev_28A1
02
LINK
Relationships form. Weighted account linking across every signal.
WALLET_LINKED
+11 RELATED ACCOUNTS
03
SCORE
Risk recalculates. Every score decomposes into evidence.
RISK 42 → 92
5 SIGNALS AGREE
04
DECIDE
Rules evaluate. Your policy, applied the moment it matters.
RULE: HIGH-RISK
WITHDRAWAL TRIGGERED
05
ACT
The operator receives one clear intervention.
REVIEW REQUIRED
WITHDRAWAL HELD
CONTROL

Your risk policy.
Operationalized.

WHENRisk score > 85ANDWithdrawal requested
THENHold for reviewNotify risk teamCreate case
ACTIVEEVERY TRIGGER IS TIMESTAMPED, ATTRIBUTED AND AUDITABLE

Automated detection.
Controlled action.

Ithax identifies risk the moment it forms. What happens next is governed by your policies and your people — serious decisions stay under human oversight.

ITHAX CAN — flag · watch · hold · request verification · freeze where configured · escalate
YOUR TEAM DECIDES — releases · closures · irreversible account actions
CRYPTO-NATIVE

Identity ends at the account.
Money doesn't.

On a crypto casino, the wallet is a second identity layer — one that survives every fresh signup.

ACCOUNTusr_8192
WALLETTJx8…9QZ
TRANSACTION$5,000 · TRON
FUNDING SOURCETUh2…5Ud
RELATED ACCOUNTS8 RESOLVED
ITHAX NETWORK VISION

One attack can become
everyone's warning.

A fingerprint caught at one operator becomes a privacy-safe risk signal for the next. Raw player data never leaves its tenant — only the warning travels.

CASINO A DATA — NEVER LEAVES TENANT
CASINO B DATA — NEVER LEAVES TENANT
PRIVACY-SAFE NETWORK SIGNAL
PRODUCTION

Built against
real casino risk.

Ithax's current detection systems run inside gambid.gg. What's live is live. What's next is labeled.

CURRENT LIVE

  • Beacon signal collection & real IP capture
  • Device fingerprinting
  • Deposit signals & reverse indexes
  • Weighted account linking
  • Cluster detection & risk scoring
  • Real-time multi-account alerts+ TELEGRAM
  • Tron deposit-source tracing
  • Risk / multi-account dashboard
ITHAX

See what everyone
else misses.

Link accounts, devices, networks and blockchain activity into one live risk picture.