What does "Online Fraud Indicators - High Threat" mean?
A connection or location risk signal to resolve - not a failed verification.
It means the verification session showed connection or location signals associated with fraud risk - such as VPN use, mismatched geolocation, or suspicious device behaviour - not that your client failed verification.
- Don't dismiss it automatically - treat it as a risk signal to resolve, like a screening match.
- Consider innocent explanations first: a client overseas, on a corporate VPN, or on a work device commonly triggers these flags.
- Ask the client where and how they completed the check - routine questions aren't tipping off.
- If unresolved, escalate to your Compliance Officer and consider Enhanced Due Diligence.
Further reading: Does easyAML check whether the client is using a VPN?