← Back to case queue

Case #003

IP Country Mismatch

Potential Control Failure
Review period
July 2026
Registered country
Romania
Primary login country
Ireland
Status
Needs Review

Trigger

Why was this case selected?

Registered country

Romania

Review period

July 2026

Recent login distribution

Ireland
68% (49)
Romania
24% (17)
Other
8% (6)

More than 20 logins occurred outside the customer's registered country during the review period.

AI Investigation

What appears to have happened

Mock AI output

Login activity from Ireland has grown steadily over the last three review periods and now makes up the majority of sessions. Funding remains a Romanian bank account, but recent transactions increasingly show Irish payroll-style credits and Irish merchant spend. No updated address evidence has been submitted since onboarding, and the customer has not been asked to clarify a change of circumstances.

Key Evidence

Login Activity

Wallet Admin

Irish logins have increased from 40% to 68% of sessions over the last three periods.

Payment & Funding

Payment Instruments

Funding account remains Romanian, but recurring Irish-sourced credits now appear monthly.

Transaction Activity

Core Banking

Irish merchant spend now exceeds Romanian merchant spend.

KYC

KYC System

Identity verified against a Romanian passport at onboarding; no re-verification since.

Address Verification

KYC System

Address evidence is unchanged since onboarding and has not been refreshed.

Previous Reviews

Case Management

A prior review six months ago flagged rising Irish login share but closed with no action.

Control / Policy Check

Prototype policy · synthetic example
Requirement
Current residential address must be supported by qualifying recent proof of address.
Observed
Address evidence on file dates to onboarding and has not been refreshed despite a sustained shift in behavior.
Additional context
Recurring Irish-sourced income and a rising share of Irish logins and spend suggest a possible change of residence.
Potential discrepancy
No updated proof-of-address document reflecting a potential Irish residence is recorded.

Agent Conclusion

Mock AI output

POTENTIAL CONTROL FAILURE

A sustained, multi-period shift toward Irish login activity, income, and spend was previously identified but not acted on. Address evidence has not been refreshed to reflect a possible change of residence.

Recommended action

Contact the customer to confirm current residence and request updated proof of address; re-open and review the prior monitoring case.

Evidence supporting conclusion

4 sources

Confidence

Medium

Human Review

The AI recommendation is a starting point, not the final decision. You own this decision.