Prevention · pipeline
Disruption, one signed step at a time
A takedown is four states: preserve, approve, act, done. Nothing skips a state, and nothing reaches 'done' without a confirmation rather than an assumption.
Takedowns in flight
pipeline14
Confirmed complete
never assumed4
Victims averted
estimate2,289
IL Modelled reach, not a measured count.
Suspect register
identifiers26
Hashed identifiers across four partner institutions — gap G18.
Takedown pipeline
preserve → approve → act → done18 in the pipelineact requires a signature
Preserve · 6
Evidence held while authority is sought
TD-2026-7700 · Social account
x/@fastpaisa_official
TikTok
TD-2026-7708 · Short-code
meta/claim-verify-uk
Google
TD-2026-7709 · App
x/@fastpaisa_official
Meta
TD-2026-7713 · App
apk/secure-update-3
Google
TD-2026-7716 · App
x/@fastpaisa_official
X
TD-2026-7705 · App
x/@fastpaisa_official
TikTok
Approve · 4
A named officer signs, with a legal basis
TD-2026-7717 · Domain
trendfinance[.]pk
WhatsApp
TD-2026-7706 · Wallet
shortcode 8811
TikTok
TD-2026-7707 · Short-code
meta/claim-verify-uk
X
TD-2026-7701 · App
trendfinance[.]pk
Google
Act · 4
Notice served on the platform or operator
TD-2026-7710 · URL
apk/secure-update-3
Telegram
TD-2026-7712 · Short-code
meta/claim-verify-uk
YouTube
TD-2026-7711 · Social account
wallet-merchant-4471
YouTube
TD-2026-7714 · Channel
shortcode 8811
Google
Done · 4
Confirmed complete — never assumed
TD-2026-7702 · Channel
apk/secure-update-3
YouTube
TD-2026-7703 · Short-code
apk/secure-update-3
TikTok
TD-2026-7704 · Wallet
trendfinance[.]pk
X
TD-2026-7715 · Channel
meta/claim-verify-uk
X
Suspect register
hit counts| Identifier | Kind | Hits | Source |
|---|---|---|---|
| 884934ada7bf6bc2b7… | Device ID | 19 | Internal |
| 1162b142e76e6bcbfa… | IMEI | 18 | Wallet |
| de8b11391011374d12… | Wallet | 18 | Internal |
| 990bbb8feb90848457… | Device ID | 18 | Wallet |
| 8786b039d24dac1175… | Device ID | 18 | Wallet |
| c849fe748e791cb15f… | IMEI | 16 | Platform |
| b57d0078efc6d11fec… | IMEI | 16 | Platform |
| b5e5746e1e01ed0f17… | Device ID | 15 | Platform |
| ecb70bda8b92d2844d… | MSISDN | 15 | Wallet |
| e0ddefc6fdefbdd537… | MSISDN | 14 | Wallet |
| 6fc7677490b3b0268c… | IMEI | 11 | Telco |
| ff34cf0ee45edb3220… | Device ID | 11 | Platform |
| 9f573e7865836091e4… | Wallet | 10 | Internal |
| 0af50d32f66e974263… | MSISDN | 10 | Internal |
| ffb0404f54b0ee0fa3… | IBAN | 10 | Telco |
| 482a9cf71a3cb639a1… | MSISDN | 9 | Platform |
| f615017a56eab8665c… | IMEI | 7 | Platform |
| 4ff4e3d3fb192866bb… | MSISDN | 6 | Telco |
| 75d930e1573d05e693… | IBAN | 6 | Wallet |
| 4e27e88a00f71c0262… | IMEI | 5 | Internal |
| 8e935d1e906f2f536c… | MSISDN | 5 | Internal |
| ee650e2218d25e2bd8… | Device ID | 4 | Internal |
| 75e2a851cfae113c95… | IBAN | 4 | Bank |
| 3a18c723d490793c34… | Wallet | 4 | Bank |
| c17f7140ddd7492ae5… | Wallet | 4 | Platform |
| 25e080846d26bae776… | Wallet | 3 | Internal |
Stage balance
where work accumulatespreserve6
approve4
act4
done4
Queue build-up at approve is a signature bottleneck, not an intelligence one. That is an operational decision about delegation, not a technical defect.